Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

Top config

Checked:
30.11.2022 15:13:12

Older results

A - 30.11.2022 12:33:20

A - 30.11.2022 11:48:48

A - 30.11.2022 10:54:36

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
nc.edvmr.it	CNAME	service.edvmr.it	yes	1	0
	A	84.151.199.104 Berlin/Land Berlin/Germany (DE) - Deutsche Telekom AG Hostname: p5497c768.dip0.t-ipconnect.de	yes
www.nc.edvmr.it		Name Error	yes	1	0
*.edvmr.it	A	85.13.161.142	yes
	AAAA		yes
	CNAME		yes
*.nc.edvmr.it	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 18733, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.12.2022, 00:00:00 +, Signature-Inception: 30.11.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: it
it	1 DS RR in the parent zone found


	DS with Algorithm 10, KeyTag 41901, DigestType 2 and Digest R/f3uiHkhZH2Fy7tE+NbZrk62fKID8m62mT2jOKOu5A=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner it., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.12.2022, 05:00:00 +, Signature-Inception: 30.11.2022, 04:00:00 +, KeyTag 18733, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 18733 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 10, KeyTag 18395, Flags 256


	Public Key with Algorithm 10, KeyTag 41901, Flags 257 (SEP = Secure Entry Point)


	2 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner it., Algorithm: 10, 1 Labels, original TTL: 10800 sec, Signature-expiration: 30.12.2022, 13:04:37 +, Signature-Inception: 30.11.2022, 13:04:37 +, KeyTag 18395, Signer-Name: it


	RRSIG-Owner it., Algorithm: 10, 1 Labels, original TTL: 10800 sec, Signature-expiration: 30.12.2022, 13:04:37 +, Signature-Inception: 30.11.2022, 13:04:37 +, KeyTag 41901, Signer-Name: it


	• Status: Good - Algorithmus 10 and DNSKEY with KeyTag 18395 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 10 and DNSKEY with KeyTag 41901 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 10, KeyTag 41901, DigestType 2 and Digest "R/f3uiHkhZH2Fy7tE+NbZrk62fKID8m62mT2jOKOu5A=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: edvmr.it
edvmr.it	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "kq08g2l6ft8ee42i7rt1mmk832hbat1e" between the hashed NSEC3-owner "kptmvq81utlbvevjlbb3m87vml0345q0" and the hashed NextOwner "kq2l8up641a7f6m1r5qibnvjn06mbatl". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner kptmvq81utlbvevjlbb3m87vml0345q0.it., Algorithm: 10, 2 Labels, original TTL: 3600 sec, Signature-expiration: 30.12.2022, 13:04:37 +, Signature-Inception: 30.11.2022, 13:04:37 +, KeyTag 18395, Signer-Name: it


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "rs1n3n7m54pdem5eunv9npkh3b6cgpjc" as Owner. That's the Hash of "it" with the NextHashedOwnerName "rs45884srcl7kjjiep3cu8c925t3vlvn". So that domain name is the Closest Encloser of "edvmr.it". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner rs1n3n7m54pdem5eunv9npkh3b6cgpjc.it., Algorithm: 10, 2 Labels, original TTL: 3600 sec, Signature-expiration: 30.12.2022, 13:04:37 +, Signature-Inception: 30.11.2022, 13:04:37 +, KeyTag 18395, Signer-Name: it


	0 DNSKEY RR found




Zone: nc.edvmr.it
nc.edvmr.it	0 DS RR in the parent zone found

Zone: www.nc.edvmr.it
www.nc.edvmr.it	0 DS RR in the parent zone found

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 18733, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.12.2022, 00:00:00 +, Signature-Inception: 30.11.2022, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: it
it	1 DS RR in the parent zone found


	DS with Algorithm 10, KeyTag 41901, DigestType 2 and Digest R/f3uiHkhZH2Fy7tE+NbZrk62fKID8m62mT2jOKOu5A=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner it., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.12.2022, 05:00:00 +, Signature-Inception: 30.11.2022, 04:00:00 +, KeyTag 18733, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 18733 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 10, KeyTag 18395, Flags 256


	Public Key with Algorithm 10, KeyTag 41901, Flags 257 (SEP = Secure Entry Point)


	2 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner it., Algorithm: 10, 1 Labels, original TTL: 10800 sec, Signature-expiration: 30.12.2022, 13:04:37 +, Signature-Inception: 30.11.2022, 13:04:37 +, KeyTag 18395, Signer-Name: it


	RRSIG-Owner it., Algorithm: 10, 1 Labels, original TTL: 10800 sec, Signature-expiration: 30.12.2022, 13:04:37 +, Signature-Inception: 30.11.2022, 13:04:37 +, KeyTag 41901, Signer-Name: it


	• Status: Good - Algorithmus 10 and DNSKEY with KeyTag 18395 used to validate the DNSKEY RRSet


	• Status: Good - Algorithmus 10 and DNSKEY with KeyTag 41901 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 10, KeyTag 41901, DigestType 2 and Digest "R/f3uiHkhZH2Fy7tE+NbZrk62fKID8m62mT2jOKOu5A=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: edvmr.it
edvmr.it	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "kq08g2l6ft8ee42i7rt1mmk832hbat1e" between the hashed NSEC3-owner "kptmvq81utlbvevjlbb3m87vml0345q0" and the hashed NextOwner "kq2l8up641a7f6m1r5qibnvjn06mbatl". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner kptmvq81utlbvevjlbb3m87vml0345q0.it., Algorithm: 10, 2 Labels, original TTL: 3600 sec, Signature-expiration: 30.12.2022, 13:04:37 +, Signature-Inception: 30.11.2022, 13:04:37 +, KeyTag 18395, Signer-Name: it


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "rs1n3n7m54pdem5eunv9npkh3b6cgpjc" as Owner. That's the Hash of "it" with the NextHashedOwnerName "rs45884srcl7kjjiep3cu8c925t3vlvn". So that domain name is the Closest Encloser of "edvmr.it". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner rs1n3n7m54pdem5eunv9npkh3b6cgpjc.it., Algorithm: 10, 2 Labels, original TTL: 3600 sec, Signature-expiration: 30.12.2022, 13:04:37 +, Signature-Inception: 30.11.2022, 13:04:37 +, KeyTag 18395, Signer-Name: it


