Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
netflix.com
A
52.214.181.141
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.
Hostname: ec2-52-214-181-141.eu-west-1.compute.amazonaws.com
yes
1
0

A
52.214.181.141
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.
Hostname: ec2-52-214-181-141.eu-west-1.compute.amazonaws.com
yes
1
0

A
54.170.196.176
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.
Hostname: ec2-54-170-196-176.eu-west-1.compute.amazonaws.com
yes
1
0

A
54.170.196.176
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.
Hostname: ec2-54-170-196-176.eu-west-1.compute.amazonaws.com
yes
1
0

A
54.246.79.9
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.
Hostname: ec2-54-246-79-9.eu-west-1.compute.amazonaws.com
yes
1
0

A
54.246.79.9
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.
Hostname: ec2-54-246-79-9.eu-west-1.compute.amazonaws.com
yes
1
0

AAAA
2a05:d018:76c:b683:f711:f0cf:5cc7:b815
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.

yes



AAAA
2a05:d018:76c:b684:8e48:47c9:84aa:b34d
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.

yes



AAAA
2a05:d018:76c:b685:3b38:679d:2640:1ced
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.

yes


www.netflix.com
CNAME
www.dradis.netflix.com
yes
1
0

CNAME
www.eu-west-1.internal.dradis.netflix.com
yes


www.netflix.com
A
52.214.181.141
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.
No Hostname found
no



A
54.170.196.176
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.
No Hostname found
no



A
54.246.79.9
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.
No Hostname found
no


*.netflix.com
A

yes



AAAA

yes



CNAME

yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 61809, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2025, 00:00:00 +, Signature-Inception: 31.10.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: com

com
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=






2 RRSIG RR to validate DS RR found






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 14.11.2025, 17:00:00 +, Signature-Inception: 01.11.2025, 16:00:00 +, KeyTag 61809, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61809 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 46539, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.11.2025, 14:02:35 +, Signature-Inception: 29.10.2025, 13:57:35 +, KeyTag 19718, Signer-Name: com






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: netflix.com

netflix.com
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "je0u1cqu4pm3fri3tp7egu66oub2834l" between the hashed NSEC3-owner "je0tthbinb52m7705r0clnl4g7hhff0f" and the hashed NextOwner "je0u3hgfs79ebi40445elsfu0jtkk4pp". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner je0tthbinb52m7705r0clnl4g7hhff0f.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 06.11.2025, 02:52:32 +, Signature-Inception: 30.10.2025, 01:42:32 +, KeyTag 46539, Signer-Name: com






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q3udg8cekkae7rukpgct1dvssh8ll". So that domain name is the Closest Encloser of "netflix.com". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 07.11.2025, 00:26:25 +, Signature-Inception: 30.10.2025, 23:16:25 +, KeyTag 46539, Signer-Name: com






0 DNSKEY RR found









Zone: www.netflix.com

www.netflix.com
0 DS RR in the parent zone found



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 61809, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.11.2025, 00:00:00 +, Signature-Inception: 31.10.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: com

com
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=






2 RRSIG RR to validate DS RR found






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 14.11.2025, 17:00:00 +, Signature-Inception: 01.11.2025, 16:00:00 +, KeyTag 61809, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61809 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 46539, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 13.11.2025, 14:02:35 +, Signature-Inception: 29.10.2025, 13:57:35 +, KeyTag 19718, Signer-Name: com






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: netflix.com

netflix.com
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "je0u1cqu4pm3fri3tp7egu66oub2834l" between the hashed NSEC3-owner "je0tthbinb52m7705r0clnl4g7hhff0f" and the hashed NextOwner "je0u3hgfs79ebi40445elsfu0jtkk4pp". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner je0tthbinb52m7705r0clnl4g7hhff0f.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 06.11.2025, 02:52:32 +, Signature-Inception: 30.10.2025, 01:42:32 +, KeyTag 46539, Signer-Name: com






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q3udg8cekkae7rukpgct1dvssh8ll". So that domain name is the Closest Encloser of "netflix.com". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 07.11.2025, 00:26:25 +, Signature-Inception: 30.10.2025, 23:16:25 +, KeyTag 46539, Signer-Name: com






0 DNSKEY RR found









Zone: dradis.netflix.com

dradis.netflix.com
0 DS RR in the parent zone found






0 DNSKEY RR found









Zone: www.dradis.netflix.com

www.dradis.netflix.com
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
netflix.com
  ns-1372.awsdns-43.org / 219bd6dca506e8a61c488477807546f8 -
205.251.197.92
Herndon/Virginia/United States (US) - Amazon.com


 
2600:9000:5305:5c00::1
Chicago/Illinois/United States (US) - Amazon.com, Inc.


  ns-1984.awsdns-56.co.uk / 2590f50fa8205e11984644d6dca65fdb -
205.251.199.192
Ashburn/Virginia/United States (US) - Amazon.com


 
2600:9000:5307:c000::1
Seattle/Washington/United States (US) - Amazon.com, Inc.


  ns-659.awsdns-18.net / 3699dafa05461fbeeb4b58e48d30cc7a -
205.251.194.147
Chicago/Illinois/United States (US) - Amazon.com


 
2600:9000:5302:9300::1
Seattle/Washington/United States (US) - Amazon.com, Inc.


  ns-81.awsdns-10.com / b1823eb14b217b67d4d088453089b13c -
205.251.192.81
Ashburn/Virginia/United States (US) - Amazon.com


 
2600:9000:5300:5100::1
Seattle/Washington/United States (US) - Amazon.com, Inc.

com
  a.gtld-servers.net / nnn1-par6


  b.gtld-servers.net / nnn1-elwaw4


  c.gtld-servers.net / nnn1-par6


  d.gtld-servers.net / nnn1-par6


  e.gtld-servers.net / nnn1-par6


  f.gtld-servers.net / nnn1-defra-4


  g.gtld-servers.net / nnn1-defra-4


  h.gtld-servers.net / nnn1-defra-4


  i.gtld-servers.net / nnn1-defra-4


  j.gtld-servers.net / nnn1-frmrs-2


  k.gtld-servers.net / nnn1-frmrs-2


  l.gtld-servers.net / nnn1-frmrs-2


  m.gtld-servers.net / nnn1-frmrs-2


dradis.netflix.com
  e.ns.nflxso.net
45.57.8.1
New York/United States (US) - Netflix Streaming Services Inc.


 
2a00:86c0:2008::1
London/England/United Kingdom (GB) - NET6


  f.ns.nflxso.net
45.57.9.1
New York/United States (US) - Netflix Streaming Services Inc.


 
2a00:86c0:2009::1
London/England/United Kingdom (GB) - NET6

netflix.com
  ns-1372.awsdns-43.org / f725f10ef470ccf610aa6a291e007626 -
205.251.197.92
Herndon/Virginia/United States (US) - Amazon.com


 
2600:9000:5305:5c00::1
Chicago/Illinois/United States (US) - Amazon.com, Inc.


  ns-1984.awsdns-56.co.uk / c9d3355153e83a85d8d64c65fc9e10a8 -
205.251.199.192
Ashburn/Virginia/United States (US) - Amazon.com


 
2600:9000:5307:c000::1
Seattle/Washington/United States (US) - Amazon.com, Inc.


  ns-659.awsdns-18.net / 9955576c71624bbd4c5e4da9552ce893 -
205.251.194.147
Chicago/Illinois/United States (US) - Amazon.com


 
2600:9000:5302:9300::1
Seattle/Washington/United States (US) - Amazon.com, Inc.


  ns-81.awsdns-10.com / b1823eb14b217b67d4d088453089b13c -
205.251.192.81
Ashburn/Virginia/United States (US) - Amazon.com


 
2600:9000:5300:5100::1
Seattle/Washington/United States (US) - Amazon.com, Inc.

com
  a.gtld-servers.net / nnn1-par6


  b.gtld-servers.net / nnn1-elwaw4


  c.gtld-servers.net / nnn1-par6


  d.gtld-servers.net / nnn1-par6


  e.gtld-servers.net / nnn1-par6


  f.gtld-servers.net / nnn1-defra-4


  g.gtld-servers.net / nnn1-defra-4


  h.gtld-servers.net / nnn1-defra-4


  i.gtld-servers.net / nnn1-defra-4


  j.gtld-servers.net / nnn1-frmrs-2


  k.gtld-servers.net / nnn1-frmrs-2


  l.gtld-servers.net / nnn1-frmrs-2


  m.gtld-servers.net / nnn1-frmrs-2

 

4. SOA-Entries


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1762048264
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:6


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1762048279
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:7


Domain:netflix.com
Zone-Name:netflix.com
Primary:ns-81.awsdns-10.com
Mail:awsdns-hostmaster.amazon.com
Serial:1
Refresh:7200
Retry:900
Expire:1209600
TTL:1800
num Entries:8



Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1762048294
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:3


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1762048314
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:10


Domain:netflix.com
Zone-Name:netflix.com
Primary:ns-81.awsdns-10.com
Mail:awsdns-hostmaster.amazon.com
Serial:1
Refresh:7200
Retry:900
Expire:1209600
TTL:1800
num Entries:8


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048250
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048250
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048250
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048257
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048257
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048257
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048263
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048263
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048263
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048274
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048274
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


Domain:dradis.netflix.com
Zone-Name:dradis.netflix.com
Primary:e.ns.nflxso.net
Mail:nicadmin.netflix.com
Serial:1762048274
Refresh:16384
Retry:2048
Expire:1048576
TTL:60
num Entries:1


5. Screenshots

Startaddress: https://www.netflix.com/de-en/, address used: https://www.netflix.com/de-en/, Screenshot created 2025-07-18 08:32:24 +00:0

 

Mobil (412px x 732px)

 

2378 milliseconds

 

Screenshot mobile - https://www.netflix.com/de-en/
Mobil + Landscape (732px x 412px)

 

2471 milliseconds

 

Screenshot mobile landscape - https://www.netflix.com/de-en/
Screen (1280px x 1680px)

 

1228 milliseconds

 

Screenshot Desktop - https://www.netflix.com/de-en/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport396732
content Size3964015

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://netflix.com/
52.214.181.141
301
https://netflix.com/

