Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

A

 

Top config

 

Checked:
09.11.2023 02:45:58

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
mom.com
A
3.79.76.132
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-79-76-132.eu-central-1.compute.amazonaws.com
yes
1
0

A
3.121.122.184
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-121-122-184.eu-central-1.compute.amazonaws.com
yes
1
0

AAAA

yes


www.mom.com
A
3.78.41.232
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-78-41-232.eu-central-1.compute.amazonaws.com
yes
1
0

A
3.121.122.184
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
Hostname: ec2-3-121-122-184.eu-central-1.compute.amazonaws.com
yes
1
0

AAAA

yes


www.mom.com
A
3.79.76.132
Frankfurt am Main/Hesse/Germany (DE) - Amazon Technologies Inc.
No Hostname found
no


*.mom.com
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 46780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2023, 00:00:00 +, Signature-Inception: 31.10.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: com

com
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest 4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=






1 RRSIG RR to validate DS RR found






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 21.11.2023, 21:00:00 +, Signature-Inception: 08.11.2023, 20:00:00 +, KeyTag 46780, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46780 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 63246, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 21.11.2023, 17:24:21 +, Signature-Inception: 06.11.2023, 17:19:21 +, KeyTag 30909, Signer-Name: com






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: mom.com

mom.com
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "utt9g3eqhfqikejk9lt62vsgm9m6p7nk" between the hashed NSEC3-owner "utt9bgroeejh7gukv3e2hf342qn2ijkk" and the hashed NextOwner "utt9jtaf7735tj78snhmgt3sni6meq2v". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner utt9bgroeejh7gukv3e2hf342qn2ijkk.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 14.11.2023, 06:45:59 +, Signature-Inception: 07.11.2023, 05:35:59 +, KeyTag 63246, Signer-Name: com






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q2d6ni4i7eqh8na30ns61o48ul8g5". So that domain name is the Closest Encloser of "mom.com". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 14.11.2023, 05:25:50 +, Signature-Inception: 07.11.2023, 04:15:50 +, KeyTag 63246, Signer-Name: com






0 DNSKEY RR found









Zone: www.mom.com

www.mom.com
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
www.mom.com
  dns1.p08.nsone.net / ns1dns-fra03-386-5310-0

mom.com
  dns1.p08.nsone.net / ns1dns-fra03-386-5301-0
198.51.44.8
New York/United States (US) - NSONE Inc


 
2620:4d:4000:6259:7:8:0:1
Toronto/Ohio/United States (US) - NSONE Inc


  dns2.p08.nsone.net / ns1dns-fra03-387-5305-0
198.51.45.8
New York/United States (US) - NSONE Inc


 
2a00:edc0:6259:7:8::2
Amsterdam/North Holland/Netherlands (NL) - NS1


  dns3.p08.nsone.net / ns1dns-fra03-386-5309-0
198.51.44.72
New York/United States (US) - NSONE Inc


 
2620:4d:4000:6259:7:8:0:3
Toronto/Ohio/United States (US) - NSONE Inc


  dns4.p08.nsone.net / ns1dns-fra03-387-5313-0
198.51.45.72
New York/United States (US) - NSONE Inc


 
2a00:edc0:6259:7:8::4
Amsterdam/North Holland/Netherlands (NL) - NS1

com
  a.gtld-servers.net / nnn1-par6


  b.gtld-servers.net / nnn1-eltxl1


  c.gtld-servers.net / nnn1-par6


  d.gtld-servers.net / nnn1-par6


  e.gtld-servers.net / nnn1-par6


  f.gtld-servers.net / nnn1-defra-4


  g.gtld-servers.net / nnn1-defra-4


  h.gtld-servers.net / nnn1-defra-4


  i.gtld-servers.net / nnn1-defra-4


  j.gtld-servers.net / nnn1-frmrs-2


  k.gtld-servers.net / nnn1-frmrs-2


  l.gtld-servers.net / nnn1-frmrs-2


  m.gtld-servers.net / nnn1-frmrs-2

 

4. SOA-Entries


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1699494334
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:5


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1699494349
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:8


Domain:mom.com
Zone-Name:mom.com
Primary:dns1.p08.nsone.net
Mail:hostmaster.nsone.net
Serial:1663205667
Refresh:43200
Retry:7200
Expire:1209600
TTL:3600
num Entries:8


Domain:www.mom.com
Zone-Name:mom.com
Primary:dns1.p08.nsone.net
Mail:hostmaster.nsone.net
Serial:1663205667
Refresh:43200
Retry:7200
Expire:1209600
TTL:3600
num Entries:1


5. Screenshots

Startaddress: https://mom.com/, address used: https://mom.com/, Screenshot created 2023-11-09 02:50:36 +00:0

 

Mobil (412px x 732px)

 

1468 milliseconds

 

Screenshot mobile - https://mom.com/
Mobil + Landscape (732px x 412px)

 

1015 milliseconds

 

Screenshot mobile landscape - https://mom.com/
Screen (1280px x 1680px)

 

1986 milliseconds

 

Screenshot Desktop - https://mom.com/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport396732
content Size3965132