	0 DNSKEY RR found




Zone: service.edvmr.it
service.edvmr.it	0 DS RR in the parent zone found


	0 DNSKEY RR found

3. Name Servers

Domain	Nameserver	NS-IP
www.nc.edvmr.it	• ns5.kasserver.com
edvmr.it	• ns5.kasserver.com / ns64	85.13.128.3 Neusalza-Spremberg/Saxony/Germany (DE) - Neue Medien Muennich	•
	• ns6.kasserver.com / ns64	85.13.159.101 Neusalza-Spremberg/Saxony/Germany (DE) - Neue Medien Muennich	•
it	• a.dns.it		•
	• dns.nic.it		•
	• m.dns.it		•
	• nameserver.cnr.it		•
	• r.dns.it		•
	• s.dns.it / s2.sof		•

service.edvmr.it	• dyndns1.kasserver.com / dyndns1	85.13.130.55 Neusalza-Spremberg/Saxony/Germany (DE) - Neue Medien Muennich	•
	• dyndns2.kasserver.com / dyndns2	85.13.135.60 Neusalza-Spremberg/Saxony/Germany (DE) - Neue Medien Muennich	•
edvmr.it	• ns5.kasserver.com / ns63	85.13.128.3 Neusalza-Spremberg/Saxony/Germany (DE) - Neue Medien Muennich	•
	• ns6.kasserver.com / ns62	85.13.159.101 Neusalza-Spremberg/Saxony/Germany (DE) - Neue Medien Muennich	•
it	• a.dns.it		•
	• dns.nic.it		•
	• m.dns.it		•
	• nameserver.cnr.it		•
	• r.dns.it		•
	• s.dns.it / s2.sof		•

4. SOA-Entries

Domain:	it
Zone-Name:	it
Primary:	dns.nic.it
Mail:	hostmaster.nic.it
Serial:	2022113015
Refresh:	10800
Retry:	900
Expire:	604800
TTL:	3600
num Entries:	6

Domain:	edvmr.it
Zone-Name:	edvmr.it
Primary:	ns5.kasserver.com
Mail:	hostmaster.kasserver.com
Serial:	2104250900
Refresh:	28800
Retry:	7200
Expire:	1209600
TTL:	7200
num Entries:	2

Domain:	www.nc.edvmr.it
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1


Domain:	it
Zone-Name:	it
Primary:	dns.nic.it
Mail:	hostmaster.nic.it
Serial:	2022113015
Refresh:	10800
Retry:	900
Expire:	604800
TTL:	3600
num Entries:	6

Domain:	edvmr.it
Zone-Name:	edvmr.it
Primary:	ns5.kasserver.com
Mail:	hostmaster.kasserver.com
Serial:	2104250900
Refresh:	28800
Retry:	7200
Expire:	1209600
TTL:	7200
num Entries:	2

Domain:	service.edvmr.it
Zone-Name:	service.edvmr.it
Primary:	dyndns1.kasserver.com
Mail:	hostmaster.kasserver.com
Serial:	2209170337
Refresh:	28800
Retry:	7200
Expire:	604800
TTL:	60
num Entries:	2

5. Screenshots

Startaddress: https://nc.edvmr.it/index.php/login, address used: https://nc.edvmr.it/index.php/login, Screenshot created 2022-11-30 15:15:13 +00:0

Mobil (412px x 732px)

745 milliseconds

Screenshot mobile - https://nc.edvmr.it/index.php/login

Mobil + Landscape (732px x 412px)

710 milliseconds

Screenshot mobile landscape - https://nc.edvmr.it/index.php/login

Screen (1280px x 1680px)

1107 milliseconds

Screenshot Desktop - https://nc.edvmr.it/index.php/login

Mobile- and other Chrome-Checks

	width	height
visual Viewport	412	732
content Size	412	732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://nc.edvmr.it/ 84.151.199.104	301	https://nc.edvmr.it/ Html is minified: 109.03 %	0.030	A
Server: nginx/1.21.6
Date: Wed, 30 Nov 2022 14:14:03 GMT
Content-Type: text/html
Content-Length: 169
Connection: close
Location: https://nc.edvmr.it/

• https://nc.edvmr.it/ 84.151.199.104	302	https://nc.edvmr.it/index.php/login	2.637	A
Server: nginx/1.21.6
Date: Wed, 30 Nov 2022 14:14:03 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: close
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP/8.1.12
Set-Cookie: ockk1a7ql30q=072a07eb3f53cef10d4f307efe77c6fe; path=/; secure; HttpOnly; SameSite=Lax,oc_sessionPassphrase=K%2Be8qGsOAwQ4qCIeg9uc5VV1NfZDTQ7Grb%2Fi09D1JsqvpYZ6Eoy6lsnr90ufYO6DK7mLqpbmFrPAXnkeKc%2BrIboJnd5nduobyEnevw%2FMrHobpA7buweBgFBYedqQLlTA; path=/; secure; HttpOnly; SameSite=Lax,ockk1a7ql30q=0d276bb74a9db992abeb641a28134dd0; path=/; secure; HttpOnly; SameSite=Lax,ockk1a7ql30q=0d276bb74a9db992abeb641a28134dd0; path=/; secure; HttpOnly; SameSite=Lax,__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax,__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict,ockk1a7ql30q=0d276bb74a9db992abeb641a28134dd0; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-M2ErL24rTXZhS0hxOHhUTzlkYWJKVkhkdFFiR0lqSXF4Q3NrVlpheUFtOD06c2R2czBKVWZIZm10eDFxSGc0V3RaQmlaNDFlM1pYMU45ME5uSS9IMlFBWT0='; style-src 'self' 'unsafe-inline'; frame-src ; img-src data: blob:; font-src 'self' data:; media-src ; connect-src ; object-src 'none'; base-uri 'self';
Location: https://nc.edvmr.it/index.php/login
Strict-Transport-Security: max-age=31536000