0.070

Location: https://netflix.com/
Via: 1.1 i-08b1f2d588ff2e945 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/
Set-Cookie: nfvdid=BQFmAAEBELHtCwpve3G_dc5zZWB73NFASVtSUD1iaAiC59KIXLSqdMVD7dzese7k7AlBvr3xmNFWPrzTjdKMw2HoOx1B4jJAJkwoPXaDoTRHRdo0E9djcQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 1
Content-Length: 0

• http://netflix.com/
54.170.196.176
301
https://netflix.com/

0.066

Location: https://netflix.com/
Via: 1.1 i-08b1f2d588ff2e945 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/
Set-Cookie: nfvdid=BQFmAAEBEAe0waU3I_3YWsNCYKp4QztA_b_ts0cNnj49IKvCUoGozvjkSUrWlEo7FYsOYECfa-NhYwWW3OCaeiVuQg2YnNe_tHgJWqq2pA7HFzrLTqXhow%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://netflix.com/
54.246.79.9
301
https://netflix.com/

0.073

Location: https://netflix.com/
Via: 1.1 i-0415bf5680861a728 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/
Set-Cookie: nfvdid=BQFmAAEBEOGotiUVOs2topoMwvv1YIFAZJZA4PWryt_uHDBTbViPr7-0Vv-AaX0n_gLDSVUBv4U7kQKeu5TUTUJsAiEXIZikqAmHLTeUNUxGyulBuDIC4w%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://netflix.com/
2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301
https://netflix.com/

0.067

Location: https://netflix.com/
Via: 1.1 i-0224e1209134fe7f5 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/
Set-Cookie: nfvdid=BQFmAAEBEHrEjKCdhnORnJkX57NKfs5Azjqf9Z-Oloc1azsnW2bj1npK_7z2gdtpKNcg1zgrHR6saSpnWlNsPX0AcBNE_uzxtQqf-0bC7i_wFFqSTgG5Qg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://netflix.com/
2a05:d018:76c:b684:8e48:47c9:84aa:b34d
301
https://netflix.com/

0.063

Location: https://netflix.com/
Via: 1.1 i-02176d3039dec45c4 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/
Set-Cookie: nfvdid=BQFmAAEBEBbRkrO412Xd0KfcKSka8wtA4r81M_7RQDvsipyLGWAisjkx4lPDWbYJTwmt4BFCkdhHMF1GLfIYKiCvT8LNosdSPjgr9pbGs_q5BHUMnp2d3A%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://netflix.com/
2a05:d018:76c:b685:3b38:679d:2640:1ced
301
https://netflix.com/

0.066

Location: https://netflix.com/
Via: 1.1 i-083c6d0eec8ac7b82 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/
Set-Cookie: nfvdid=BQFmAAEBENpgdHuXxF852j8gz3lx9lJAHQC0WL0juOtN-m7imTeSh3SiEJRNLixw6amHfZbaI3v9FbtUfXG5ye2dqyJKcivJ8jOOU-0WjVIysWkmxM60jg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://www.netflix.com/
52.214.181.141
301
https://www.netflix.com/

0.037

Location: https://www.netflix.com/
Via: 1.1 i-08b1f2d588ff2e945 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://www.netflix.com/
Set-Cookie: nfvdid=BQFmAAEBEINwB7iE_7jiC54rrZJFYQZAngOIQgujDRewBSdEG99baNJDmmfjOun64wlE-UdewIh2gtAhu66h4PxgFG0TTnfcr6oqeMNr7MTLFGls8VvC9Q%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 1
Content-Length: 0

• http://www.netflix.com/
54.170.196.176
301
https://www.netflix.com/

0.037

Location: https://www.netflix.com/
Via: 1.1 i-08b1f2d588ff2e945 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://www.netflix.com/
Set-Cookie: nfvdid=BQFmAAEBEJkugMEKuHCMs8LFWbRJvnhAdp1vDFkig_yU2l5Q1-RzoIRDwFB6y96ecryDLZzVTFoTBxpnUMqeieY9P118ArmLOnhE4XYgtPDYB00kPXSTDQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://www.netflix.com/
54.246.79.9
301
https://www.netflix.com/

0.037

Location: https://www.netflix.com/
Via: 1.1 i-0415bf5680861a728 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://www.netflix.com/
Set-Cookie: nfvdid=BQFmAAEBEAB8krTPygUOKHvCva9N48hAc_cbCT2BRdvzCjwZx4YyImGYRQ2NFHxYbdrJY4jdsfe6hOoI1yoYvWXu-wa3AG2u8_h-XybSIRLZQ0I2tTqQcg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• https://netflix.com/
2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301
https://www.netflix.com/

2.003
B
Server: envoy
X-Frame-Options: DENY
Location: https://www.netflix.com/
Date: Sun, 02 Nov 2025 01:55:07 GMT
x-envoy-upstream-service-time: 2
x-b3-traceid: 6906b9fb11d07024366261ae55411d33
X-Request-ID: 5ae6176c-b44e-4367-8e2e-b7ba1cfee7d7
x-envoy-decorator-operation: lo_svc
Transfer-Encoding: chunked
Via: 1.1 i-01ee4b21e53c1b2c3 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/
Edge-Control: no-cache, no-store
Cache-Control: no-store, no-cache
Set-Cookie: nfvdid=BQFmAAEBEIyB-Yvv013OoXTdReXhPhNAWyWXKk1J0wsBhJD_JoIE6gTMgo2vJ3ruPV0pjxuD-rAT66hTWcjQflglrbXVrOvAMzgbD6txByrmYZGVQfA85Q%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000,SecureNetflixId=v%3D3%26mac%3DAQEAEQABABRYpRFrgu2pN1Rvx5ucBN3L804-YK0FR6U.%26dt%3D1762048507757; Domain=.netflix.com; Expires=Mon, 2 Nov 2026 01:55:07 GMT; Path=/; HttpOnly; Secure; SameSite=Strict,NetflixId=v%3D3%26ct%3DBgjHlOvcAxLAAQfVcxddlKqNX1wF6ToG6e30EQgsx9Zw7YH-nBxsHEFKIMdqJeWiEedAh22EBFeO4_nM-UGhYRH-lHTL_zFgbdBWqcBACBlTFp3PffLtLBAmwZnR5DVvwyKJaFudZhNVofg5w0oC7cX8wu6x9pmz5WXxWc87_5OVl0zidbkgybvuQTH2FMg9vwusMeKh71y4iOeBX73WJz04ZZLvMmqSafKjsPkggBWXxI3SAvwv8gP1eTIgVbockvccSP2HKbHs8hgGIg4KDF4hrdp4X7Y_HIKZ1g..; Domain=.netflix.com; Expires=Mon, 2 Nov 2026 01:55:07 GMT; Path=/; HttpOnly; Secure; SameSite=Lax
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 78
Content-Length: 0

• https://netflix.com/
52.214.181.141
-103


0.316
P
SecureConnectionError (3, 0x80131620). The SSL connection could not be established, see inner exception. Received an unexpected EOF or 0 bytes from the transport stream (FF: PR_END_OF_FILE_ERROR)

• https://netflix.com/
54.170.196.176
403


2.640
B
Forbidden
Via: 1.1 i-086a509a8320f4db2 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/
Set-Cookie: nfvdid=BQFmAAEBEKvC9l7VG8-JaykW-ymvR-VAHAGHRUYGWVy7OIFgtB9laCO9KPkHWun4wEJ9BwSoJcQkC3s5Sw3gItbQWnCdIGUW3zgwgV8Zi82xGF5Zf3C1-w%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000,SecureNetflixId=v%3D3%26mac%3DAQEAEQABABRm237YTFN6DROSUIOjsfmUxm-a8EVKzmQ.%26dt%3D1762048503418; Domain=.netflix.com; Expires=Mon, 2 Nov 2026 01:55:03 GMT; Path=/; HttpOnly; Secure; SameSite=Strict,NetflixId=v%3D3%26ct%3DBgjHlOvcAxLAAYuYf79YzM-w89pr4tmBKWQwFv9Lw3902fycJzknwRXKxaOMcjGkChiJZ_5Vuz9LDUNbIOEpp9ZEErw5DDamK8uWatdnycLfFjHRRllVuAs0-jOwnpMl-s3KIk0qE2Tx22vp3Nm7_gQzGyaFif_nZsy0_t48gQowNxYpUjUyFXpSb89q2uPSWJxPfR-oBNFCyzjdvldjYOcp03g7fpITzzwCHvU8NGEYwQnYOfhX-NfcUPjuZaFleVUmOf4rT1MaSBgGIg4KDCudstFnCw8_kLQoDw..; Domain=.netflix.com; Expires=Mon, 2 Nov 2026 01:55:03 GMT; Path=/; HttpOnly; Secure; SameSite=Lax
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_2
X-Netflix-Error-Cause: SpeedbumpV2 (nq_website_nonmember-prod-release; eu-west-1)
X-Netflix.proxy.execution-time: 70
Transfer-Encoding: chunked
Content-Length: 0

• https://netflix.com/
54.246.79.9
-103


0.077
P
SecureConnectionError (3, 0x80131620). The SSL connection could not be established, see inner exception. Received an unexpected EOF or 0 bytes from the transport stream (FF: PR_END_OF_FILE_ERROR)

• https://netflix.com/
2a05:d018:76c:b684:8e48:47c9:84aa:b34d
-103


0.270
P
SecureConnectionError (3, 0x80131620). The SSL connection could not be established, see inner exception. Received an unexpected EOF or 0 bytes from the transport stream (FF: PR_END_OF_FILE_ERROR)

• https://netflix.com/
2a05:d018:76c:b685:3b38:679d:2640:1ced
-103


0.080
P
SecureConnectionError (3, 0x80131620). The SSL connection could not be established, see inner exception. Received an unexpected EOF or 0 bytes from the transport stream (FF: PR_END_OF_FILE_ERROR)

• https://www.netflix.com/
52.214.181.141
-103


0.080
P
SecureConnectionError (3, 0x80131620). The SSL connection could not be established, see inner exception. Received an unexpected EOF or 0 bytes from the transport stream (FF: PR_END_OF_FILE_ERROR)