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://mom.com/
3.79.76.132
301
https://mom.com/
Html is minified: 100.00 %
0.047
A
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Nov 2023 01:46:53 GMT
Location: https://mom.com/
Server: Netlify
X-Nf-Request-Id: 01HERW5HH52KP1XBRYMAR5B0N7
Content-Length: 31
Connection: close

• http://mom.com/
3.121.122.184
301
https://mom.com/
Html is minified: 100.00 %
0.063
A
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Nov 2023 01:46:53 GMT
Location: https://mom.com/
Server: Netlify
X-Nf-Request-Id: 01HERW5HF2C55X82670ZDEAS78
Content-Length: 31
Connection: close

• http://www.mom.com/
3.78.41.232
301
https://www.mom.com/
Html is minified: 100.00 %
0.187
A
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Nov 2023 01:46:54 GMT
Location: https://www.mom.com/
Server: Netlify
X-Nf-Request-Id: 01HERW5HMPP5Z76QPG9E3K58Z3
Content-Length: 35
Connection: close

• http://www.mom.com/
3.79.76.132
301
https://www.mom.com/
Html is minified: 100.00 %
0.030
A
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Nov 2023 01:46:54 GMT
Location: https://www.mom.com/
Server: Netlify
X-Nf-Request-Id: 01HERW5HTP5Y2Y1DAET7DRKRX7
Content-Length: 35
Connection: close

• http://www.mom.com/
3.121.122.184
301
https://www.mom.com/
Html is minified: 100.00 %
0.047
A
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Nov 2023 01:46:53 GMT
Location: https://www.mom.com/
Server: Netlify
X-Nf-Request-Id: 01HERW5HK10RAFBMZBSKNTYQT3
Content-Length: 35
Connection: close

• https://www.mom.com/
3.78.41.232
301
https://mom.com/
Html is minified: 100.00 %
1.907
A
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Nov 2023 01:47:03 GMT
Location: https://mom.com/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01HERW5V68EYQN980SVCSN0YQV
Content-Length: 31
Connection: close

• https://www.mom.com/
3.79.76.132
301
https://mom.com/
Html is minified: 100.00 %
1.877
A
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Nov 2023 01:47:06 GMT
Location: https://mom.com/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01HERW5XVQY38D48ECE2F6D1H2
Content-Length: 31
Connection: close

• https://www.mom.com/
3.121.122.184
301
https://mom.com/
Html is minified: 100.00 %
1.907
A
Content-Type: text/plain; charset=utf-8
Date: Thu, 09 Nov 2023 01:47:01 GMT
Location: https://mom.com/
Server: Netlify
Strict-Transport-Security: max-age=31536000
X-Nf-Request-Id: 01HERW5RGMN0PR84FEJSCA8BZZ
Content-Length: 31
Connection: close

• https://mom.com/
3.79.76.132
Inline-JavaScript (∑/total): 13/11225 Inline-CSS (∑/total): 1/1125
200

Html is minified: 336.13 %
Other inline scripts (∑/total): 11/11225
1.763
A
small visible content (num chars: 46)
You need to enable JavaScript to run this app.
Accept-Ranges: bytes
Age: 3096
Cache-Control: public,max-age=0,must-revalidate
Content-Encoding: gzip
Content-Length: 6196
Content-Type: text/html; charset=UTF-8
Date: Thu, 09 Nov 2023 01:46:57 GMT
Etag: "88f6a3d7065252c0c7a7f5efe791bafa-ssl-df"
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Nf-Request-Id: 01HERW5NF1HY4VZWCQTXXMPBVX
Connection: close

• https://mom.com/
3.121.122.184
Inline-JavaScript (∑/total): 13/11225 Inline-CSS (∑/total): 1/1125
200

Html is minified: 336.13 %
Other inline scripts (∑/total): 11/11225
1.907
A
small visible content (num chars: 46)
You need to enable JavaScript to run this app.
Accept-Ranges: bytes
Age: 800
Cache-Control: public,max-age=0,must-revalidate
Content-Encoding: gzip
Content-Length: 6196
Content-Type: text/html; charset=UTF-8
Date: Thu, 09 Nov 2023 01:46:54 GMT
Etag: "88f6a3d7065252c0c7a7f5efe791bafa-ssl-df"
Server: Netlify
Strict-Transport-Security: max-age=31536000
Vary: Accept-Encoding
X-Nf-Request-Id: 01HERW5HZYD40GG9BGW1PKFTA0
Connection: close

• http://mom.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.79.76.132
404


0.173
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Content-Length: 0
Date: Thu, 09 Nov 2023 01:47:09 GMT
Server: Netlify
X-Nf-Request-Id: 01HERW611RRD1HR8SZQVPJQDQM
Connection: close

• http://mom.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.121.122.184
404


0.190
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Content-Length: 0
Date: Thu, 09 Nov 2023 01:47:09 GMT
Server: Netlify
X-Nf-Request-Id: 01HERW60EQFGC37MZDK2SQ6DCQ
Connection: close

• http://www.mom.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.78.41.232
404


0.297
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Content-Length: 0
Date: Thu, 09 Nov 2023 01:47:11 GMT
Server: Netlify
X-Nf-Request-Id: 01HERW627Y9GGQ2HJR6TSB8709
Connection: close