• https://nc.edvmr.it/index.php/login Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 101.64 % Other inline scripts (∑/total): 0/0	2.796	A
small visible content (num chars: 296) Diese Anwendung benötigt JavaScript zum ordnungsgemäßen Betrieb. Bitte aktiviere JavaScript und lade die Seite neu. EDV Beratung, Service, Schulung & Vertrieb EDV Beratung, Service, Schulung & Vertrieb – Hier werden Ihre Probleme nicht erörtert sondern gelöst Impressum · Datenschutzerklärung
Server: nginx/1.21.6
Date: Wed, 30 Nov 2022 14:14:10 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 5969
Connection: close
Referrer-Policy: no-referrer
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Robots-Tag: none
X-XSS-Protection: 1; mode=block
X-Powered-By: PHP/8.1.12
Set-Cookie: ockk1a7ql30q=d9467c88de69a39966674d1149fd81e9; path=/; secure; HttpOnly; SameSite=Lax,oc_sessionPassphrase=LKX4U54exVRJfVHWLrrfiVfTg2eJ3wHbckjt9hwBh%2BGT2GTaBS2v0aT1d4dvMLJUHJ%2Fuq1FY7QbzlwdulEw758dcmfgVoA%2F8O9Ac79AY%2FpyFUapUq0CceLaxH7Z6uHwv; path=/; secure; HttpOnly; SameSite=Lax,ockk1a7ql30q=35e7e9b02b20c46e3a9b26377729ecfb; path=/; secure; HttpOnly; SameSite=Lax,ockk1a7ql30q=35e7e9b02b20c46e3a9b26377729ecfb; path=/; secure; HttpOnly; SameSite=Lax,__Host-nc_sameSiteCookielax=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=lax,__Host-nc_sameSiteCookiestrict=true; path=/; httponly;secure; expires=Fri, 31-Dec-2100 23:59:59 GMT; SameSite=strict,ockk1a7ql30q=35e7e9b02b20c46e3a9b26377729ecfb; path=/; secure; HttpOnly; SameSite=Lax,ockk1a7ql30q=35e7e9b02b20c46e3a9b26377729ecfb; path=/; secure; HttpOnly; SameSite=Lax
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Content-Security-Policy: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://office.edvmr.it;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self' nc: https://office.edvmr.it;frame-ancestors 'self' https://office.edvmr.it;form-action 'self' https://office.edvmr.it
X-Request-Id: JF67ugCxYzJVhwMlpTrE
Content-Encoding: gzip
Feature-Policy: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'self';microphone 'none';payment 'none'
Strict-Transport-Security: max-age=31536000

• http://nc.edvmr.it/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 84.151.199.104 Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 110.07 % Other inline scripts (∑/total): 0/0	0.106	A
Not Found
Visible Content: 404 Not Found nginx/1.21.6
Server: nginx/1.21.6
Date: Wed, 30 Nov 2022 14:14:07 GMT
Content-Type: text/html
Content-Length: 153
Connection: close

• https://84.151.199.104/ 84.151.199.104	503	Html is minified: 107.95 %	2.114	N
Service Temporarily Unavailable
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Server: nginx
Date: Wed, 30 Nov 2022 14:14:07 GMT
Content-Type: text/html
Content-Length: 190
Connection: close

7. Comments

	1. General Results, most used to calculate the result
A	name "nc.edvmr.it" is subdomain, public suffix is ".it", top-level-domain is ".it", top-level-domain-type is "country-code", Country is Italy, tld-manager is "IIT - CNR", num .it-domains preloaded: 1691 (complete: 210599)
A	Good: All ip addresses are public addresses
	Warning: Only one ip address found: nc.edvmr.it has only one ip address.
	Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: nc.edvmr.it has no ipv6 address.
A	Good: No asked Authoritative Name Server had a timeout
A	DNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
A	https://nc.edvmr.it/ 84.151.199.104	302	https://nc.edvmr.it/index.php/login	Correct redirect https to https
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
A	Good: every cookie sent via https is marked as secure
A	Good: Every cookie has a SameSite Attribute with a correct value Strict/Lax/None
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):1 complete Content-Type - header (2 urls)
	http://nc.edvmr.it/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 84.151.199.104			Url with incomplete Content-Type - header - missing charset
A	http://nc.edvmr.it/ 84.151.199.104	301	https://nc.edvmr.it/	Correct redirect http - https with the same domain name
N	https://84.151.199.104/ 84.151.199.104	503		Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
	Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain nc.edvmr.it, 1 ip addresses.
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.nc.edvmr.it
	2. Header-Checks
A	nc.edvmr.it	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'none';base-uri 'none';manifest-src 'self';script-src 'self';style-src 'self' 'unsafe-inline';img-src 'self' data: blob: https://office.edvmr.it;font-src 'self' data:;connect-src 'self';media-src 'self';frame-src 'self' nc: https://office.edvmr.it;frame-ancestors 'self' https://office.edvmr.it;form-action 'self' https://office.edvmr.it
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
A				Good: form-action directive found. That reduces the risk sending data to unwanted domains. form-action is a navigation-directive, so default-src isn't used.
A				Good: frame-ancestors directive found. That limits pages who are allowed to use this page in a frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
A				Good: base-uri directive found. That limits the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
A				Good: script-src without 'unsafe-inline' and 'unsafe-eval' found. That's the recommended configuration.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: no-referrer
A		X-Frame-Options		Ok: Header without syntax errors found: SAMEORIGIN
B				Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		Feature-Policy		Ok: Header without syntax errors found: autoplay 'self';camera 'none';fullscreen 'self';geolocation 'self';microphone 'none';payment 'none'
B				Info: Header is deprecated. May not longer work in modern browsers. autoplay 'self';camera 'none';fullscreen 'self';geolocation 'self';microphone 'none';payment 'none'
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
F	nc.edvmr.it	Permissions-Policy		Critical: Missing Header:
	3. DNS- and NameServer - Checks
A	Info:: 9 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
A	Info:: 9 Queries complete, 9 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns5.kasserver.com (85.13.128.3), ns6.kasserver.com (85.13.159.101)
	Ok (4 - 8):: An average of 4.5 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 2 different Name Servers found: ns5.kasserver.com, ns6.kasserver.com, 2 Name Servers included in Delegation: ns5.kasserver.com, ns6.kasserver.com, 2 Name Servers included in 1 Zone definitions: ns5.kasserver.com, ns6.kasserver.com, 1 Name Servers listed in SOA.Primary: ns5.kasserver.com.
A	Good: Only one SOA.Primary Name Server found.: ns5.kasserver.com.
A	Good: SOA.Primary Name Server included in the delegation set.: ns5.kasserver.com.
A	Good: All Name Server Domain Names have a Public Suffix.
A	Good: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
A	Good: All Name Server ip addresses are public.
A	Info: Ipv4-Subnet-list: 2 Name Servers, 1 different subnets (first Byte): 85., 1 different subnets (first two Bytes): 85.13., 2 different subnets (first three Bytes): 85.13.128., 85.13.159.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Good: Nameserver supports TCP connections: 4 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 4 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 4 good Nameserver
A	Good: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 4 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: ns5.kasserver.com: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
	Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
A	Good: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
A	Good: No https + http status 200 with inline CSS / JavaScript found
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
A	Good: Every https connection via port 443 supports the http/2 protocol via ALPN.
A	Good: All script Elements (type text/javascript) and src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
	Warning: CSS / JavaScript found without Compression. Compress these ressources, gzip, deflate, br are checked. 1 external CSS / JavaScript files without GZip found - 28 with GZip, 29 complete
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 0 external CSS / JavaScript files without Cache-Control-Header, 1 with Cache-Control, but no max-age, 10 with Cache-Control max-age too short (minimum 7 days), 18 with Cache-Control long enough, 29 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Info: No img element found, no alt attribute checked
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
A	Info: Different Server-Headers found
A	Duration: 140977 milliseconds, 140.977 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