• https://www.netflix.com/
54.170.196.176
-103


0.083
P
SecureConnectionError (3, 0x80131620). The SSL connection could not be established, see inner exception. Received an unexpected EOF or 0 bytes from the transport stream (FF: PR_END_OF_FILE_ERROR)

• https://www.netflix.com/
54.246.79.9
-110


0.430
W
ResponseEnded (10, 0x80131620). An error occurred while sending the request.

• http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
52.214.181.141
301
https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.043

Visible Content:
Location: https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Via: 1.1 i-08b1f2d588ff2e945 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBEIgpevJ0t2WE15ihcmYLIW9Ajn755McV5Ub-8ohhpuYP-3cnGdipEdoBABryHLYoiJNy5tgDMz1yk5HAuvZet5L8f87gKnnBBQd0SnNVQ2VceA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
54.170.196.176
301
https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.040

Visible Content:
Location: https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Via: 1.1 i-08b1f2d588ff2e945 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBECHWp2K8hLVQYx7UO0hRZUVAOKkWld-OvgSXKzxvYb75ZAZkxys7_1aO913qgve7ACsJzQRJDi40zKh-dAxKLRcETO1wJGe0HqzRl_dX-RZ8cA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
54.246.79.9
301
https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.036

Visible Content:
Location: https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Via: 1.1 i-0415bf5680861a728 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBEM945kawrGPohY5972bVP6JADodiDJeQgE7Epd_yZd-PzwmHqDeVAEinSDTgfK2V9J2tK81-mD5_n15ual9zHmydlGebqdVO9hCZvprRGIygYg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301
https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.040

Visible Content:
Location: https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Via: 1.1 i-0224e1209134fe7f5 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBEGbeC3LVaPM8RB3fPTmSYoZAAxsM9G4jwpz2mIs8ANoTYVSfeupcoIAT3TQ3UkRSJjyNOj4LnvIbEkSHPcZt4uJofzJln7s6b7JjpQXny-OTzw%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d018:76c:b684:8e48:47c9:84aa:b34d
301
https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.037

Visible Content:
Location: https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Via: 1.1 i-02176d3039dec45c4 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBEJ7J9W0ETO-eu45HCcbH78FAxUQRFguXMNpLyQuGETIpdG-EPjQA0NYBaeyyXRBNCgftaHgYNyuF5rA1sSwPvVHb3QLVgQKAdpfxvB7y-3dFPA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
2a05:d018:76c:b685:3b38:679d:2640:1ced
301
https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.037

Visible Content:
Location: https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Via: 1.1 i-083c6d0eec8ac7b82 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBEH-Pu9ipBr7UbQc75G2WhqlAcJ8fmlvmzxl3MNH0yAd27arftSiL92UmN67qFtXbUMa_jpOnXLCwpMOs02qH3NYWAfEhc3E8HpI03E1ExxnpJg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
52.214.181.141
301
https://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.040

Visible Content:
Location: https://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Via: 1.1 i-08b1f2d588ff2e945 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBEKn3HCAcggiTddBc64xxhCxAMaVyjQAJFmI4hzCH1dWdLVurCoYOtKul_a58ztECLDzH_02SyLfMdpJpNqmeFar3bpb8EbP2uNLdN05PH9nONg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
54.170.196.176
301
https://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.040

Visible Content:
Location: https://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Via: 1.1 i-08b1f2d588ff2e945 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBEHL-cw1hLYStp9YfTQlCg1hAJF0hQzSY-16uRMbg8XlrQIoKRpNbeF23XJtk7QRkOXrlnt4VlFFa6A6G9Iz5QQGXixcer-wc5ZVnsQMkqKKk3A%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 1
Content-Length: 0

• http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
54.246.79.9
301
https://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.036

Visible Content:
Location: https://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Via: 1.1 i-0415bf5680861a728 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBEN0M1MdDj47qnDTseHygT-1AzLWLh88xwzkNrvLkhtEcNNnP4Z-9xn8QvG1wugncnTU5U_48Ut9l3NoQvDlR7DBcSAH9F11znJCIcnWVe5b6UQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_21
X-Netflix.proxy.execution-time: 2
Content-Length: 0

• https://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

302
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de

2.530
B
Visible Content:
Server: envoy
X-Frame-Options: DENY
content-security-policy-report-only: default-src https: wss: 'unsafe-inline' 'unsafe-eval'; font-src https: data: ; img-src https: data: blob: ; media-src https: blob: ; worker-src https: blob: ; report-uri https://www.netflix.com/log/www/csp/1;
Location: https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
Date: Sun, 02 Nov 2025 01:55:37 GMT
x-envoy-upstream-service-time: 3
x-b3-traceid: 6906ba1971a53ddbacfe43524358465c
X-Request-ID: 7875f351-75b0-4388-b52e-862a0ededa32
x-envoy-decorator-operation: lo_svc
Transfer-Encoding: chunked
Via: 1.1 i-0224e1209134fe7f5 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Edge-Control: no-cache, no-store
Cache-Control: no-store, no-cache
Set-Cookie: nfvdid=BQFmAAEBEIbjcZoRTS4iSaB6Y0urB3hAftx1n1NkxW-LletVtF2vQYX2nObS3n8r0qmqIdhPAcmgguUM38hE09-Yxme6EZHBENbHt8KS4C06fxMLETofxw%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000,SecureNetflixId=v%3D3%26mac%3DAQEAEQABABRlb64Kog0NDHCKXZMy6GN3tkovcHPE4x4.%26dt%3D1762048537286; Domain=.netflix.com; Expires=Mon, 2 Nov 2026 01:55:37 GMT; Path=/; HttpOnly; Secure; SameSite=Strict,NetflixId=v%3D3%26ct%3DBgjHlOvcAxLAAZkxXfpGMzwq5lOj3U2g_Ru1GpakxzDL08EngzHzPlouINoxEoJtZ_tLCc9aI23zRYdgT22PZeNJuved_CHw7jEVkFu6Z2UNYzgkjIvz3LpHzsgjrZJ29LVdxE26M0Pnt2VXG34NfxcUlyvwNQ-k1EdwA4y8BpG2aIPODjU871kWZlVOy-P-GddQJbykjKO-WjUU3-bGXVUY8I4Ke0op_730dfa_f23DCILoQSeN4jq_UlZQOeuLkcWPIeb379kfixgGIg4KDBN5nthlWNpXAfXQqw..; Domain=.netflix.com; Expires=Mon, 2 Nov 2026 01:55:37 GMT; Path=/; HttpOnly; Secure; SameSite=Lax
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 43
Content-Length: 0

• https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

-103


0.086
P
SecureConnectionError (3, 0x80131620). The SSL connection could not be established, see inner exception. Received an unexpected EOF or 0 bytes from the transport stream (FF: PR_END_OF_FILE_ERROR)
Visible Content:

• https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
gzip used - 6882 / 20065 - 65.70 %
Inline-JavaScript (∑/total): 2/10028 Inline-CSS (∑/total): 4/7708
200

Html is minified: 846.98 %
Other inline scripts (∑/total): 0/0
2.307

Visible Content:
Server: envoy
X-Frame-Options: DENY
content-security-policy-report-only: default-src https: wss: 'unsafe-inline' 'unsafe-eval'; font-src https: data: ; img-src https: data: blob: ; media-src https: blob: ; worker-src https: blob: ; report-uri https://www.netflix.com/log/www/csp/1;
Date: Sun, 02 Nov 2025 01:55:41 GMT
x-envoy-upstream-service-time: 33
x-b3-traceid: 6906ba1dc981cab98baa78d25a111e04
X-Request-ID: 96f2cd41-44f7-48b6-b67f-141e0617d075
x-envoy-decorator-operation: lo_svc
Via: 1.1 i-0224e1209134fe7f5 (eu-west-1)
X-XSS-Protection: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Originating-URL: http://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
Set-Cookie: nfvdid=BQFmAAEBED4zJA6LMM1Aq2RgufILPVtAMQROiyk4UqIm_U7pfuexNmQyPOz0-zrsa-zBHk1NEGrB8GSqE_G1VBzDK-nmxRV6_3_RZtBWzUvTtMT1ttuMGA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
x-netflix-cookieandmsl.profileguid.match: NA
x-netflix-headerandcookie.profileguid.match: NA
x-netflix-headerandmsl.profileguid.match: NA
X-Netflix.nfstatus: 1_1
X-Netflix.proxy.execution-time: 42
X-Netflix.zuul.netty.content.compressor.target: gzip
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Content-Encoding: gzip
Content-Length: 6882

• https://54.246.79.9/
54.246.79.9
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0
2.540
N
Not Found
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Content-Length: 7

• https://52.214.181.141/
52.214.181.141
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0
2.540
N
Not Found
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Content-Length: 7

• https://54.170.196.176/
54.170.196.176
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0
2.523
N
Not Found
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Content-Length: 7

• https://[2a05:d018:076c:b683:f711:f0cf:5cc7:b815]/
2a05:d018:76c:b683:f711:f0cf:5cc7:b815
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0
2.146
N
Not Found
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Content-Length: 7

• https://[2a05:d018:076c:b684:8e48:47c9:84aa:b34d]/
2a05:d018:76c:b684:8e48:47c9:84aa:b34d
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0
2.126
N
Not Found
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Content-Length: 7

• https://[2a05:d018:076c:b685:3b38:679d:2640:1ced]/
2a05:d018:76c:b685:3b38:679d:2640:1ced
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0
2.227
N
Not Found
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Content-Length: 7

 