• http://www.mom.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.79.76.132
404


0.170
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Content-Length: 0
Date: Thu, 09 Nov 2023 01:47:11 GMT
Server: Netlify
X-Nf-Request-Id: 01HERW62YZCYY75FBBGCBBEKX1
Connection: close

• http://www.mom.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
3.121.122.184
404


0.170
A
Not Found
Visible Content:
Age: 0
Cache-Control: no-store
Content-Length: 0
Date: Thu, 09 Nov 2023 01:47:10 GMT
Server: Netlify
X-Nf-Request-Id: 01HERW61MPZ6HQPX4BG5AF9MKF
Connection: close

• https://3.78.41.232/
3.78.41.232
404


1.763
N
Not Found
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 0)
Date: Thu, 09 Nov 2023 01:47:18 GMT
Server: Netlify
X-Nf-Request-Id: 01HERW69MCX8R9SRJN2427854P
Content-Length: 0
Connection: close

• https://3.79.76.132/
3.79.76.132
404


1.793
N
Not Found
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 0)
Date: Thu, 09 Nov 2023 01:47:15 GMT
Server: Netlify
X-Nf-Request-Id: 01HERW66NV39NF19G8GDG37MME
Content-Length: 0
Connection: close

• https://3.121.122.184/
3.121.122.184
404


1.843
N
Not Found
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 0)
Date: Thu, 09 Nov 2023 01:47:12 GMT
Server: Netlify
X-Nf-Request-Id: 01HERW63PE70T6XVZR7W59BBVC
Content-Length: 0
Connection: close

 

7. Comments


1. General Results, most used to calculate the result

Aname "mom.com" is domain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 89449 (complete: 231048)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: mom.com has 2 different ip addresses (authoritative).
AGood: Minimal 2 ip addresses per domain name found: www.mom.com has 2 different ip addresses (authoritative).
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: mom.com has no ipv6 address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.mom.com has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
Ahttp://mom.com/ 3.79.76.132
301
https://mom.com/
Correct redirect http - https with the same domain name
Ahttp://mom.com/ 3.121.122.184
301
https://mom.com/
Correct redirect http - https with the same domain name
Ahttp://www.mom.com/ 3.78.41.232
301
https://www.mom.com/
Correct redirect http - https with the same domain name
Ahttp://www.mom.com/ 3.79.76.132
301
https://www.mom.com/
Correct redirect http - https with the same domain name
Ahttp://www.mom.com/ 3.121.122.184
301
https://www.mom.com/
Correct redirect http - https with the same domain name
Mhttps://3.79.76.132/ 3.79.76.132
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://3.121.122.184/ 3.121.122.184
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://3.78.41.232/ 3.78.41.232
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://3.79.76.132/ 3.79.76.132
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://3.121.122.184/ 3.121.122.184
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://3.78.41.232/ 3.78.41.232
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain mom.com, 2 ip addresses.
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain www.mom.com, 2 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain mom.com, 2 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.mom.com, 2 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.mom.com

2. Header-Checks

Fmom.com 3.79.76.132
Content-Security-Policy
Critical: Missing Header:
Fmom.com 3.79.76.132
X-Content-Type-Options
Critical: Missing Header:
Fmom.com 3.79.76.132
Referrer-Policy
Critical: Missing Header:
Fmom.com 3.79.76.132
Permissions-Policy
Critical: Missing Header:
Fmom.com 3.121.122.184
Content-Security-Policy
Critical: Missing Header:
Fmom.com 3.121.122.184
X-Content-Type-Options
Critical: Missing Header:
Fmom.com 3.121.122.184
Referrer-Policy
Critical: Missing Header:
Fmom.com 3.121.122.184
Permissions-Policy
Critical: Missing Header:

3. DNS- and NameServer - Checks

AInfo:: 13 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 4 Name Servers.
AInfo:: 13 Queries complete, 13 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 3.3 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 4 different Name Servers found: dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, 4 Name Servers included in Delegation: dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, 4 Name Servers included in 1 Zone definitions: dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net, 1 Name Servers listed in SOA.Primary: dns1.p08.nsone.net.
AGood: Only one SOA.Primary Name Server found.: dns1.p08.nsone.net.
AGood: SOA.Primary Name Server included in the delegation set.: dns1.p08.nsone.net.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 4 different Name Servers found
AGood: All name servers have ipv4- and ipv6-addresses.: 4 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 4 Name Servers, 1 Top Level Domain: net
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: nsone.net
AGood: Name servers with different Country locations found: 4 Name Servers, 2 Countries: NL, US
AInfo: Ipv4-Subnet-list: 4 Name Servers, 1 different subnets (first Byte): 198., 1 different subnets (first two Bytes): 198.51., 2 different subnets (first three Bytes): 198.51.44., 198.51.45.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 4 Name Servers with IPv6, 2 different subnets (first block): 2620:, 2a00:, 2 different subnets (first two blocks): 2620:004d:, 2a00:edc0:, 2 different subnets (first three blocks): 2620:004d:4000:, 2a00:edc0:6259:, 2 different subnets (first four blocks): 2620:004d:4000:6259:, 2a00:edc0:6259:0007:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 8 good Nameserver
AGood: Nameserver supports Echo Capitalization: 8 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 8 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 8 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://mom.com/ 3.79.76.132
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://mom.com/ 3.121.122.184
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://mom.com/ 3.79.76.132
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://mom.com/ 3.121.122.184
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
AGood: Some script Elements (type text/javascript) with a src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
https://mom.com/ 3.79.76.132
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
https://mom.com/ 3.121.122.184
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 2 script elements without defer/async.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 10 external CSS / JavaScript files found
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 10 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 10 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://3.79.76.132/ 3.79.76.132
404
1.793 seconds
Warning: 404 needs more then one second
https://3.121.122.184/ 3.121.122.184
404
1.843 seconds
Warning: 404 needs more then one second
https://3.78.41.232/ 3.78.41.232
404
1.763 seconds
Warning: 404 needs more then one second
ADuration: 290560 milliseconds, 290.560 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
mom.com
3.79.76.132
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
mom.com
3.79.76.132
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=*.mom.com