nc.edvmr.it

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

nc.edvmr.it

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - too much certificates, don't send root certificates	1	CN=nc.edvmr.it
	2	CN=R3, O=Let's Encrypt, C=US
	3	CN=ISRG Root X1, O=Internet Security Research Group, C=US

nc.edvmr.it

84.151.199.104

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

nc.edvmr.it

84.151.199.104

443

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

supported

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
SNI required

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Chain - too much certificates, don't send root certificates	1	CN=nc.edvmr.it
	2	CN=R3, O=Let's Encrypt, C=US
	3	CN=ISRG Root X1, O=Internet Security Research Group, C=US

84.151.199.104

443

Certificate/chain invalid and wrong name

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

84.151.199.104

443

Certificate/chain invalid and wrong name

Tls12

ECDH Ephermal

255

Aes256

256

Sha384

not supported

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

http/2 via ALPN supported
Cert sent without SNI

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Self signed certificate		1	CN=letsencrypt-nginx-proxy-companion

9. Certificates

CN=nc.edvmr.it

05.11.2022

03.02.2023
741 days expired

nc.edvmr.it - 1 entry

CN=nc.edvmr.it

05.11.2022

03.02.2023
741 days expired

nc.edvmr.it - 1 entry

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	03C6E4A4299EFDB8C8695FBF853EF2DBEFB7
Thumbprint:	ACC5BB541D3785E1C8C25B1134CCFA6EDF88783A
SHA256 / Certificate:	wA1axT16Hvx0ueh8j1fbknRt8uOgeWCKX6xiy4cNESQ=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	c20aa8a14f4a2beef60a69e2300c64991d1559288c37a8eff302ba7731ade7e5
SHA256 hex / Subject Public Key Information (SPKI):	c20aa8a14f4a2beef60a69e2300c64991d1559288c37a8eff302ba7731ade7e5 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://r3.o.lencr.org
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=R3, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 214 days

CN=R3, O=Let's Encrypt, C=US

04.09.2020

15.09.2025
expires in 214 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:	A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:	Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):	8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3763 days

CN=ISRG Root X1, O=Internet Security Research Group, C=US

04.06.2015

04.06.2035
expires in 3763 days

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	008210CFB0D240E3594463E0BB63828B00
Thumbprint:	CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:	lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):	96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):	0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

CN=letsencrypt-nginx-proxy-companion

18.05.2022

18.05.2023
637 days expired

CN=letsencrypt-nginx-proxy-companion

18.05.2022

18.05.2023
637 days expired

Keyalgorithm	RSA encryption (4096 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	151B1AFCD53D4043A86423C4B85D804DFE653AFE
Thumbprint:	9EC22F6138789A5AE7BC4CB2C44BA9CC41B17773
SHA256 / Certificate:	rY9pJIsulybH6hZJfFTEnnu6VvPMA5uXkHi0oVFwSh0=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	58070673697378f2daa745f984bde9a194fa5ec0ec247347b30ece4e47ff000d
SHA256 hex / Subject Public Key Information (SPKI):	58070673697378f2daa745f984bde9a194fa5ec0ec247347b30ece4e47ff000d (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

UntrustedRoot: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Small Code Update - wait one minute

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://nc.edvmr.it/index.php/login	a		4		0			0	0	0
	link	stylesheet	14	43,060 Bytes	0	14	0	0	0	0
	link	other	4	116,151 Bytes	0	3	0	0	0	0
	meta	apple	1		0			0	0	0
	meta	og	6	25,247 Bytes	0	2	0	0	0	0
	meta	other	4		0			0	0	0
	script		15	124,200 Bytes	0	15	0	0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname

Html-Element

name/equiv/ property/rel

href/src/content

HttpStatus

msg

∑

Status

https://nc.edvmr.it/index.php/login

https://edvmr.de

https://www.edvmr.de/pages/datenschutz.php

https://www.edvmr.de/pages/impressum.php

https://www.enable-javascript.com/

link

apple-touch-icon

/index.php/apps/theming/icon?v=6

200

image/png
X-Content-Type-Options nosniff found

No Compression - 25247 Bytes

link

icon

/index.php/apps/theming/favicon?v=6

200

image/x-icon
X-Content-Type-Options nosniff found

No Compression - 90022 Bytes

link

manifest

/index.php/apps/theming/manifest?v=6

link

mask-icon

/core/img/favicon-mask.svg

200

image/svg+xml
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable with long duration found.