7. Comments


1. General Results, most used to calculate the result

Aname "netflix.com" is domain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 108094 (complete: 276475)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: netflix.com has 9 different ip addresses (authoritative).
AGood: Ipv4 and Ipv6 addresses per domain name found: netflix.com has 6 ipv4, 3 ipv6 addresses
AGood: No asked Authoritative Name Server had a timeout
Ahttps://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
302
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
Correct redirect https to https
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
http://netflix.com/ 52.214.181.141
301
nfvdid=BQFmAAEBELHtCwpve3G_dc5zZWB73NFASVtSUD1iaAiC59KIXLSqdMVD7dzese7k7AlBvr3xmNFWPrzTjdKMw2HoOx1B4jJAJkwoPXaDoTRHRdo0E9djcQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/ 54.170.196.176
301
nfvdid=BQFmAAEBEAe0waU3I_3YWsNCYKp4QztA_b_ts0cNnj49IKvCUoGozvjkSUrWlEo7FYsOYECfa-NhYwWW3OCaeiVuQg2YnNe_tHgJWqq2pA7HFzrLTqXhow%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/ 54.246.79.9
301
nfvdid=BQFmAAEBEOGotiUVOs2topoMwvv1YIFAZJZA4PWryt_uHDBTbViPr7-0Vv-AaX0n_gLDSVUBv4U7kQKeu5TUTUJsAiEXIZikqAmHLTeUNUxGyulBuDIC4w%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301
nfvdid=BQFmAAEBEHrEjKCdhnORnJkX57NKfs5Azjqf9Z-Oloc1azsnW2bj1npK_7z2gdtpKNcg1zgrHR6saSpnWlNsPX0AcBNE_uzxtQqf-0bC7i_wFFqSTgG5Qg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/ 2a05:d018:76c:b684:8e48:47c9:84aa:b34d
301
nfvdid=BQFmAAEBEBbRkrO412Xd0KfcKSka8wtA4r81M_7RQDvsipyLGWAisjkx4lPDWbYJTwmt4BFCkdhHMF1GLfIYKiCvT8LNosdSPjgr9pbGs_q5BHUMnp2d3A%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/ 2a05:d018:76c:b685:3b38:679d:2640:1ced
301
nfvdid=BQFmAAEBENpgdHuXxF852j8gz3lx9lJAHQC0WL0juOtN-m7imTeSh3SiEJRNLixw6amHfZbaI3v9FbtUfXG5ye2dqyJKcivJ8jOOU-0WjVIysWkmxM60jg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://www.netflix.com/ 52.214.181.141
301
nfvdid=BQFmAAEBEINwB7iE_7jiC54rrZJFYQZAngOIQgujDRewBSdEG99baNJDmmfjOun64wlE-UdewIh2gtAhu66h4PxgFG0TTnfcr6oqeMNr7MTLFGls8VvC9Q%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://www.netflix.com/ 54.170.196.176
301
nfvdid=BQFmAAEBEJkugMEKuHCMs8LFWbRJvnhAdp1vDFkig_yU2l5Q1-RzoIRDwFB6y96ecryDLZzVTFoTBxpnUMqeieY9P118ArmLOnhE4XYgtPDYB00kPXSTDQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://www.netflix.com/ 54.246.79.9
301
nfvdid=BQFmAAEBEAB8krTPygUOKHvCva9N48hAc_cbCT2BRdvzCjwZx4YyImGYRQ2NFHxYbdrJY4jdsfe6hOoI1yoYvWXu-wa3AG2u8_h-XybSIRLZQ0I2tTqQcg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 52.214.181.141
301
nfvdid=BQFmAAEBEIgpevJ0t2WE15ihcmYLIW9Ajn755McV5Ub-8ohhpuYP-3cnGdipEdoBABryHLYoiJNy5tgDMz1yk5HAuvZet5L8f87gKnnBBQd0SnNVQ2VceA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 54.170.196.176
301
nfvdid=BQFmAAEBECHWp2K8hLVQYx7UO0hRZUVAOKkWld-OvgSXKzxvYb75ZAZkxys7_1aO913qgve7ACsJzQRJDi40zKh-dAxKLRcETO1wJGe0HqzRl_dX-RZ8cA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 54.246.79.9
301
nfvdid=BQFmAAEBEM945kawrGPohY5972bVP6JADodiDJeQgE7Epd_yZd-PzwmHqDeVAEinSDTgfK2V9J2tK81-mD5_n15ual9zHmydlGebqdVO9hCZvprRGIygYg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301
nfvdid=BQFmAAEBEGbeC3LVaPM8RB3fPTmSYoZAAxsM9G4jwpz2mIs8ANoTYVSfeupcoIAT3TQ3UkRSJjyNOj4LnvIbEkSHPcZt4uJofzJln7s6b7JjpQXny-OTzw%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a05:d018:76c:b684:8e48:47c9:84aa:b34d
301
nfvdid=BQFmAAEBEJ7J9W0ETO-eu45HCcbH78FAxUQRFguXMNpLyQuGETIpdG-EPjQA0NYBaeyyXRBNCgftaHgYNyuF5rA1sSwPvVHb3QLVgQKAdpfxvB7y-3dFPA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a05:d018:76c:b685:3b38:679d:2640:1ced
301
nfvdid=BQFmAAEBEH-Pu9ipBr7UbQc75G2WhqlAcJ8fmlvmzxl3MNH0yAd27arftSiL92UmN67qFtXbUMa_jpOnXLCwpMOs02qH3NYWAfEhc3E8HpI03E1ExxnpJg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 52.214.181.141
301
nfvdid=BQFmAAEBEKn3HCAcggiTddBc64xxhCxAMaVyjQAJFmI4hzCH1dWdLVurCoYOtKul_a58ztECLDzH_02SyLfMdpJpNqmeFar3bpb8EbP2uNLdN05PH9nONg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 54.170.196.176
301
nfvdid=BQFmAAEBEHL-cw1hLYStp9YfTQlCg1hAJF0hQzSY-16uRMbg8XlrQIoKRpNbeF23XJtk7QRkOXrlnt4VlFFa6A6G9Iz5QQGXixcer-wc5ZVnsQMkqKKk3A%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
http://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 54.246.79.9
301
nfvdid=BQFmAAEBEN0M1MdDj47qnDTseHygT-1AzLWLh88xwzkNrvLkhtEcNNnP4Z-9xn8QvG1wugncnTU5U_48Ut9l3NoQvDlR7DBcSAH9F11znJCIcnWVe5b6UQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Fatal: Cookie sent via http. Never send Cookies / Session-Cookies via http. If a user uses an insecure WLan and if the same cookie is used to managed the authenticated session, it's possible to hack that user. Same with HttpOnly - without https that's only decorative.
Bhttps://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301
nfvdid=BQFmAAEBEIyB-Yvv013OoXTdReXhPhNAWyWXKk1J0wsBhJD_JoIE6gTMgo2vJ3ruPV0pjxuD-rAT66hTWcjQflglrbXVrOvAMzgbD6txByrmYZGVQfA85Q%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie sent via https, but not marked as secure
Bhttps://netflix.com/ 54.170.196.176
403
nfvdid=BQFmAAEBEKvC9l7VG8-JaykW-ymvR-VAHAGHRUYGWVy7OIFgtB9laCO9KPkHWun4wEJ9BwSoJcQkC3s5Sw3gItbQWnCdIGUW3zgwgV8Zi82xGF5Zf3C1-w%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie sent via https, but not marked as secure
Bhttps://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
302
nfvdid=BQFmAAEBEIbjcZoRTS4iSaB6Y0urB3hAftx1n1NkxW-LletVtF2vQYX2nObS3n8r0qmqIdhPAcmgguUM38hE09-Yxme6EZHBENbHt8KS4C06fxMLETofxw%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie sent via https, but not marked as secure
Bhttps://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
200
nfvdid=BQFmAAEBED4zJA6LMM1Aq2RgufILPVtAMQROiyk4UqIm_U7pfuexNmQyPOz0-zrsa-zBHk1NEGrB8GSqE_G1VBzDK-nmxRV6_3_RZtBWzUvTtMT1ttuMGA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie sent via https, but not marked as secure
Bhttp://netflix.com/ 52.214.181.141
301
nfvdid=BQFmAAEBELHtCwpve3G_dc5zZWB73NFASVtSUD1iaAiC59KIXLSqdMVD7dzese7k7AlBvr3xmNFWPrzTjdKMw2HoOx1B4jJAJkwoPXaDoTRHRdo0E9djcQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/ 54.170.196.176
301
nfvdid=BQFmAAEBEAe0waU3I_3YWsNCYKp4QztA_b_ts0cNnj49IKvCUoGozvjkSUrWlEo7FYsOYECfa-NhYwWW3OCaeiVuQg2YnNe_tHgJWqq2pA7HFzrLTqXhow%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/ 54.246.79.9
301
nfvdid=BQFmAAEBEOGotiUVOs2topoMwvv1YIFAZJZA4PWryt_uHDBTbViPr7-0Vv-AaX0n_gLDSVUBv4U7kQKeu5TUTUJsAiEXIZikqAmHLTeUNUxGyulBuDIC4w%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301
nfvdid=BQFmAAEBEHrEjKCdhnORnJkX57NKfs5Azjqf9Z-Oloc1azsnW2bj1npK_7z2gdtpKNcg1zgrHR6saSpnWlNsPX0AcBNE_uzxtQqf-0bC7i_wFFqSTgG5Qg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/ 2a05:d018:76c:b684:8e48:47c9:84aa:b34d
301
nfvdid=BQFmAAEBEBbRkrO412Xd0KfcKSka8wtA4r81M_7RQDvsipyLGWAisjkx4lPDWbYJTwmt4BFCkdhHMF1GLfIYKiCvT8LNosdSPjgr9pbGs_q5BHUMnp2d3A%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/ 2a05:d018:76c:b685:3b38:679d:2640:1ced
301
nfvdid=BQFmAAEBENpgdHuXxF852j8gz3lx9lJAHQC0WL0juOtN-m7imTeSh3SiEJRNLixw6amHfZbaI3v9FbtUfXG5ye2dqyJKcivJ8jOOU-0WjVIysWkmxM60jg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://www.netflix.com/ 52.214.181.141
301
nfvdid=BQFmAAEBEINwB7iE_7jiC54rrZJFYQZAngOIQgujDRewBSdEG99baNJDmmfjOun64wlE-UdewIh2gtAhu66h4PxgFG0TTnfcr6oqeMNr7MTLFGls8VvC9Q%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://www.netflix.com/ 54.170.196.176
301
nfvdid=BQFmAAEBEJkugMEKuHCMs8LFWbRJvnhAdp1vDFkig_yU2l5Q1-RzoIRDwFB6y96ecryDLZzVTFoTBxpnUMqeieY9P118ArmLOnhE4XYgtPDYB00kPXSTDQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://www.netflix.com/ 54.246.79.9
301
nfvdid=BQFmAAEBEAB8krTPygUOKHvCva9N48hAc_cbCT2BRdvzCjwZx4YyImGYRQ2NFHxYbdrJY4jdsfe6hOoI1yoYvWXu-wa3AG2u8_h-XybSIRLZQ0I2tTqQcg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301
nfvdid=BQFmAAEBEIyB-Yvv013OoXTdReXhPhNAWyWXKk1J0wsBhJD_JoIE6gTMgo2vJ3ruPV0pjxuD-rAT66hTWcjQflglrbXVrOvAMzgbD6txByrmYZGVQfA85Q%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://netflix.com/ 54.170.196.176
403
nfvdid=BQFmAAEBEKvC9l7VG8-JaykW-ymvR-VAHAGHRUYGWVy7OIFgtB9laCO9KPkHWun4wEJ9BwSoJcQkC3s5Sw3gItbQWnCdIGUW3zgwgV8Zi82xGF5Zf3C1-w%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 52.214.181.141
301
nfvdid=BQFmAAEBEIgpevJ0t2WE15ihcmYLIW9Ajn755McV5Ub-8ohhpuYP-3cnGdipEdoBABryHLYoiJNy5tgDMz1yk5HAuvZet5L8f87gKnnBBQd0SnNVQ2VceA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 54.170.196.176
301
nfvdid=BQFmAAEBECHWp2K8hLVQYx7UO0hRZUVAOKkWld-OvgSXKzxvYb75ZAZkxys7_1aO913qgve7ACsJzQRJDi40zKh-dAxKLRcETO1wJGe0HqzRl_dX-RZ8cA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 54.246.79.9
301
nfvdid=BQFmAAEBEM945kawrGPohY5972bVP6JADodiDJeQgE7Epd_yZd-PzwmHqDeVAEinSDTgfK2V9J2tK81-mD5_n15ual9zHmydlGebqdVO9hCZvprRGIygYg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301
nfvdid=BQFmAAEBEGbeC3LVaPM8RB3fPTmSYoZAAxsM9G4jwpz2mIs8ANoTYVSfeupcoIAT3TQ3UkRSJjyNOj4LnvIbEkSHPcZt4uJofzJln7s6b7JjpQXny-OTzw%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a05:d018:76c:b684:8e48:47c9:84aa:b34d
301
nfvdid=BQFmAAEBEJ7J9W0ETO-eu45HCcbH78FAxUQRFguXMNpLyQuGETIpdG-EPjQA0NYBaeyyXRBNCgftaHgYNyuF5rA1sSwPvVHb3QLVgQKAdpfxvB7y-3dFPA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 2a05:d018:76c:b685:3b38:679d:2640:1ced
301
nfvdid=BQFmAAEBEH-Pu9ipBr7UbQc75G2WhqlAcJ8fmlvmzxl3MNH0yAd27arftSiL92UmN67qFtXbUMa_jpOnXLCwpMOs02qH3NYWAfEhc3E8HpI03E1ExxnpJg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 52.214.181.141
301
nfvdid=BQFmAAEBEKn3HCAcggiTddBc64xxhCxAMaVyjQAJFmI4hzCH1dWdLVurCoYOtKul_a58ztECLDzH_02SyLfMdpJpNqmeFar3bpb8EbP2uNLdN05PH9nONg%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 54.170.196.176
301
nfvdid=BQFmAAEBEHL-cw1hLYStp9YfTQlCg1hAJF0hQzSY-16uRMbg8XlrQIoKRpNbeF23XJtk7QRkOXrlnt4VlFFa6A6G9Iz5QQGXixcer-wc5ZVnsQMkqKKk3A%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttp://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 54.246.79.9
301
nfvdid=BQFmAAEBEN0M1MdDj47qnDTseHygT-1AzLWLh88xwzkNrvLkhtEcNNnP4Z-9xn8QvG1wugncnTU5U_48Ut9l3NoQvDlR7DBcSAH9F11znJCIcnWVe5b6UQ%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
302
nfvdid=BQFmAAEBEIbjcZoRTS4iSaB6Y0urB3hAftx1n1NkxW-LletVtF2vQYX2nObS3n8r0qmqIdhPAcmgguUM38hE09-Yxme6EZHBENbHt8KS4C06fxMLETofxw%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
200
nfvdid=BQFmAAEBED4zJA6LMM1Aq2RgufILPVtAMQROiyk4UqIm_U7pfuexNmQyPOz0-zrsa-zBHk1NEGrB8GSqE_G1VBzDK-nmxRV6_3_RZtBWzUvTtMT1ttuMGA%3D%3D; Domain=.netflix.com; Path=/; Max-Age=31536000
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Ihttps://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Khttps://netflix.com/ 52.214.181.141, Status -103