2CN=R3, O=Let's Encrypt, C=US


3CN=ISRG Root X1, O=Internet Security Research Group, C=US


mom.com
3.121.122.184
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

mom.com
3.121.122.184
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=*.mom.com


2CN=R3, O=Let's Encrypt, C=US


3CN=ISRG Root X1, O=Internet Security Research Group, C=US


www.mom.com
3.78.41.232
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.mom.com
3.78.41.232
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=*.mom.com


2CN=R3, O=Let's Encrypt, C=US


3CN=ISRG Root X1, O=Internet Security Research Group, C=US


www.mom.com
3.79.76.132
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.mom.com
3.79.76.132
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=*.mom.com


2CN=R3, O=Let's Encrypt, C=US


3CN=ISRG Root X1, O=Internet Security Research Group, C=US


www.mom.com
3.121.122.184
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.mom.com
3.121.122.184
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=*.mom.com


2CN=R3, O=Let's Encrypt, C=US


3CN=ISRG Root X1, O=Internet Security Research Group, C=US


3.78.41.232
3.78.41.232
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

3.78.41.232
3.78.41.232
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


3.79.76.132
3.79.76.132
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

3.79.76.132
3.79.76.132
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


3.121.122.184
3.121.122.184
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

3.121.122.184
3.121.122.184
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, C=US, ST=California


2CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US

 

9. Certificates

1.
1.
CN=*.mom.com
01.10.2023
30.12.2023
926 days expired
*.mom.com, mom.com - 2 entries
1.
1.
CN=*.mom.com
01.10.2023

30.12.2023
926 days expired


*.mom.com, mom.com - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:SHA256 With RSA-Encryption
Serial Number:03EC12E48367F893856D4D3F51427E710B52
Thumbprint:D609763BC7EB1865E3E8F5E75EC3A49E519E05BE
SHA256 / Certificate:8pLokeLzr9UHP5HB1dbVOYlpAxo+DVCbnK9w01c7ANA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):65ca6a4a51b331c681587217dc57b96581e7f5cc76376b735db7138d3255cff0
SHA256 hex / Subject Public Key Information (SPKI):65ca6a4a51b331c681587217dc57b96581e7f5cc76376b735db7138d3255cff0 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://r3.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020
15.09.2025
301 days expired


2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020

15.09.2025
301 days expired




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3248 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3248 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, S=California, C=US
21.12.2022
22.01.2024
903 days expired
*.netlify.app, netlify.app - 2 entries
2.
1.
CN=*.netlify.app, O="Netlify, Inc", L=San Francisco, S=California, C=US
21.12.2022

22.01.2024
903 days expired


*.netlify.app, netlify.app - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:025A610F58EB84F1AD53AE03DCA9847A
Thumbprint:9075F4E01B989D01B058B3E33BDBDAE024FA9F82
SHA256 / Certificate:KN93LPp0JD3EP3mckEkFslJbi1BUFVHtzXzZcw0RRhA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):0c5bf4acf22686578bcc8bdcb6f12eb016b9c27cd0ffe692ab25b5f32dba2feb
SHA256 hex / Subject Public Key Information (SPKI):0c5bf4acf22686578bcc8bdcb6f12eb016b9c27cd0ffe692ab25b5f32dba2feb (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US
14.04.2021
14.04.2031
expires in 1736 days


2.
CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US
14.04.2021

14.04.2031
expires in 1736 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA384 With RSA Encryption
Serial Number:07F2F35C87A877AF7AEFE947993525BD
Thumbprint:AEC13CDD5EA6A3998AEC14AC331AD96BEDBB770F
SHA256 / Certificate:96mhsv2WSj8mcL1mjVYft8VdOqmrg5Hn4WlwLbij288=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7b4211cf94e2a37180d57b387d4556987d711c3887d9d31b56d0814a438876a3
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006
10.11.2031
expires in 1946 days