882 Bytes

link

stylesheet

/apps/files_rightclick/css/app.css?v=1bf6e69c-6

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

199 Bytes

local SRI possible, possible hash-values:

sha256-LR87ktdZG2mgbLi9bNqOTS+k7Z67RwSImQeAokI9C7c=
sha384-06AxmrXqmpxvhFBgMJ0ozHn5lNMH8Vx2HfmVpdmpSh7OvLyMN2QA8jBF+D6nwMd/
sha512-mWSSuV5a/ybLeQ8EsD6md/1A6jLfJcmZWaVOrrFgTqYpZMPo94IIpJ2qw686eAWz9VT975u+ylOgmOcVikcmsw==

link

stylesheet

/apps/theming/css/default.css?v=47354877-6

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 970 Bytes

local SRI possible, possible hash-values:

sha256-wJVNJ/G4oZL2jvNj3g9tdtxSneo9/i2od2RLKTf84Wg=
sha384-leQ4P1284oPtHNzFlNW9rxHUYVGZAuAWDhJ+Pmw8amud59jrUJaBsLGpuffBF8v0
sha512-U+3lM/WvefYMgFyvMSwPBmWL88UGZ3cgX9hVofiwSfZAf8fU15QI+uK+NVdLhUC4sTII3YcNbd5URNZN8WdN0Q==

Content loaded via url("...")

/core/img/app-background.jpg

link

stylesheet

/core/css/guest.css?v=ae944db2-6

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 5309 Bytes

local SRI possible, possible hash-values:

sha256-h/F8kqoMB2t9kRDFwAGeBH9rV2se+WBSw3f1k7YHuqg=
sha384-UWxYqZT61WNq3k1rKrlkOthTJNErihXZ4FAFUDtfaG0nOox+PXdBarOz0ZqoIGX+
sha512-O2Ki1jsFHoQIW6uBoQZAtCr+kvnx3eOiDJW9pZfg4ib2P8wHvA/rsELvat7sAxoBgFG0yti2O++QRszOZWhKSA==

Content loaded via url("...")

../../../core/img/app-background.jpg

../../core/img/logo/logo.svg

../img/actions/caret-white.svg?v=1

../img/actions/checkbox-mark-white.svg

../img/actions/checkmark-white.svg?v=1

../img/actions/confirm.svg?v=2

../img/actions/confirm-white.svg?v=2

../img/actions/error-white.svg?v=1

../img/actions/info-white.svg?v=2

../img/loading.gif

../img/loading-dark.gif

../img/loading-small.gif

../img/loading-small-dark.gif

link

stylesheet

/core/css/server.css?v=ae944db2-6

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 27021 Bytes

local SRI possible, possible hash-values:

sha256-KKPiSMIBY0kEqRu4SSY21PMUcCX7yXp1WQu2lHAEmso=
sha384-BqLllWOqgdqh7QMk7SFxpEwpA27vq0QFgdOjo5QGGbL7QhVZ3tD10+iT+4igfagT
sha512-LfcXv+CjCztjUYZlAYOKeWDKGQ3wx9UPxS8POqb0OoF3yO8aNtxKXs/6dV8yeGUA4ZRa22rINM3JR55+ZdMU/w==

Content loaded via url("...")

../../dist/icons.css

../img/actions/arrow-left.svg

../img/actions/arrow-right.svg

../img/actions/checkbox-mark.svg

../img/actions/checkbox-mark-white.svg

../img/actions/checkbox-mixed.svg

../img/actions/checkbox-mixed-white.svg

../img/actions/play-next.svg?v=1

../img/actions/play-previous.svg?v=1

../img/breadcrumb.svg?v=1

../img/filetypes/folder-drag-accept.svg?v=1

../img/loading.gif

../img/loading-dark.gif

../img/loading-small.gif

../img/loading-small-dark.gif

../img/logo/logo.svg

./close.svg

./close-dark.svg

link

stylesheet

/index.php/apps/theming/theme/dark.css?plain=0&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 1014 Bytes

local SRI possible, possible hash-values:

sha256-1lAgAZmTGuH8/0PWC1fBdUuArgWFURfqgjnWEFfooO4=
sha384-G6Gyd9jk1MXCpLcbCo5bnxSTnXZam2oBs/TVMfrRuyr9blXPGXgg1QwDcWcYI7In
sha512-gDMU5AYydRa2GvyXKldN9+aQhhffhTNa7LPiNTC6NiR4cOCCjNTn4nV3eLf0L9MgsPkTr4++YmdUNrRtVR0DpQ==

Content loaded via url("...")

/core/img/app-background.jpg

/index.php/apps/theming/image/logo?v=6

link

stylesheet

/index.php/apps/theming/theme/dark.css?plain=1&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 995 Bytes

local SRI possible, possible hash-values:

sha256-T+i5gM7RlsGysb9o24YjUogCHmPDIe4wVpbZy608brk=
sha384-fDqWsxEOnePmu37G4r1BFZ/39O2SeDLNpjfsvCaTWqqpxWrE55Irrj2uh/7YXzpy
sha512-zOntsXwJJNBqltSjbvDfFWt7AIAMNJY9M5xa7dccklRhEEpKqBLUdO2An/zLtyZxZ8R7q6r/3Du2QMEwci5FUw==

Content loaded via url("...")

/core/img/app-background.jpg

/index.php/apps/theming/image/logo?v=6

link

stylesheet

/index.php/apps/theming/theme/dark-highcontrast.css?plain=0&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 1057 Bytes

local SRI possible, possible hash-values:

sha256-0IbreotCwjCXoWh5geGQE0xVq79MKlo0egtW+283cXI=
sha384-tlgaImtDvwpDXugW7+/jjokV4sJ2EHrBd7tyhzZvjBUzKvwwJe+pzLNrmyFqdYgX
sha512-OkJgwasMfRSxpt3AjKlQgAlZ4fNGlIikDKOJk4VcKDnq7fQfgjh8lJN9plkH+CRuzxcw3r1cTCG4NOpJHcSTvg==

Content loaded via url("...")

/core/img/app-background.jpg

/index.php/apps/theming/image/logo?v=6

link

stylesheet

/index.php/apps/theming/theme/dark-highcontrast.css?plain=1&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 1042 Bytes

local SRI possible, possible hash-values:

sha256-2zNdJCBKY2vIdLj4ZytRdCkPf1rymWPEmE6k4zkY0qY=
sha384-xCI+sxzuO4F7zkSV88S8ya3Vyx0ONnrjC44xVWHEchMkjoO2dAZVY2a/xnpilb12
sha512-rA9W7XWyfIsM+qWjXxXSwwq406hiS+jRCwAzxttS/ilvR57442c1qgwa6aBqMAB1kie6N7t6l9ntm1oa+C6O7A==

Content loaded via url("...")