https://netflix.com/ 54.170.196.176, Status 403
Configuration problem - different ip addresses with different status
Khttps://netflix.com/ 52.214.181.141, Status -103

https://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815, Status 301
Configuration problem - different ip addresses with different status
Khttps://netflix.com/ 54.170.196.176, Status 403

https://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815, Status 301
Configuration problem - different ip addresses with different status
Khttps://netflix.com/ 54.170.196.176, Status 403

https://netflix.com/ 2a05:d018:76c:b684:8e48:47c9:84aa:b34d, Status -103
Configuration problem - different ip addresses with different status
Khttps://netflix.com/ 54.170.196.176, Status 403

https://netflix.com/ 2a05:d018:76c:b685:3b38:679d:2640:1ced, Status -103
Configuration problem - different ip addresses with different status
Khttps://netflix.com/ 54.170.196.176, Status 403

https://netflix.com/ 54.246.79.9, Status -103
Configuration problem - different ip addresses with different status
Khttps://netflix.com/ 54.246.79.9, Status -103

https://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815, Status 301
Configuration problem - different ip addresses with different status
Khttps://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815, Status 301

https://netflix.com/ 2a05:d018:76c:b684:8e48:47c9:84aa:b34d, Status -103
Configuration problem - different ip addresses with different status
Khttps://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815, Status 301

https://netflix.com/ 2a05:d018:76c:b685:3b38:679d:2640:1ced, Status -103
Configuration problem - different ip addresses with different status
Khttps://www.netflix.com/ 52.214.181.141, Status -103

https://www.netflix.com/ 54.246.79.9, Status -110
Configuration problem - different ip addresses with different status
Khttps://www.netflix.com/ 54.170.196.176, Status -103

https://www.netflix.com/ 54.246.79.9, Status -110
Configuration problem - different ip addresses with different status
Mhttps://netflix.com/ 54.170.196.176
403

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://52.214.181.141/ 52.214.181.141
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://54.170.196.176/ 54.170.196.176
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://54.246.79.9/ 54.246.79.9
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://[2a05:d018:076c:b683:f711:f0cf:5cc7:b815]/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://[2a05:d018:076c:b684:8e48:47c9:84aa:b34d]/ 2a05:d018:76c:b684:8e48:47c9:84aa:b34d
404

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://[2a05:d018:076c:b685:3b38:679d:2640:1ced]/ 2a05:d018:76c:b685:3b38:679d:2640:1ced
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://52.214.181.141/ 52.214.181.141
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://54.170.196.176/ 54.170.196.176
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://54.246.79.9/ 54.246.79.9
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://[2a05:d018:076c:b683:f711:f0cf:5cc7:b815]/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://[2a05:d018:076c:b684:8e48:47c9:84aa:b34d]/ 2a05:d018:76c:b684:8e48:47c9:84aa:b34d
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://[2a05:d018:076c:b685:3b38:679d:2640:1ced]/ 2a05:d018:76c:b685:3b38:679d:2640:1ced
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
XFatal error: Nameserver doesn't support TCP connection: e.ns.nflxso.net / 45.57.8.1: Timeout
XFatal error: Nameserver doesn't support TCP connection: e.ns.nflxso.net / 2a00:86c0:2008::1: Timeout
XFatal error: Nameserver doesn't support TCP connection: f.ns.nflxso.net / 45.57.9.1: Timeout
XFatal error: Nameserver doesn't support TCP connection: f.ns.nflxso.net / 2a00:86c0:2009::1: Timeout
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain netflix.com, 6 ip addresses.
Warning: More then one ip address per domain name found, checking all ip addresses the same http status, but different certificates found: Domain netflix.com, 6 ip addresses, 5 certificates.
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain netflix.com, 6 ip addresses.
AGood: _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Domainname: _mta-sts.netflix.com
BBad: _mta-sts TXT found, but invalid