3.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006

10.11.2031
expires in 1946 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:083BE056904246B1A1756AC95991C74A
Thumbprint:A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
SHA256 / Certificate:Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE=
SHA256 hex / Cert (DANE * 0 1):4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
SHA256 hex / PublicKey (DANE * 1 1):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SHA256 hex / Subject Public Key Information (SPKI):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=R3, O=Let's Encrypt, C=US
0
0
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
5940057442
leaf cert
CN=R3, O=Let's Encrypt, C=US
2023-10-01 19:03:43
2023-12-30 19:03:42
*.mom.com, mom.com - 2 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuerlast 7 daysactivenum Certs
CN=R3, O=Let's Encrypt, C=US
0 /0 new
0
3

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
10562256877
leaf cert
CN=R3, O=Let's Encrypt, C=US
2023-10-01 17:03:43
2023-12-30 18:03:42
*.mom.com, mom.com
2 entries


10119337723
precert
CN=R3, O=Let's Encrypt, C=US
2023-08-02 17:33:07
2023-10-31 18:33:06
*.mom.com, mom.com
2 entries


9578144478
leaf cert
CN=R3, O=Let's Encrypt, C=US
2023-06-03 17:51:02
2023-09-01 17:51:01
*.mom.com, mom.com
2 entries


 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://mom.com/
3.79.76.132
link
alternate
1

0


0
0
0


link
stylesheet
1

0
0
1
1
0
0
-1

link
other
15
56,514 Bytes
0
14
0
0
0
0


meta
other
6
12,126 Bytes
0
1
0
0
0
0


script

4
207,485 Bytes
0
2
2
1
0
0
-1
https://mom.com/
3.121.122.184
link
stylesheet
1

0
0
1
1
0
0
-1

link
alternate
1

0


0
0
0


link
other
15
56,514 Bytes
0
14
0
0
0
0


meta
other
6
12,126 Bytes
0
1
0
0
0
0


script

4
207,515 Bytes
0
2
2
1
0
0
-1

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
3.79.76.132
link
alternate
/rss.xml


1
ok















link
apple-touch-icon
/favicons/apple-icon-114x114.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 5218 Bytes








link
apple-touch-icon
/favicons/apple-icon-120x120.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 5448 Bytes








link
apple-touch-icon
/favicons/apple-icon-144x144.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 6642 Bytes








link
apple-touch-icon
/favicons/apple-icon-152x152.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 7022 Bytes








link
apple-touch-icon
/favicons/apple-icon-180x180.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 8365 Bytes








link
apple-touch-icon
/favicons/apple-icon-57x57.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 2592 Bytes








link
apple-touch-icon
/favicons/apple-icon-60x60.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 2700 Bytes








link
apple-touch-icon
/favicons/apple-icon-72x72.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 3297 Bytes








link
apple-touch-icon
/favicons/apple-icon-76x76.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 3492 Bytes








link
icon
/favicons/android-icon-192x192.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 5924 Bytes








link
icon
/favicons/favicon-16x16.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 585 Bytes








link
icon
/favicons/favicon-32x32.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 1081 Bytes








link
icon
/favicons/favicon-96x96.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 2998 Bytes








link
manifest
/favicons/manifest.json


1
ok















link
shortcut icon
/favicons/favicon.ico
200

1
ok
image/vnd.microsoft.icon
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 1150 Bytes








link
stylesheet
https://fonts.googleapis.com/css?family=Lora:400,400i
200

1
ok
text/css; charset=utf-8
X-Content-Type-Options nosniff found





230 Bytes






Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-OHY2gIE2zmNTnOnNM0TMfej/u6RWT1ZU4wQlNdvDeNM=
sha384-SdwTtZkThbG2YS/20prB5gqcMgV6aG6j4IA3/GT6ZCB8LIOZJ5bQl9aNbZic8nkl
sha512-y/ArmUVacarrA9ZNTvQ+S9Z3JW2pcpnEQlpTMkvKpGppmkF8pbd2eXgLaNV+Is1W7My7Z5muxTCmwYAnI08PRQ==

 

<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Lora:400,400i" crossorigin="anonymous" integrity="sha256-OHY2gIE2zmNTnOnNM0TMfej/u6RWT1ZU4wQlNdvDeNM=" />


Content loaded via url("...")

 

https://fonts.gstatic.com/s/lora/v32/0QI6MX1D_JOuGQbT0gvTJPa787weuxJBkqg.ttf1
https://fonts.gstatic.com/s/lora/v32/0QI8MX1D_JOuMw_hLdO6T2wV9KnW-MoFoq92mQ.ttf1

meta
charset
utf-8


1
ok















meta
msapplication-TileColor
#ffffff


1
ok















meta
msapplication-TileImage
/favicons/ms-icon-144x144.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 12126 Bytes








meta
p:domain_verify
f6a689eb092d3883d9d65813491cd85f


1
ok















meta
theme-color
#ffffff


1
ok















meta
viewport
width=device-width,initial-scale=1


1
ok















script
src
//assets.pinterest.com/js/pinit.js
200

1
ok
defer attribute found async attribute found application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff





Cache-Control: max-age=158 - max-age too short.
290 Bytes






Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-P6revInNsh0RY0oDKBbxUkYtHLiQPrIdBkJQH8rQZd4=
sha384-u4WRTYAc8ptSeepvj+j7daTjMhQ/3si06QM4FdibBXDocm1NfVjdZwLUSPitg5NC
sha512-/4gBILIId1fPPQ0DM7eoMkDTX+mvdCBHf5vJaEreWfbjyUvKD2CKEsWUKCFDosz1CzO+ILcKqMGqgY3UmQUEcw==