/core/img/app-background.jpg

/index.php/apps/theming/image/logo?v=6

link

stylesheet

/index.php/apps/theming/theme/default.css?plain=1&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 1000 Bytes

local SRI possible, possible hash-values:

sha256-AYGcZ1A2k6gT7eJcH0Vl7ZeVWh9is6BFb3DN47OBDVc=
sha384-sXPY5JffXZiU6iwxxfa5ek5nF9Ttt0AeolcvKOZo4QvcFQwqKuCDOr57rKzDEGNX
sha512-y4XlMgYQEC4VpvyMht9xkzXWKLXy5jzWpmqI/EN1u2It+ao5mm588EG6monevAZ7Cs3ntW/AghaFXNkvHyH8Eg==

Content loaded via url("...")

/core/img/app-background.jpg

/index.php/apps/theming/image/logo?v=6

link

stylesheet

/index.php/apps/theming/theme/light.css?plain=0&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 1022 Bytes

local SRI possible, possible hash-values:

sha256-nmhY/fBCwYk2DjB2oKvNlFy7bMP5cs/+g/gk2PJfS5E=
sha384-D24Y6y6ruLW/dM7oqf8l1eSDtgLEzTlEBepxaCfQr+c7BXuZiB1yNFpaKD5Ei2DQ
sha512-7vSa29xoC8fQzooBEX3ALp3ctMmGb6QbDoM/WQhXDjpzafakr4cJ5kIdu2ISWX6JAwI/w0Fyoo22w5XiZCOa1A==

Content loaded via url("...")

/core/img/app-background.jpg

/index.php/apps/theming/image/logo?v=6

link

stylesheet

/index.php/apps/theming/theme/light.css?plain=1&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 1000 Bytes

local SRI possible, possible hash-values:

Content loaded via url("...")

/core/img/app-background.jpg

/index.php/apps/theming/image/logo?v=6

link

stylesheet

/index.php/apps/theming/theme/light-highcontrast.css?plain=0&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 1058 Bytes

local SRI possible, possible hash-values:

sha256-WMGzWTOWlXc3CePNp//lXn6yNAefQW+J7tixrltiANw=
sha384-6pxNwylfNErC2kpQzzA4mcf8Hp9r2qRy6a4GzHOJpPajBmQPvWtdTPrY7yulFgHq
sha512-3rNiTQjW+goPoBXl45Nj380JcE5lLLoRGHc1cFirOtVPyk1+oJO6thq2eFHrMmBVhuVztD20c56m0Oig8gbq6A==

Content loaded via url("...")

/core/img/app-background.jpg

/index.php/apps/theming/image/logo?v=6

link

stylesheet

/index.php/apps/theming/theme/light-highcontrast.css?plain=1&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

Compression required: 1042 Bytes

local SRI possible, possible hash-values:

sha256-wF3wqcl13gz3ccUbEMi2XbKhyYAGuRX9keQ/8eOZIUM=
sha384-8MiqaXjPQffuAYuyv3tjHdJnRWP9Cujh0ua1Fk0+vXt8AknmtLyy9uDz3KEs5vb9
sha512-Of0ka109vDiKecgxWAGcAs4Z+k8VL8a4p9fS4J5G+nRBMHiByug0Iuza7bS3KK3uCLshBNjHq5VgDrHJcOc8bw==

Content loaded via url("...")

/core/img/app-background.jpg

/index.php/apps/theming/image/logo?v=6

link

stylesheet

/index.php/apps/theming/theme/opendyslexic.css?plain=0&v=c1dfd96e

200

text/css;charset=UTF-8
X-Content-Type-Options nosniff found

331 Bytes

local SRI possible, possible hash-values:

sha256-H5CxzBCt1ubPlB3cx4/J70/ijXR45JwABljfxQ+/Qlg=
sha384-R3FZ9gdZ3AG2j0wCIy/CSHl8Opbn47wPJ2nisWlrKB7Y22T3YRUJfych7Pcri/QB
sha512-85ji92XmI1pHA7vk8RmpBgVKrJC/cdnSgnK9V06XoVsUeTRtFcXu3B9mHOPjOE8vJpUhuu7tjFtPzeZeFWRy+g==

Content loaded via url("...")

/apps/theming/fonts/OpenDyslexic-Bold.otf

/apps/theming/fonts/OpenDyslexic-Bold.ttf

/apps/theming/fonts/OpenDyslexic-Bold.woff

/apps/theming/fonts/OpenDyslexic-Regular.otf

/apps/theming/fonts/OpenDyslexic-Regular.ttf

/apps/theming/fonts/OpenDyslexic-Regular.woff

meta

charset

utf-8

meta

og:description

Hier werden Ihre Probleme nicht erörtert sondern gelöst

meta

og:image

https://nc.edvmr.it/index.php/apps/theming/icon?v=6

200

image/png
X-Content-Type-Options nosniff found

No Compression - 25247 Bytes

meta

og:site_name

EDV Beratung, Service, Schulung & Vertrieb

meta

og:title

EDV Beratung, Service, Schulung & Vertrieb

meta

og:type

website

meta

og:url

https://nc.edvmr.it/

302

https://nc.edvmr.it/index.php/login

text/html; charset=UTF-8
X-Content-Type-Options nosniff found

0 Bytes

meta

apple-itunes-app

app-id=1125420102

meta

robots

noindex, nofollow

meta

theme-color

#0082c9

meta

viewport

width=device-width, initial-scale=1.0, minimum-scale=1.0

script

src

/apps/files_rightclick/js/files.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 1269 Bytes

local SRI possible, possible hash-values:

sha256-gCXtY//3K5MTcKjR36OwiEVV212eJA/DuyFwTgHl6Mw=
sha384-nSDwOJ9pJ6TwsBozu7mLj06LYRdbeFVO+ZAZMpDoZPUXWwuzvzVNoFgcGHqIeKme
sha512-3hw3H1WxeWlTVoEXxxFfBbvDwwVerMrzU6C49TCK3bG/iodc3krJMeTYtmmDrLGCaVha/N6HKr1N72uPVU0Z0A==

script

src

/apps/files_rightclick/js/script.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 3219 Bytes

local SRI possible, possible hash-values:

sha256-ImP9ubQwKSVs8h7hpXfj1MyRrhUJSSAMBXM7GeHhWRI=
sha384-oz3FeiEkCWUpvcGxFe0lc0vHRHpvgaga6ts9uF5lMHUf/kO+DunGPsgCGKfnUn33
sha512-jDxJYxtP1u8YlX9IvYzR0g/AQrnwi2YYJjZQ108k5kdO47wTn6iccP1QMoXQSvQR1wvMt+PbsFyZIQxfyDVulQ==

script

src

/apps/files_rightclick/l10n/de.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