2. Header-Checks

Anetflix.com 54.170.196.176
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block; report=https://www.netflix.com/ichnaea/log/freeform/xssreport
Fnetflix.com 54.170.196.176
Content-Security-Policy
Critical: Missing Header:
Fnetflix.com 54.170.196.176
Referrer-Policy
Critical: Missing Header:
Fnetflix.com 54.170.196.176
Permissions-Policy
Critical: Missing Header:
Bnetflix.com 54.170.196.176
Cross-Origin-Embedder-Policy
Info: Missing Header
Bnetflix.com 54.170.196.176
Cross-Origin-Opener-Policy
Info: Missing Header
Bnetflix.com 54.170.196.176
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 16 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 4 Name Servers.
AInfo:: 16 Queries complete, 16 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 4.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 4 different Name Servers found: ns-1372.awsdns-43.org, ns-1984.awsdns-56.co.uk, ns-659.awsdns-18.net, ns-81.awsdns-10.com, 4 Name Servers included in Delegation: ns-1372.awsdns-43.org, ns-1984.awsdns-56.co.uk, ns-659.awsdns-18.net, ns-81.awsdns-10.com, 4 Name Servers included in 1 Zone definitions: ns-1372.awsdns-43.org, ns-1984.awsdns-56.co.uk, ns-659.awsdns-18.net, ns-81.awsdns-10.com, 1 Name Servers listed in SOA.Primary: ns-81.awsdns-10.com.
AGood: Only one SOA.Primary Name Server found.: ns-81.awsdns-10.com.
AGood: SOA.Primary Name Server included in the delegation set.: ns-81.awsdns-10.com.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns-1372.awsdns-43.org, ns-1984.awsdns-56.co.uk, ns-659.awsdns-18.net, ns-81.awsdns-10.com
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 4 different Name Servers found
AGood: All name servers have ipv4- and ipv6-addresses.: 4 different Name Servers found
AGood: Name servers with different Top Level Domains / Public Suffix List entries found: 4 Name Servers, 4 Top Level Domains: org, net, com, co.uk
AGood: Name Servers with different domain names found.: 4 different Domains found
Warning: All Name Servers from the same Country / IP location.: 4 Name Servers, 1 Countries: US
AInfo: Ipv4-Subnet-list: 4 Name Servers, 1 different subnets (first Byte): 205., 1 different subnets (first two Bytes): 205.251., 4 different subnets (first three Bytes): 205.251.192., 205.251.194., 205.251.197., 205.251.199.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 4 Name Servers with IPv6, 1 different subnets (first block): 2600:, 1 different subnets (first two blocks): 2600:9000:, 4 different subnets (first three blocks): 2600:9000:5300:, 2600:9000:5302:, 2600:9000:5305:, 2600:9000:5307:, 4 different subnets (first four blocks): 2600:9000:5300:5100:, 2600:9000:5302:9300:, 2600:9000:5305:5c00:, 2600:9000:5307:c000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 16 good Nameserver
AGood: Nameserver supports Echo Capitalization: 16 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 16 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 16 good Nameserver
Nameserver doesn't pass all EDNS-Checks: e.ns.nflxso.net / 45.57.8.1: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: e.ns.nflxso.net / 2a00:86c0:2008::1: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: f.ns.nflxso.net / 45.57.9.1: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: f.ns.nflxso.net / 2a00:86c0:2009::1: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
AGood: CAA entries found, creating certificate is limited: digicert.com is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
AGood: CAA entries found, creating certificate is limited: pki.goog is allowed to create certificates

4. Content- and Performance-critical Checks

https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
200

Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect. May be a problem creating a Letsencrypt certificate. Checking /.well-known/acme-challenge/random-filename - a http status 404 - Not Found - is expected. If your server sends content and a http status 200, the validation file (87 bytes, token, dot and the hash of the public part of the account key) may be invisible, so Letsencrypt can't validate your domain. If it is an application that sends this content, perhaps create an exception, so /.well-known/acme-challenge sends raw files. Or create a redirect to another domain and / or port 443, but your Letsencrypt client must support such a solution. Certbot: Use webroot as authenticator - https://certbot.eff.org/docs/using.html Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
https://netflix.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
-103

Fatal: Check of /.well-known/acme-challenge/random-filename is blocked, http connection error. Creating a Letsencrypt certificate via http-01 challenge can't work. You need a running webserver (http) and an open port 80. If it's a home server + ipv4, perhaps a correct port forwarding port 80 extern ⇒ working port intern is required. Port 80 / http can redirect to another domain port 80 or port 443, but not other ports. If it's a home server, perhaps your ISP blocks port 80. Then you may use the dns-01 challenge. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 1 external CSS / JavaScript files found
AGood: All CSS / JavaScript files are sent with a long Cache-Control header (minimum 7 days). So the browser can re-use these files, no download is required. 1 external CSS / JavaScript files with long Cache-Control max-age found
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
http://netflix.com/ 52.214.181.141
301

Warning: HSTS header sent via http has no effect
http://netflix.com/ 54.170.196.176
301

Warning: HSTS header sent via http has no effect
http://netflix.com/ 54.246.79.9
301

Warning: HSTS header sent via http has no effect
http://netflix.com/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
301

Warning: HSTS header sent via http has no effect
http://netflix.com/ 2a05:d018:76c:b684:8e48:47c9:84aa:b34d
301

Warning: HSTS header sent via http has no effect
http://netflix.com/ 2a05:d018:76c:b685:3b38:679d:2640:1ced
301

Warning: HSTS header sent via http has no effect
http://www.netflix.com/ 52.214.181.141
301

Warning: HSTS header sent via http has no effect
http://www.netflix.com/ 54.170.196.176
301

Warning: HSTS header sent via http has no effect
http://www.netflix.com/ 54.246.79.9
301

Warning: HSTS header sent via http has no effect
https://52.214.181.141/ 52.214.181.141
404
2.540 seconds
Warning: 404 needs more then one second
https://54.170.196.176/ 54.170.196.176
404
2.523 seconds
Warning: 404 needs more then one second
https://54.246.79.9/ 54.246.79.9
404
2.540 seconds
Warning: 404 needs more then one second
https://[2a05:d018:076c:b683:f711:f0cf:5cc7:b815]/ 2a05:d018:76c:b683:f711:f0cf:5cc7:b815
404
2.146 seconds
Warning: 404 needs more then one second
https://[2a05:d018:076c:b684:8e48:47c9:84aa:b34d]/ 2a05:d018:76c:b684:8e48:47c9:84aa:b34d
404
2.126 seconds
Warning: 404 needs more then one second
https://[2a05:d018:076c:b685:3b38:679d:2640:1ced]/ 2a05:d018:76c:b685:3b38:679d:2640:1ced
404
2.227 seconds
Warning: 404 needs more then one second
ADuration: 304556 milliseconds, 304.556 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
netflix.com
54.170.196.176
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
netflix.com
54.170.196.176
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=www.netflix.com, O=Netflix, L=Los Gatos, C=US, ST=California


2CN=DigiCert Secure Site ECC CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US


netflix.com
2a05:d018:76c:b683:f711:f0cf:5cc7:b815
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

netflix.com
2a05:d018:76c:b683:f711:f0cf:5cc7:b815
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=www.netflix.com, O=Netflix, L=Los Gatos, C=US, ST=California


2CN=DigiCert Secure Site ECC CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.netflix.com
www.netflix.com
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.netflix.com
www.netflix.com
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=www.netflix.com, O=Netflix, L=Los Gatos, C=US, ST=California


2CN=DigiCert Secure Site ECC CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.netflix.com
www.netflix.com
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.netflix.com
www.netflix.com
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=www.netflix.com, O=Netflix, L=Los Gatos, C=US, ST=California


2CN=DigiCert Secure Site ECC CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US


54.246.79.9
54.246.79.9
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

54.246.79.9
54.246.79.9
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, serialNumber=i-02176d3039dec45c4


2CN=Netflix Internal Services Intermediate Prod CA V10, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


3CN=Netflix Internal Services Root CA V1, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


52.214.181.141
52.214.181.141
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

52.214.181.141
52.214.181.141
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, serialNumber=i-0755561dbfc2468ac


2CN=Netflix Internal Services Intermediate Prod CA V10, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


3CN=Netflix Internal Services Root CA V1, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


54.170.196.176
54.170.196.176
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

54.170.196.176
54.170.196.176
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, serialNumber=i-08a3480c5a7ec71c6


2CN=Netflix Internal Services Intermediate Prod CA V10, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


3CN=Netflix Internal Services Root CA V1, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


[2a05:d018:076c:b683:f711:f0cf:5cc7:b815]
2a05:d018:76c:b683:f711:f0cf:5cc7:b815
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

[2a05:d018:076c:b683:f711:f0cf:5cc7:b815]
2a05:d018:76c:b683:f711:f0cf:5cc7:b815
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, serialNumber=i-0c220a6a185b993b0


2CN=Netflix Internal Services Intermediate Prod CA V10, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


3CN=Netflix Internal Services Root CA V1, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


[2a05:d018:076c:b684:8e48:47c9:84aa:b34d]
2a05:d018:76c:b684:8e48:47c9:84aa:b34d
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

[2a05:d018:076c:b684:8e48:47c9:84aa:b34d]
2a05:d018:76c:b684:8e48:47c9:84aa:b34d
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, serialNumber=i-0b93b2cd697d51587


2CN=Netflix Internal Services Intermediate Prod CA V10, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


3CN=Netflix Internal Services Root CA V1, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


[2a05:d018:076c:b685:3b38:679d:2640:1ced]
2a05:d018:76c:b685:3b38:679d:2640:1ced
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

[2a05:d018:076c:b685:3b38:679d:2640:1ced]
2a05:d018:76c:b685:3b38:679d:2640:1ced
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, serialNumber=i-0773eec4be248ab24


2CN=Netflix Internal Services Intermediate Prod CA V10, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com


3CN=Netflix Internal Services Root CA V1, OU=Platform Security, O=Netflix Inc, L=Los Gatos, C=US, emailAddress=platformsecurity@netflix.com

 

9. Certificates

1.
1.
CN=www.netflix.com, O=Netflix, L=Los Gatos, S=California, C=US
13.12.2024
14.01.2026
expires in 69 days
account.netflix.com, ca.netflix.com, netflix.ca, netflix.com, signup.netflix.com, www.netflix.ca, www1.netflix.com, www2.netflix.com, www3.netflix.com, develop-stage.netflix.com, release-stage.netflix.com, www.netflix.com, tv.netflix.com, embed.develop-stage.netflix.com, embed.release-stage.netflix.com - 15 entries
1.
1.
CN=www.netflix.com, O=Netflix, L=Los Gatos, S=California, C=US
13.12.2024

14.01.2026
expires in 69 days


account.netflix.com, ca.netflix.com, netflix.ca, netflix.com, signup.netflix.com, www.netflix.ca, www1.netflix.com, www2.netflix.com, www3.netflix.com, develop-stage.netflix.com, release-stage.netflix.com, www.netflix.com, tv.netflix.com, embed.develop-stage.netflix.com, embed.release-stage.netflix.com - 15 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A07B3E0C461A32DC32D84F8C83730FA
Thumbprint:85945B15FB7BE7B0931A003813C4B36D22E93DC5
SHA256 / Certificate:wv46rT47M+vHeKOSNEEtUKYfbLiJBTR39pJ3OcT2BYM=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):61e34ec93461a0ce229027461fffaebef361a815e4c5e634e7686d38d787f429
SHA256 hex / Subject Public Key Information (SPKI):61e34ec93461a0ce229027461fffaebef361a815e4c5e634e7686d38d787f429 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
24.09.2020
24.09.2030
expires in 1783 days