 

<script src="//assets.pinterest.com/js/pinit.js" crossorigin="anonymous" integrity="sha256-P6revInNsh0RY0oDKBbxUkYtHLiQPrIdBkJQH8rQZd4=" />



script
src
//cdn.embedly.com/widgets/platform.js
200

1
ok
async attribute found application/javascript
missing X-Content-Type-Options nosniff





Cache-Control: public, max-age=300 - max-age too short.
Compression required: 21259 Bytes






Server-Header Access-Control-Allow-Origin: not found
Cross-Origin Resource Sharing (CORS) not supported



script
src
/static/js/32.384bf818.chunk.js
200

1
ok
Missing defer / async attribute. application/javascript; charset=UTF-8
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
Compression required: 158044 Bytes






local SRI possible, possible hash-values:

 

sha256-d4sKcvsIPULD4QrGwq1L3sCsT7gI2nnadvUitmwy8Hg=
sha384-cfJVxPWqGERVVT0xUUS2BC+HbRfuXsneziWa5uHAErRdS3/Ke1eBsgJvf5MxmMDP
sha512-jtgwzExl89+gpM/Hk8jso9yjn6EJexLMpey1QgmjyX+wZG6fcSSRQ/YDyQdeS5fB+xwGZR9Yi9FwkQZ+f2kP6w==

 

<script src="/static/js/32.384bf818.chunk.js" crossorigin="anonymous" integrity="sha256-d4sKcvsIPULD4QrGwq1L3sCsT7gI2nnadvUitmwy8Hg=" />



script
src
/static/js/main.3995f9ab.chunk.js
200

1
ok
Missing defer / async attribute. application/javascript; charset=UTF-8
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
Compression required: 49151 Bytes






local SRI possible, possible hash-values:

 

sha256-kTNoqAzuNL8xw4UdncNHI3QPYQPK8iJ3kNCIu3u3j4A=
sha384-oCmCDyDblMnxEl3D5O8RroWgpb/J0WZ//EDacJRe6zSK0H23beGATeLLxagLDXcA
sha512-pbDjHdUK9tXjSSLoEavYZcs6xGIuAisH7rokSRwUr2pV7brYrwBVJB5CmZGg/5s4gsu7rLRYfpGKzj3ImilzOw==

 

<script src="/static/js/main.3995f9ab.chunk.js" crossorigin="anonymous" integrity="sha256-kTNoqAzuNL8xw4UdncNHI3QPYQPK8iJ3kNCIu3u3j4A=" />


https://mom.com/
3.121.122.184
link
alternate
/rss.xml


1
ok















link
apple-touch-icon
/favicons/apple-icon-114x114.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 5218 Bytes








link
apple-touch-icon
/favicons/apple-icon-120x120.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 5448 Bytes








link
apple-touch-icon
/favicons/apple-icon-144x144.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 6642 Bytes








link
apple-touch-icon
/favicons/apple-icon-152x152.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 7022 Bytes








link
apple-touch-icon
/favicons/apple-icon-180x180.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 8365 Bytes








link
apple-touch-icon
/favicons/apple-icon-57x57.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 2592 Bytes








link
apple-touch-icon
/favicons/apple-icon-60x60.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 2700 Bytes








link
apple-touch-icon
/favicons/apple-icon-72x72.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 3297 Bytes








link
apple-touch-icon
/favicons/apple-icon-76x76.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 3492 Bytes








link
icon
/favicons/android-icon-192x192.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 5924 Bytes








link
icon
/favicons/favicon-16x16.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 585 Bytes








link
icon
/favicons/favicon-32x32.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 1081 Bytes








link
icon
/favicons/favicon-96x96.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 2998 Bytes








link
manifest
/favicons/manifest.json


1
ok















link
shortcut icon
/favicons/favicon.ico
200

1
ok
image/vnd.microsoft.icon
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 1150 Bytes








link
stylesheet
https://fonts.googleapis.com/css?family=Lora:400,400i
200

1
ok
text/css; charset=utf-8
X-Content-Type-Options nosniff found





230 Bytes






Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-OHY2gIE2zmNTnOnNM0TMfej/u6RWT1ZU4wQlNdvDeNM=
sha384-SdwTtZkThbG2YS/20prB5gqcMgV6aG6j4IA3/GT6ZCB8LIOZJ5bQl9aNbZic8nkl
sha512-y/ArmUVacarrA9ZNTvQ+S9Z3JW2pcpnEQlpTMkvKpGppmkF8pbd2eXgLaNV+Is1W7My7Z5muxTCmwYAnI08PRQ==

 

<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Lora:400,400i" crossorigin="anonymous" integrity="sha256-OHY2gIE2zmNTnOnNM0TMfej/u6RWT1ZU4wQlNdvDeNM=" />


Content loaded via url("...")