492 Bytes

local SRI possible, possible hash-values:

sha256-tP7tUdCrNKOEvvvB46300Ya+6nC558YtF/5JyHO1Hws=
sha384-qZC6eFt+V8aGorO6aBbW22bwIK8byu/zlam6HFX+egE2rutLHB4+PFzakPlxUuJN
sha512-EtI1doqsvbw9ykTDwKOuTtgyAKaRFbZUgXwfSAvkdrX45oGqsmTwUfWA30PxeTpMJFlVqoRxBG3ejO736L6Q2Q==

script

src

/apps/files_sharing/l10n/de.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 5864 Bytes

local SRI possible, possible hash-values:

sha256-VC8RTS+CwCwWJv/H1vfVr4bur3hEb9t0iA2kiwZi8CM=
sha384-CqNIUbXUoirgRlzrg8BroukzuRl2r6og/xIPopZIB32GFMHYyuOD4QyZ2EnBtnEi
sha512-jrE/BFII1eBHiu3DgUxWDN3CLUhvacoYuMBSkCgL5peLjcAUs4Teg8ucBF7ti7uYEO16BVpsrJyuTMd7+esBeQ==

script

src

/apps/theming/js/theming.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

60 Bytes

local SRI possible, possible hash-values:

sha256-7E5z5JvKP25SPD39ZuWPoVfIHE2l6z+gzqpYm6jcB4U=
sha384-RgfcEmN83rAzQ22NMxXMt+aycjGGuR1FOu0Lwguj2MOFZ1WIIYPjRA0M3KPXYkv3
sha512-R1ZIFQ46FERE2rH4436ql+eKqBCuI4MIpeSahNGHoovE6BzeJPCFjtzRwr5x+SkADJ+ve9v82W+uKszcTMMpIg==

script

src

/apps/theming/l10n/de.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 2857 Bytes

local SRI possible, possible hash-values:

sha256-/s/E81KFtliEmbn5gAcai13TD1b9p/5jOArlor4eObc=
sha384-Uh8d51SWYuZl7GkR6cTUhG2Dp1UmcStxu1QUNkrt+zR2+LLCzGwS6IRZLIScK3gH
sha512-WE3ZeXClTzagxP8Z3VQXu2a/m0772L4kzhUy0q8QjqCLmNJTFmYDdw7kyKFGc6vwVIQzZqW+v+X8uneBXnAIVw==

script

src

/core/l10n/de.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 19813 Bytes

local SRI possible, possible hash-values:

sha256-lpujKorC8TZXepUwDQcds45av/ULD8NVN9pEzSewzfI=
sha384-QKSl2o3bkdgz1xp3WwT0kcvj94YSHozbRxgE5MX1CmLhklkVcS8hti/p6nsReIo/
sha512-KXmrDTKWFTrqZiv+U0Y7+ie+KqAoPNn47NFut+0uZDCFCqBgiqbuDBR2TfyRMPF254iI0fbHXakjkt1NzLZ7iw==

script

src

/dist/core-common.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 3046327 Bytes

local SRI possible, possible hash-values:

sha256-4z/9kWpPKSJAquArDlYymY6anWxCXO+U/bGI2W+IPWM=
sha384-gFCnsPB/RsQIyLEAZgBqaoZNdebvUCel+5Oo34lxozYLzEBSNZkSwQmOP02s5tgL
sha512-fOxUK2cNN7tPPZa0ciHx3oxzGzCwBVPRxmrZpd3e80IUAFRh8n696+JlhjibZqRdSjK7adk6B8QBcw7+rCa8dg==

script

src

/dist/core-files_client.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 4294 Bytes

local SRI possible, possible hash-values:

sha256-X8nZVol26rEmDeZwVdc/IA/XKSVEd+PDSxnq/yZzS/w=
sha384-dHEVVZOizxckK0orjLK7W6H+CpKoJiO8ghwYgNt9B3f7inHqnsoaHs3ZC7MhSipE
sha512-8Imcna2ytv4h+l+gf6ge8D8ismpQBHuJglUxkXb9A4rf6NgdoUqosRjS41QMK8N099FQs4P+pSeA+CSqZpSf1w==

script

src

/dist/core-files_fileinfo.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

521 Bytes

local SRI possible, possible hash-values:

sha256-GIniBZi1EHceHCw3jOjMBz/S4fbNqpxlqQMaaFFNXgI=
sha384-Q7jAssuY0rH4s43oEiC8SvBUwXYem0gr2V4MmeU4iCMZNK/kQaTAARTckEZ8quc4
sha512-2x1pBYzL1MmjjfRyrpYTgXu5YgU7QKbHviOgfrNozi6twWRUPBsXz51OhgaS2slYqsBy0wu6Cp2mpAeViGa7pw==

script

src

/dist/core-login.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 30811 Bytes

local SRI possible, possible hash-values:

sha256-GDrEUMscOtAMci4OHTaKkYJc0Vr+4LAs+RWllsJh67Y=
sha384-BU+FuaA5nwlUUjfRFJbBE2AcTWFKNVOsvXpCPr2LbHq0X2vlH2oJwZfjtCc1TAeA
sha512-GFpMWHI99CNKjqaHXQGfYLypUR4bknQW+0Qbqo/ZQ10Md9r49Ov68f7G0DZ0UjcVFOqO9fb+J8aM5ZlPeLKiEA==

script

src

/dist/core-main.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

Compression required: 50074 Bytes

local SRI possible, possible hash-values:

sha256-pvvJyP3CMZylnnAjTd1KIO34xF1iVv1O73lWH4xNpc0=
sha384-TJz343lcF57PERuqEaw64TJvEZOTL7gWH0ANjnllz+YFvkAmaiYY/HStFILvo/y4
sha512-hYkUZQ5GQ4FAlWQdrufielHZ5tAx+Uzi2ZMrzH37GwxFMuxG8v6Lq57BdsHplQdF0koHK6/zkhG4o1depX3bBg==

script

src

/dist/files_sharing-main.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=15778463, immutable - with long duration found.