2.
CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
24.09.2020

24.09.2030
expires in 1783 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0A3508D55C292B017DF8AD65C00FF7E4
Thumbprint:6938FD4D98BAB03FAADB97B34396831E3780AEA1
SHA256 / Certificate:JXaHE9O0Wfk4LSpZT4XzRwn9KokwcxVCpBRv+yRr7Gk=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):450799901e36ce751fb0320815621189811c2a5ee71f0345c160ab9cc3096d57
SHA256 hex / Subject Public Key Information (SPKI):450799901e36ce751fb0320815621189811c2a5ee71f0345c160ab9cc3096d57
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006
10.11.2031
expires in 2195 days


3.
CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US
10.11.2006

10.11.2031
expires in 2195 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:083BE056904246B1A1756AC95991C74A
Thumbprint:A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
SHA256 / Certificate:Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE=
SHA256 hex / Cert (DANE * 0 1):4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
SHA256 hex / PublicKey (DANE * 1 1):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SHA256 hex / Subject Public Key Information (SPKI):aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
SERIALNUMBER=i-08ba5ee920dfa0f9b, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025
16.11.2025
expires in 10 days
apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.86.186.68, ip-100-86-186-68.node.netflix.net, ip-2a05-d018-076c-b608-0000-0000-0000-9557.node.netflix.net - 20 entries
2.
1.
SERIALNUMBER=i-08ba5ee920dfa0f9b, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025

16.11.2025
expires in 10 days


apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.86.186.68, ip-100-86-186-68.node.netflix.net, ip-2a05-d018-076c-b608-0000-0000-0000-9557.node.netflix.net - 20 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01602E81F29792DCDA0E83EA49A0596AC39D
Thumbprint:05979998A8BCEAC56EA3113AA8BF84C4C539EF0F
SHA256 / Certificate:4ZW/BU0DVble6tYmoCZGxLUIA2mriOA9kO6oQz/gfU4=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e46f7e8c538c5ece0060d7a8e8c3c4524a18cd48be2541b576afb46cb150fd58
SHA256 hex / Subject Public Key Information (SPKI):e46f7e8c538c5ece0060d7a8e8c3c4524a18cd48be2541b576afb46cb150fd58 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024
09.11.2026
expires in 368 days


2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024

09.11.2026
expires in 368 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01DF90FD0D3B14BA184E9333B28E2AD661E0
Thumbprint:820638E0A5B749CFD8D92A72038FC4CF6A749625
SHA256 / Certificate:EVwVtM1rcTkPrTA183XB8AeijV/xuEXKZtFEC/xtl0c=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7d9cfbe2b9effd5939b745daddb597e34d9a4627108e5e03249fbe24d9043768
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018
23.04.2048
expires in 8204 days


3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018

23.04.2048
expires in 8204 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01
Thumbprint:C05FE10F65EAC66AD802BD2AA845EA0567A748CF
SHA256 / Certificate:t0eU/Etm3cIWl3YNUHs9Y1BFWAmuKHLChXQsthPNJC8=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):cfbfc60f4d2e9187cb08229d659a590d354f7e7781f040a61989239faebb78f0
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
1.
SERIALNUMBER=i-0ebca33147541dd07, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025
16.11.2025
expires in 10 days
apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.86.191.81, ip-100-86-191-81.node.netflix.net, ip-2a05-d018-076c-b608-0000-0000-0000-889c.node.netflix.net - 20 entries
3.
1.
SERIALNUMBER=i-0ebca33147541dd07, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025

16.11.2025
expires in 10 days


apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.86.191.81, ip-100-86-191-81.node.netflix.net, ip-2a05-d018-076c-b608-0000-0000-0000-889c.node.netflix.net - 20 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01535D5322139E76A3C4256D72C537510657
Thumbprint:E4AB80F81F4A1EC7D1123D93B89D8D53C05F74E1
SHA256 / Certificate:8whLcprzESi9D7gREBAdbOXP3pcBUXN0U23aivnrxUw=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):15f285c9925b5b4b8842a03138460ee6756b4332970f75473be009fbde256d3c
SHA256 hex / Subject Public Key Information (SPKI):15f285c9925b5b4b8842a03138460ee6756b4332970f75473be009fbde256d3c (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024
09.11.2026
expires in 368 days


2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024

09.11.2026
expires in 368 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01DF90FD0D3B14BA184E9333B28E2AD661E0
Thumbprint:820638E0A5B749CFD8D92A72038FC4CF6A749625
SHA256 / Certificate:EVwVtM1rcTkPrTA183XB8AeijV/xuEXKZtFEC/xtl0c=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7d9cfbe2b9effd5939b745daddb597e34d9a4627108e5e03249fbe24d9043768
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018
23.04.2048
expires in 8204 days


3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018

23.04.2048
expires in 8204 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01
Thumbprint:C05FE10F65EAC66AD802BD2AA845EA0567A748CF
SHA256 / Certificate:t0eU/Etm3cIWl3YNUHs9Y1BFWAmuKHLChXQsthPNJC8=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):cfbfc60f4d2e9187cb08229d659a590d354f7e7781f040a61989239faebb78f0
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




4.
1.
SERIALNUMBER=i-0b93b2cd697d51587, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025
16.11.2025
expires in 10 days
apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.83.109.159, ip-100-83-109-159.node.netflix.net, ip-2a05-d018-076c-b604-0000-0000-0000-481a.node.netflix.net - 20 entries
4.
1.
SERIALNUMBER=i-0b93b2cd697d51587, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025

16.11.2025
expires in 10 days


apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.83.109.159, ip-100-83-109-159.node.netflix.net, ip-2a05-d018-076c-b604-0000-0000-0000-481a.node.netflix.net - 20 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:019B52680388926C51A321E989571F76F17C
Thumbprint:A6CB2E83EDACE9B16E0B4FAB108979FBF38BCDE1
SHA256 / Certificate:y7z2hzN6oKkusfG392WagHwIYnqFxzUJw85fG1Jx7xQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):48ed81d6f51edaa4b4b3fc279135dc334506749a85ec99755bcad534278a3918
SHA256 hex / Subject Public Key Information (SPKI):48ed81d6f51edaa4b4b3fc279135dc334506749a85ec99755bcad534278a3918 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024
09.11.2026
expires in 368 days


2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024

09.11.2026
expires in 368 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01DF90FD0D3B14BA184E9333B28E2AD661E0
Thumbprint:820638E0A5B749CFD8D92A72038FC4CF6A749625
SHA256 / Certificate:EVwVtM1rcTkPrTA183XB8AeijV/xuEXKZtFEC/xtl0c=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7d9cfbe2b9effd5939b745daddb597e34d9a4627108e5e03249fbe24d9043768
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018
23.04.2048
expires in 8204 days


3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018

23.04.2048
expires in 8204 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01
Thumbprint:C05FE10F65EAC66AD802BD2AA845EA0567A748CF
SHA256 / Certificate:t0eU/Etm3cIWl3YNUHs9Y1BFWAmuKHLChXQsthPNJC8=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):cfbfc60f4d2e9187cb08229d659a590d354f7e7781f040a61989239faebb78f0
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




5.
1.
SERIALNUMBER=i-086a509a8320f4db2, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025
16.11.2025
expires in 10 days
apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.86.118.109, ip-100-86-118-109.node.netflix.net, ip-2a05-d018-076c-b603-0000-0000-0000-c9c8.node.netflix.net - 20 entries
5.
1.
SERIALNUMBER=i-086a509a8320f4db2, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025

16.11.2025
expires in 10 days


apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.86.118.109, ip-100-86-118-109.node.netflix.net, ip-2a05-d018-076c-b603-0000-0000-0000-c9c8.node.netflix.net - 20 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01632A047EE045CF2AFAEE4CE75F387F46B5
Thumbprint:09C000946DC94EB3705AB1D2E837AFB1BDCE48C7
SHA256 / Certificate:1jXVbB+K96Jq/s6I4fudXlwfs+ulardc7S1JIGmM9uA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):4429ab6090bab05402e562e61716d33adf2bf3c4d41820ca08ee6dea46f0f4b2
SHA256 hex / Subject Public Key Information (SPKI):4429ab6090bab05402e562e61716d33adf2bf3c4d41820ca08ee6dea46f0f4b2 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024
09.11.2026
expires in 368 days


2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024

09.11.2026
expires in 368 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01DF90FD0D3B14BA184E9333B28E2AD661E0
Thumbprint:820638E0A5B749CFD8D92A72038FC4CF6A749625
SHA256 / Certificate:EVwVtM1rcTkPrTA183XB8AeijV/xuEXKZtFEC/xtl0c=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7d9cfbe2b9effd5939b745daddb597e34d9a4627108e5e03249fbe24d9043768
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018
23.04.2048
expires in 8204 days


3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018

23.04.2048
expires in 8204 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01
Thumbprint:C05FE10F65EAC66AD802BD2AA845EA0567A748CF
SHA256 / Certificate:t0eU/Etm3cIWl3YNUHs9Y1BFWAmuKHLChXQsthPNJC8=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):cfbfc60f4d2e9187cb08229d659a590d354f7e7781f040a61989239faebb78f0
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




6.
1.
SERIALNUMBER=i-08f3347ce50026843, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025
16.11.2025
expires in 10 days
apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.83.44.109, ip-100-83-44-109.node.netflix.net, ip-2a05-d018-076c-b607-0000-0000-0000-e2c2.node.netflix.net - 20 entries
6.
1.
SERIALNUMBER=i-08f3347ce50026843, OU=Platform Security, O=Netflix Inc, L=Los Gatos, S=California, C=US
02.11.2025