 

https://fonts.gstatic.com/s/lora/v32/0QI6MX1D_JOuGQbT0gvTJPa787weuxJBkqg.ttf1
https://fonts.gstatic.com/s/lora/v32/0QI8MX1D_JOuMw_hLdO6T2wV9KnW-MoFoq92mQ.ttf1

meta
charset
utf-8


1
ok















meta
msapplication-TileColor
#ffffff


1
ok















meta
msapplication-TileImage
/favicons/ms-icon-144x144.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
No Compression - 12126 Bytes








meta
p:domain_verify
f6a689eb092d3883d9d65813491cd85f


1
ok















meta
theme-color
#ffffff


1
ok















meta
viewport
width=device-width,initial-scale=1


1
ok















script
src
//assets.pinterest.com/js/pinit.js
200

1
ok
defer attribute found async attribute found application/javascript; charset=utf-8
missing X-Content-Type-Options nosniff





Cache-Control: max-age=158 - max-age too short.
290 Bytes






Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-P6revInNsh0RY0oDKBbxUkYtHLiQPrIdBkJQH8rQZd4=
sha384-u4WRTYAc8ptSeepvj+j7daTjMhQ/3si06QM4FdibBXDocm1NfVjdZwLUSPitg5NC
sha512-/4gBILIId1fPPQ0DM7eoMkDTX+mvdCBHf5vJaEreWfbjyUvKD2CKEsWUKCFDosz1CzO+ILcKqMGqgY3UmQUEcw==

 

<script src="//assets.pinterest.com/js/pinit.js" crossorigin="anonymous" integrity="sha256-P6revInNsh0RY0oDKBbxUkYtHLiQPrIdBkJQH8rQZd4=" />



script
src
//cdn.embedly.com/widgets/platform.js
200

1
ok
async attribute found application/javascript
missing X-Content-Type-Options nosniff





Cache-Control: public, max-age=300 - max-age too short.
Compression required: 21259 Bytes






Server-Header Access-Control-Allow-Origin: not found
Cross-Origin Resource Sharing (CORS) not supported



script
src
/static/js/32.384bf818.chunk.js
200

1
ok
Missing defer / async attribute. application/javascript; charset=UTF-8
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
Compression required: 158068 Bytes






local SRI possible, possible hash-values:

 

sha256-d4sKcvsIPULD4QrGwq1L3sCsT7gI2nnadvUitmwy8Hg=
sha384-cfJVxPWqGERVVT0xUUS2BC+HbRfuXsneziWa5uHAErRdS3/Ke1eBsgJvf5MxmMDP
sha512-jtgwzExl89+gpM/Hk8jso9yjn6EJexLMpey1QgmjyX+wZG6fcSSRQ/YDyQdeS5fB+xwGZR9Yi9FwkQZ+f2kP6w==

 

<script src="/static/js/32.384bf818.chunk.js" crossorigin="anonymous" integrity="sha256-d4sKcvsIPULD4QrGwq1L3sCsT7gI2nnadvUitmwy8Hg=" />



script
src
/static/js/main.3995f9ab.chunk.js
200

1
ok
Missing defer / async attribute. application/javascript; charset=UTF-8
missing X-Content-Type-Options nosniff





Cache-Control: public,max-age=0,must-revalidate - max-age too short.
Compression required: 49157 Bytes






local SRI possible, possible hash-values:

 

sha256-kTNoqAzuNL8xw4UdncNHI3QPYQPK8iJ3kNCIu3u3j4A=
sha384-oCmCDyDblMnxEl3D5O8RroWgpb/J0WZ//EDacJRe6zSK0H23beGATeLLxagLDXcA
sha512-pbDjHdUK9tXjSSLoEavYZcs6xGIuAisH7rokSRwUr2pV7brYrwBVJB5CmZGg/5s4gsu7rLRYfpGKzj3ImilzOw==

 

<script src="/static/js/main.3995f9ab.chunk.js" crossorigin="anonymous" integrity="sha256-kTNoqAzuNL8xw4UdncNHI3QPYQPK8iJ3kNCIu3u3j4A=" />


 

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net

 

QNr.DomainTypeNS used
1
net
NS
c.root-servers.net (2001:500:2::c)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
dns1.p08.nsone.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, dns4.p01.nsone.net

Answer: dns1.p01.nsone.net
198.51.44.1, 2620:4d:4000:6259:7:1:0:1

Answer: dns2.p01.nsone.net
198.51.45.1, 2a00:edc0:6259:7:1::2

Answer: dns3.p01.nsone.net
198.51.44.65, 2620:4d:4000:6259:7:1:0:3

Answer: dns4.p01.nsone.net
198.51.45.65, 2a00:edc0:6259:7:1::4
3
dns2.p08.nsone.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, dns4.p01.nsone.net

Answer: dns1.p01.nsone.net
198.51.44.1, 2620:4d:4000:6259:7:1:0:1

Answer: dns2.p01.nsone.net
198.51.45.1, 2a00:edc0:6259:7:1::2

Answer: dns3.p01.nsone.net
198.51.44.65, 2620:4d:4000:6259:7:1:0:3

Answer: dns4.p01.nsone.net
198.51.45.65, 2a00:edc0:6259:7:1::4
4
dns3.p08.nsone.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, dns4.p01.nsone.net