254 Bytes

local SRI possible, possible hash-values:

sha256-bjH3WDFNJ0jGjo20qvvFxsJldO0h3uPBkekA3boiPWA=
sha384-4+Lrc6k4gX3remfW6ZvajUfD2JW6p4tqVUJ0QVZAgq/mak9rv1dxiLfjwop4+E1V
sha512-moThG20B5u9UE9lVGLLB7il2bxX24NfUDHuR5p1yLe2wZHN9RIRaVg5uJpEcfCXPer+QwHXn273qluxM2crMpA==

script

src

/index.php/core/js/oc.js?v=ae944db2

200

defer attribute found

text/javascript;charset=UTF-8
X-Content-Type-Options nosniff found

Cache-Control: no-cache, no-store, must-revalidate - max-age missing.

Compression required: 1574 Bytes

local SRI possible, possible hash-values:

sha256-oksb7FU87RPL5PBsHwGGtbnjPbkr8HkpS3FqmqUr/Q8=
sha384-/0QObJzGlhz3oajygLvP9HYzley1rVZql0UsR/Goj12LTsCIFQei2e1UkJiyNcKU
sha512-3C+OM0/wwNv0L4GlOZzx4u6WYl0/ncebyw91zBGFUOF+E2m8e/Q1tUv0QVW7ALSttFsNX1lCISzoRhW2UmUF2A==

script

src

/index.php/js/core/merged-template-prepend.js?v=ae944db2-6

200

defer attribute found

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: max-age=31536000, immutable - with long duration found.

Compression required: 3098 Bytes

local SRI possible, possible hash-values:

sha256-WqgaFDf3Bk/04OAnkVC0GIN0U/pDsvY1OwYoNwG2dJE=
sha384-u7/gkuxiydzRf5AbIXDsoRKbzjjgveNTKYhWcmGyWikldsZGp7WlXBgMHlVvSDXf
sha512-XotobONf2s+Q9bvSgT58p8bzCXXw1oqE1rVEhb2EdpsnH6ZgEAGPY/gdb+y1l57Xr756n2N0IqMtGWqM0AWHUg==

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns5.kasserver.com, ns6.kasserver.com

QNr.	Domain	Type	NS used
1	com	NS	b.root-servers.net (2001:500:200::b)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2	ns5.kasserver.com: 85.13.128.3	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns6.kasserver.com 85.13.159.101
	Answer: ns7.kasserver.com 70.84.168.162
3	de	NS	k.root-servers.net (2001:7fd::1)
	Answer: a.nic.de, f.nic.de, l.de.net, n.de.net, s.de.net, z.nic.de
4	ns1.kas-dns-service.de	NS	a.nic.de (2001:678:2::53)
	Answer: f.nic.de
5	ns14.kas-dns-service.de	NS	a.nic.de (2001:678:2::53)
	Answer: f.nic.de
6	ns1.kas-dns-service.de: 164.68.122.186	A	f.nic.de (2a02:568:0:2::53)
7	ns1.kas-dns-service.de: No AAAA record found	AAAA	f.nic.de (2a02:568:0:2::53)
8	ns14.kas-dns-service.de: 85.13.158.127	A	f.nic.de (2a02:568:0:2::53)
9	ns14.kas-dns-service.de: No AAAA record found	AAAA	f.nic.de (2a02:568:0:2::53)

14. CAA - Entries

Domainname	flag	Value	∑ Queries
service.edvmr.it	0	no CAA entry found	1
nc.edvmr.it			1
edvmr.it	0	no CAA entry found	1
	0	no CAA entry found	1
it	0	no CAA entry found	1
	0	no CAA entry found	1

15. TXT - Entries

Domainname	Status	∑ Queries
edvmr.it	ok	1
nc.edvmr.it		1
_acme-challenge.nc.edvmr.it	Name Error - The domain name does not exist	1
_acme-challenge.service.edvmr.it	missing entry or wrong length	1
_acme-challenge.nc.edvmr.it.edvmr.it	perhaps wrong	1
_acme-challenge.nc.edvmr.it.nc.edvmr.it	Name Error - The domain name does not exist	1
_acme-challenge.service.edvmr.it.service.edvmr.it	perhaps wrong	1

16. DomainService - Entries

No DomainServiceEntries entries found

17. Cipher Suites

Summary
Domain	IP	Port	num Ciphers	time	Std.Protocol	Forward Secrecy
nc.edvmr.it	84.151.199.104	443	5 Ciphers	31.49 sec		0 without, 5 FS	100.00 %
Complete		1	5 Ciphers 5.00 Ciphers/Check	31.49 sec	31.49 sec/Check	0 without, 5 FS	100.00 %

Details
Domain	IP	Port	Cipher (OpenSsl / IANA)
nc.edvmr.it	84.151.199.104	443	ECDHE-RSA-CHACHA20-POLY1305		(Secure)	TLSv1.2	0xCC,0xA8	FS
5 Ciphers, 31.49 sec			TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
			ECDH		RSA	CHACHA20/POLY1305(256)	AEAD
			ECDHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0xC0,0x30	FS
			TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
			ECDH		RSA	AESGCM(256)	AEAD
			DHE-RSA-AES256-GCM-SHA384		(Secure)	TLSv1.2	0x00,0x9F	FS
			TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
			DH		RSA	AESGCM(256)	AEAD
			ECDHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0xC0,0x2F	FS
			TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
			ECDH		RSA	AESGCM(128)	AEAD
			DHE-RSA-AES128-GCM-SHA256		(Secure)	TLSv1.2	0x00,0x9E	FS
			TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
			DH		RSA	AESGCM(128)	AEAD

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=bd60cbfc-19d2-44de-a991-050c01c6e15d

Last Result: https://check-your-website.server-daten.de/?q=nc.edvmr.it - 2022-11-30 15:13:12

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=nc.edvmr.it" target="_blank">Check this Site: nc.edvmr.it</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=nc.edvmr.it

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks