Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


H

Http as Destination - no encryption

Checked:
14.03.2019 00:50:27


Older results

No older results found

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
liderbit.biz
A
185.186.53.228
yes
2
0

AAAA

yes


www.liderbit.biz
C
liderbit.biz
yes
1
0

A
185.186.53.228
yes



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

3 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 16749, Flags 256

Public Key with Algorithm 8, KeyTag 19164, Flags 385

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

2 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.04.2019, 00:00:00, Signature-Inception: 12.03.2019, 00:00:00, KeyTag 19164, Signer-Name: (root)

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.04.2019, 00:00:00, Signature-Inception: 12.03.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 19164 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
biz
4 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 26.03.2019, 17:00:00, Signature-Inception: 13.03.2019, 16:00:00, KeyTag 16749, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 16749 used to validate the DS RRSet in the parent zone

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 24963, Flags 256

Public Key with Algorithm 8, KeyTag 28450, Flags 257 (SEP = Secure Entry Point)

2 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 900 sec, Signature-expiration: 08.04.2019, 15:20:19, Signature-Inception: 09.03.2019, 15:15:27, KeyTag 24963, Signer-Name: biz

Algorithm: 8, 1 Labels, original TTL: 900 sec, Signature-expiration: 08.04.2019, 15:20:19, Signature-Inception: 09.03.2019, 15:15:27, KeyTag 28450, Signer-Name: biz

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 24963 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 28450 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 28450, DigestType 1 and Digest "2cL5EsZX5ABc8ME7pVxaqika71Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 28450, DigestType 2 and Digest "QD8jRgnFazoiG8TPtpSUirXd9KJq4XQ5vxJ5z8XPIas=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
liderbit.biz
0 DS RR in the parent zone found

0 DNSKEY RR found


www.liderbit.biz
0 DS RR in the parent zone found


DomainNameserverNS-IP
liderbit.biz
  ns1.easy-geo-dns.com / de2-44
185.136.96.181

  ns2.easy-geo-dns.com / de2-44
185.136.97.181

  ns3.easy-geo-dns.com / de2-44
185.136.98.181

  ns4.easy-geo-dns.com / de2-44
185.136.99.181
biz
  a.gtld.biz


  b.gtld.biz


  c.gtld.biz


  e.gtld.biz


  f.gtld.biz


  k.gtld.biz



SOA - records (beta)

Domain:biz
Primary:a.gtld.biz
Mail:hostmaster.neustar.biz
Serial:1552520383
Refresh:900
Retry:900
Expire:604800
TTL:86400
num Entries:6


Domain:liderbit.biz
Primary:ns1.easy-geo-dns.com
Mail:hostmaster.geniusguard.com
Serial:2019031002
Refresh:21600
Retry:3600
Expire:1209600
TTL:10800
num Entries:4


2. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://liderbit.biz/
185.186.53.228
301
https://liderbit.biz/
0.340
A
Date: Wed, 13 Mar 2019 23:51:34 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Location: https://liderbit.biz/
Server: NGUARDX

• http://www.liderbit.biz/
185.186.53.228
301
https://liderbit.biz/
0.330
E
Date: Wed, 13 Mar 2019 23:51:34 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Location: https://liderbit.biz/
Server: NGUARDX

• https://liderbit.biz/
185.186.53.228
201

3.494
B
Date: Wed, 13 Mar 2019 23:51:36 GMT
Content-Type: application/octet-stream,text/html
Content-Length: 963
Connection: close
Server: NGUARDX
Set-Cookie: ForceCaptcha=true; Path=/; Domain=liderbit.biz; Expires=2019-03-14 00:56:36

• https://www.liderbit.biz/
185.186.53.228
201

3.343
B
Date: Wed, 13 Mar 2019 23:51:39 GMT
Content-Type: application/octet-stream,text/html
Content-Length: 975
Connection: close
Server: NGUARDX
Set-Cookie: ForceCaptcha=true; Path=/; Domain=liderbit.biz; Expires=2019-03-14 00:56:40

• http://liderbit.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
185.186.53.228
301
https://liderbit.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.337
A
Visible Content: 301 Moved Permanently nginx
Date: Wed, 13 Mar 2019 23:51:42 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Location: https://liderbit.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: NGUARDX

• http://www.liderbit.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
185.186.53.228
301
https://liderbit.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
0.334
E
Visible Content: 301 Moved Permanently nginx
Date: Wed, 13 Mar 2019 23:51:43 GMT
Content-Type: text/html
Content-Length: 178
Connection: close
Location: https://liderbit.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: NGUARDX

• https://liderbit.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

404

2.584
A
Not Found
Visible Content: Not Found The requested URL /.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de was not found on this server. Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.
Date: Wed, 13 Mar 2019 23:51:43 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 386
Connection: close
Vary: Accept-Encoding
Server: NGUARDX

3. Comments

Aname "liderbit.biz" is domain, public suffix is "biz", top-level-domain-type is "generic-restricted", tld-manager is "Neustar, Inc."
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
Agood: destination is https
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Ahttp://liderbit.biz/ 185.186.53.228
301
https://liderbit.biz/
correct redirect http - https with the same domain name
Bhttps://liderbit.biz/ 185.186.53.228
201

Missing HSTS-Header
Bhttps://www.liderbit.biz/ 185.186.53.228
201

Missing HSTS-Header
CError - no preferred version www or non-www
CError - no version with Http-Status 200
Ehttp://www.liderbit.biz/ 185.186.53.228
301
https://liderbit.biz/
wrong redirect one domain http to other domain https - first redirect to https without new dns query, so the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security).
AGood: Nameserver supports TCP connections: 4 good Nameserver
AGood: Nameserver supports Echo Capitalization: 4 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 4 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 4 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
https://liderbit.biz/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
2.584 seconds
Warning: 404 needs more then one second
ADuration: 78174 milliseconds, 78.174 seconds


4. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
liderbit.biz
185.186.53.228
443
ok
Tls12
DiffieHellman
4096
Aes256
256
Sha384
error checking OCSP stapling
ok
Chain (complete)
1OU = Domain Control Validated, OU = EssentialSSL, CN = www.liderbit.biz

2C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

3C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
www.liderbit.biz
185.186.53.228
443
ok
Tls12
DiffieHellman
4096
Aes256
256
Sha384
error checking OCSP stapling
ok
Chain (complete)
1OU = Domain Control Validated, OU = EssentialSSL, CN = www.liderbit.biz

2C = GB, ST = Greater Manchester, L = Salford, O = Sectigo Limited, CN = Sectigo RSA Domain Validation Secure Server CA

3C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority


5. Certificates

1.
1.
CN=www.liderbit.biz, OU=EssentialSSL, OU=Domain Control Validated
10.03.2019
10.03.2020
expires in 290 days
www.liderbit.biz, liderbit.biz - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00B1894D0863D4B3A44FAD6279CF0BBFB3
Thumbprint:C2F4A0B9E3A4D4222041B8D0FCD7AE797A307FF6
SHA256 / Certificate:IqnYF1uXiW3Wum7RLtCI+zK2xenEzBM5uI7f3T4vogQ=
SHA256 hex / Cert (DANE * 0 1):22a9d8175b97896dd6ba6ed12ed088fb32b6c5e9c4cc1339b88edfdd3e2fa204
SHA256 hex / PublicKey (DANE * 1 1):7133e757bca98ce7230bf92ab8c794455b0cefe025447dae95c51e8ac45fd415
OCSP - Url:http://ocsp.sectigo.com
OCSP - must staple:no
Certificate Transparency:yes


2.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018
01.01.2031
expires in 4239 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):7fa4ff68ec04a99d7528d5085f94907f4d1dd1c5381bacdc832ed5c960214676
SHA256 hex / PublicKey (DANE * 1 1):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
OCSP - Url:http://ocsp.usertrust.com
OCSP - must staple:no
Certificate Transparency:no


3.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
30.05.2000
30.05.2020
expires in 371 days


KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:13EA28705BF4ECED0C36630980614336
Thumbprint:EAB040689A0D805B5D6FD654FC168CFF00B78BE3
SHA256 / Certificate:GlF0mAopSlKKEQcm1YVWUCZsSNmIO+ppK2e21ybamMU=
SHA256 hex / Cert (DANE * 0 1):1a5174980a294a528a110726d5855650266c48d9883bea692b67b6d726da98c5
SHA256 hex / PublicKey (DANE * 1 1):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
OCSP - Url:http://ocsp.usertrust.com
OCSP - must staple:no
Certificate Transparency:no


4.
CN=AddTrust External CA Root, OU=AddTrust External TTP Network, O=AddTrust AB, C=SE
30.05.2000
30.05.2020
expires in 371 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:01
Thumbprint:02FAF3E291435468607857694DF5E45B68851868
SHA256 / Certificate:aH+kUTgieP/wyLEfjUPVdmccbrK86rQT+4PZZdBtL/I=
SHA256 hex / Cert (DANE * 0 1):687fa451382278fff0c8b11f8d43d576671c6eb2bceab413fb83d965d06d2ff2
SHA256 hex / PublicKey (DANE * 1 1):942a6916a6e4ae527711c5450247a2a74fb8e156a8254ca66e739a11493bb445
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no



6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

No CertSpotter - Certificate-Transparency-Log informations found. The feature is new (startet 2019-05-07), so recheck this domain.


2. Source crt.sh - old and new certificates, sometimes very slow.

No Certificate-Transparency-Log informations found. The feature is new (startet 2019-03-21), so recheck this domain.


7. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.liderbit.biz



1
0
liderbit.biz
0

no CAA entry found
1
0
biz
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
liderbit.biz
v=spf1 +a +mx +ip4:185.186.53.2 +ip4:185.186.53.3 ~all
ok
1
0
www.liderbit.biz
v=spf1 +a +mx +ip4:185.186.53.2 +ip4:185.186.53.3 ~all
ok
1
0
_acme-challenge.liderbit.biz

Name Error - The domain name does not exist
1
0
_acme-challenge.www.liderbit.biz

Name Error - The domain name does not exist
1
0
_acme-challenge.liderbit.biz.liderbit.biz

Name Error - The domain name does not exist
1
0
_acme-challenge.www.liderbit.biz.www.liderbit.biz

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=f34c5328-4aa8-4f88-8fcd-eb7914679390


Last Result: https://check-your-website.server-daten.de/?q=liderbit.biz - 2019-03-14 00:50:27