Answer: dns1.p01.nsone.net
198.51.44.1, 2620:4d:4000:6259:7:1:0:1

Answer: dns2.p01.nsone.net
198.51.45.1, 2a00:edc0:6259:7:1::2

Answer: dns3.p01.nsone.net
198.51.44.65, 2620:4d:4000:6259:7:1:0:3

Answer: dns4.p01.nsone.net
198.51.45.65, 2a00:edc0:6259:7:1::4
5
dns4.p08.nsone.net
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: dns1.p01.nsone.net, dns2.p01.nsone.net, dns3.p01.nsone.net, dns4.p01.nsone.net

Answer: dns1.p01.nsone.net
198.51.44.1, 2620:4d:4000:6259:7:1:0:1

Answer: dns2.p01.nsone.net
198.51.45.1, 2a00:edc0:6259:7:1::2

Answer: dns3.p01.nsone.net
198.51.44.65, 2620:4d:4000:6259:7:1:0:3

Answer: dns4.p01.nsone.net
198.51.45.65, 2a00:edc0:6259:7:1::4
6
dns1.p08.nsone.net: 198.51.44.8
A
dns1.p01.nsone.net (2620:4d:4000:6259:7:1:0:1)
7
dns1.p08.nsone.net: 2620:4d:4000:6259:7:8:0:1
AAAA
dns1.p01.nsone.net (2620:4d:4000:6259:7:1:0:1)
8
dns2.p08.nsone.net: 198.51.45.8
A
dns1.p01.nsone.net (2620:4d:4000:6259:7:1:0:1)
9
dns2.p08.nsone.net: 2a00:edc0:6259:7:8::2
AAAA
dns1.p01.nsone.net (2620:4d:4000:6259:7:1:0:1)
10
dns3.p08.nsone.net: 198.51.44.72
A
dns1.p01.nsone.net (2620:4d:4000:6259:7:1:0:1)
11
dns3.p08.nsone.net: 2620:4d:4000:6259:7:8:0:3
AAAA
dns1.p01.nsone.net (2620:4d:4000:6259:7:1:0:1)
12
dns4.p08.nsone.net: 198.51.45.72
A
dns1.p01.nsone.net (2620:4d:4000:6259:7:1:0:1)
13
dns4.p08.nsone.net: 2a00:edc0:6259:7:8::4
AAAA
dns1.p01.nsone.net (2620:4d:4000:6259:7:1:0:1)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.mom.com
0

no CAA entry found
1
0
mom.com
0

no CAA entry found
1
0
com
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
mom.com

ok
1
0
www.mom.com

ok
1
0
_acme-challenge.mom.com
6plqa0LqMO3wRpLcq4MxlHms2JurBDrgG1Jgeqy6g2c
looks good, correct length, correct characters
1
0
_acme-challenge.mom.com
QOF4AXdrMpZFAQrO05QTERr6EM7UbddLQ5kDYe7ebb8
looks good, correct length, correct characters
1
0
_acme-challenge.www.mom.com

Name Error - The domain name does not exist
1
0
_acme-challenge.mom.com.mom.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.mom.com.mom.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.mom.com.www.mom.com

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

mom.com
1
aspmx.l.google.com
05ok

A


173.194.76.27
01ok

AAAA


2a00:1450:400c:c03::1a
01ok

CNAME


00ok
MX

mom.com
5
alt2.aspmx.l.google.com
05ok

A


142.251.9.26
01ok

AAAA


2a00:1450:4025:c03::1a
01ok

CNAME


00ok
MX

mom.com
5
alt1.aspmx.l.google.com
05ok

A


142.250.153.26
01ok

AAAA


2a00:1450:4013:c16::1a
01ok

CNAME


00ok
MX

mom.com
10
aspmx3.googlemail.com
05ok

A


142.251.9.26
01ok

AAAA


2a00:1450:4025:c03::1b
01ok

CNAME


00ok
MX

mom.com
10
aspmx2.googlemail.com
05ok

A


142.250.153.27
01ok

AAAA


2a00:1450:4013:c16::1b
01ok

CNAME


00ok

 

 

17. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
mom.com
3.79.76.132
443
3 Ciphers32.22 sec
0 without, 3 FS
100.00 %
mom.com
3.121.122.184
443
3 Ciphers32.28 sec
0 without, 3 FS
100.00 %
www.mom.com
3.78.41.232
443
3 Ciphers32.16 sec
0 without, 3 FS
100.00 %
www.mom.com
3.121.122.184
443
3 Ciphers31.71 sec
0 without, 3 FS
100.00 %
Complete

4
12 Ciphers
3.00 Ciphers/Check
128.37 sec32.09 sec/Check
0 without, 12 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
mom.com
3.79.76.132
443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
3 Ciphers, 32.22 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD


3.121.122.184
443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
3 Ciphers, 32.28 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD

www.mom.com
3.78.41.232
443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
3 Ciphers, 32.16 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD


3.121.122.184
443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
3 Ciphers, 31.71 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=9f418c92-54bc-4222-8548-ab732d30a1fb

 

Last Result: https://check-your-website.server-daten.de/?q=mom.com - 2023-11-09 02:45:58

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=mom.com" target="_blank">Check this Site: mom.com</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=mom.com