16.11.2025
expires in 10 days


apiproxy-website.eu-west-1.dynprod.netflix.net, website.apiproxy.eu-west-1.dynprod.netflix.net, apiproxy.app.eu-west-1.prod.cloud.netflix.net, apiproxy.netflix.net, apiproxy-website.netflix.net, website.apiproxy.prod.netflix.net, apiproxy-website.eu-west-1.prod.netflix.net, apiproxy.eu-west-1.dynprod.netflix.net, website.apiproxy.netflix.net, apiproxy.eu-west-1.prod.netflix.net, website.apiproxy.dynprod.netflix.net, apiproxy-website.cluster.eu-west-1.prod.cloud.netflix.net, website.apiproxy.eu-west-1.prod.netflix.net, apiproxy-website.dynprod.netflix.net, apiproxy-website.prod.netflix.net, apiproxy.dynprod.netflix.net, apiproxy.prod.netflix.net, 100.83.44.109, ip-100-83-44-109.node.netflix.net, ip-2a05-d018-076c-b607-0000-0000-0000-e2c2.node.netflix.net - 20 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:015F1C20309A3B3D1FCE511CACEFA3820957
Thumbprint:2ED4F1DEA36BC53922009639D98B72E6E7F066C1
SHA256 / Certificate:lVxTi8s96ZG0iz38Vn2x1McX0SIP2p3rVObzDGmpThQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):826dff89cf41322218e987af2bea3bfffcec08c34734a4da79f117fdd63bef78
SHA256 hex / Subject Public Key Information (SPKI):826dff89cf41322218e987af2bea3bfffcec08c34734a4da79f117fdd63bef78 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024
09.11.2026
expires in 368 days


2.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Intermediate Prod CA V10, L=Los Gatos, S=California, C=US
06.11.2024

09.11.2026
expires in 368 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01DF90FD0D3B14BA184E9333B28E2AD661E0
Thumbprint:820638E0A5B749CFD8D92A72038FC4CF6A749625
SHA256 / Certificate:EVwVtM1rcTkPrTA183XB8AeijV/xuEXKZtFEC/xtl0c=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):7d9cfbe2b9effd5939b745daddb597e34d9a4627108e5e03249fbe24d9043768
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018
23.04.2048
expires in 8204 days


3.
E=platformsecurity@netflix.com, OU=Platform Security, O=Netflix Inc, CN=Netflix Internal Services Root CA V1, L=Los Gatos, S=California, C=US
22.04.2018

23.04.2048
expires in 8204 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:01
Thumbprint:C05FE10F65EAC66AD802BD2AA845EA0567A748CF
SHA256 / Certificate:t0eU/Etm3cIWl3YNUHs9Y1BFWAmuKHLChXQsthPNJC8=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):cfbfc60f4d2e9187cb08229d659a590d354f7e7781f040a61989239faebb78f0
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
0
1
2
CN=DigiCert Secure Site ECC CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
0
0
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
8924879615
leaf cert
CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
2024-12-13 00:00:00
2026-01-13 23:59:59
account.netflix.com, ca.netflix.com, develop-stage.netflix.com, embed.develop-stage.netflix.com, embed.release-stage.netflix.com, netflix.ca, netflix.com, release-stage.netflix.com, signup.netflix.com, tv.netflix.com, www.netflix.ca, www.netflix.com, www1.netflix.com, www2.netflix.com, www3.netflix.com - 15 entries


6367861071
precert
CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
2023-12-14 00:00:00
2025-01-13 23:59:59
account.netflix.com, ca.netflix.com, develop-stage.netflix.com, embed.develop-stage.netflix.com, embed.release-stage.netflix.com, netflix.ca, netflix.com, release-stage.netflix.com, signup.netflix.com, tv.netflix.com, www.netflix.ca, www.netflix.com, www1.netflix.com, www2.netflix.com, www3.netflix.com - 15 entries


6071918172
leaf cert
CN=DigiCert Secure Site ECC CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-10-25 00:00:00
2024-10-24 21:48:09
account.netflix.com, ca.netflix.com, develop-stage.netflix.com, embed.develop-stage.netflix.com, embed.release-stage.netflix.com, netflix.ca, netflix.com, release-stage.netflix.com, signup.netflix.com, tv.netflix.com, www.netflix.ca, www.netflix.com, www1.netflix.com, www2.netflix.com, www3.netflix.com - 15 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de
a

2

0


0
0
0


link
stylesheet
1
2,731 Bytes
0
0
1
1
0
0
-1

link
other
3
462,361 Bytes
1
0
3
1
0
0
-1

meta
other
4

0


0
0
0


style

3
551,044 Bytes
0
0
3
3
0
0
-3

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://www.netflix.com/NotFound?prev=https%3A%2F%2Fwww.netflix.com%2F.well-known%2Facme-challenge%2Fcheck-your-website-dot-server-daten-dot-de

a

/


2
ok















link
apple-touch-icon
https://assets.nflxext.com/us/ffe/siteui/common/icons/nficon2016.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604801 with long duration found.
No Compression - 1755 Bytes






Server-Header Access-Control-Allow-Origin: not found
Cross-Origin Resource Sharing (CORS) not supported



link
preload
https://occ.a.nflxso.net/genc/hawkins/5.7.2/font/netflix-sans-core-variable-full.woff2
200

1
ok
font/woff2
missing X-Content-Type-Options nosniff





Cache-Control: max-age=14401 - max-age too short.
No Compression (): 450752/450752 Bytes, font already compressed






ETag: "f87907a566c9e45f24f86ab972edf3e2"

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-1whI4n5UfiAXQ9OQX2rN+ovUDDJTeDP4ICpDAT7zpV0=
sha384-zddssYVLKSFu1mvnSn62ZINjv9yrtdGx4S9p8Eng0FxA+vUuaNKGOO9fph9JiSWw
sha512-gv/J00AdI4RUUvzd9kMiFeVZ0nACNpCGJfJMcTtzDI1N7XtPeCS0RH1cP4U439llxP5Np6lEABOUqdkJnMoEnA==

 

<link rel="preload" href="https://occ.a.nflxso.net/genc/hawkins/5.7.2/font/netflix-sans-core-variable-full.woff2" crossorigin="anonymous" integrity="sha256-1whI4n5UfiAXQ9OQX2rN+ovUDDJTeDP4ICpDAT7zpV0=" />



link
shortcut icon
https://assets.nflxext.com/us/ffe/siteui/common/icons/nficon2023.ico
200

1
Problems with Content-Type - Header - see details
image/x-icon
missing X-Content-Type-Options nosniff


This combination of Media Type "image" and MediaSubType "x-icon" was never defined. Use "image/vnd.microsoft.icon" instead. See https://www.iana.org/assignments/media-types/media-types.xhtml


Cache-Control: max-age=604801 with long duration found.
No Compression - 9854 Bytes






Server-Header Access-Control-Allow-Origin: not found
Cross-Origin Resource Sharing (CORS) not supported



link
stylesheet
https://assets.nflxext.com/web/ffe/wp/@nf-web-ui/ui-shared/dist/less/core/not-found.32f41e39290134c6087d.css
200

1
ok
text/css
missing X-Content-Type-Options nosniff





Cache-Control: max-age=604801 - with long duration found.
Compression (gzip): 2731/11817 Bytes






Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-grTjio1wbWQm6uTP+G/jXbOE/NIl/DHE+IcdWLom0lA=
sha384-Nuf5UnkV/jNJHtIMSCVJQ5tYVfYOIhlYxUA3ZNSyVGlE7vOc9/kFrqOdGnIcbb+w
sha512-cUeq7ZH3xsNeR2/obPNwhdoUxBTXJOUfMdUJNBUWUaIUhQKjD5levSakUxtp0KOwan+9EsepdGIsXAQE6cj9FQ==

 

<link rel="stylesheet" href="https://assets.nflxext.com/web/ffe/wp/@nf-web-ui/ui-shared/dist/less/core/not-found.32f41e39290134c6087d.css" crossorigin="anonymous" integrity="sha256-grTjio1wbWQm6uTP+G/jXbOE/NIl/DHE+IcdWLom0lA=" />



meta
charset
utf-8


1
ok















meta
Content-Type
text/html; charset=UTF-8


1
ok















meta
X-UA-Compatible
IE=edge


1
ok















meta
viewport
width=device-width, initial-scale=1


1
ok















style

https://occ.a.nflxso.net/genc/hawkins/5.7.2/font/netflix-sans-arabic-variable-subset.woff2
200

1
ok
font/woff2
missing X-Content-Type-Options nosniff





Cache-Control: max-age=14401 - max-age too short.
No Compression (): 44340/44340 Bytes, font already compressed






ETag: "fcba3b8aa818a8660bb0039d4198fb17"

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2hWks+BOG3l+Dx4wlejiRx8Nx30Cn6HlQV9Vz++8wT4=
sha384-/eMEGvbpxXjZJlwhKHwQPyWKRBQSbEDRRX9XUL2WgTjcJNdmkiES5PjIxTXntIsJ
sha512-batFoVteZr2PhPX4LSE7MdxtMK7g3q7rnrgwhZ/hZkY0c8veFzNplF/zvHZRd6KGR53ZPFozDDjALTJNe2IaKg==

 

<style crossorigin="anonymous" integrity="sha256-2hWks+BOG3l+Dx4wlejiRx8Nx30Cn6HlQV9Vz++8wT4=" />



style

https://occ.a.nflxso.net/genc/hawkins/5.7.2/font/netflix-sans-core-variable-full.woff2
200

1
ok
font/woff2
missing X-Content-Type-Options nosniff





Cache-Control: max-age=14401 - max-age too short.
No Compression (): 450752/450752 Bytes, font already compressed






ETag: "f87907a566c9e45f24f86ab972edf3e2"

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-1whI4n5UfiAXQ9OQX2rN+ovUDDJTeDP4ICpDAT7zpV0=
sha384-zddssYVLKSFu1mvnSn62ZINjv9yrtdGx4S9p8Eng0FxA+vUuaNKGOO9fph9JiSWw
sha512-gv/J00AdI4RUUvzd9kMiFeVZ0nACNpCGJfJMcTtzDI1N7XtPeCS0RH1cP4U439llxP5Np6lEABOUqdkJnMoEnA==

 

<style crossorigin="anonymous" integrity="sha256-1whI4n5UfiAXQ9OQX2rN+ovUDDJTeDP4ICpDAT7zpV0=" />



style

https://occ.a.nflxso.net/genc/hawkins/5.7.2/font/netflix-sans-thai-variable-subset.woff2
200

1
ok
font/woff2
missing X-Content-Type-Options nosniff





Cache-Control: max-age=14401 - max-age too short.
No Compression (): 55952/55952 Bytes, font already compressed






ETag: "2f60803e8bfbf6f93ee62c2409be4ec8"

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IdXeMPXup38GJ2mk4l86YUMK+Z8pxpUpvhQoca9n+2k=
sha384-joX76Thq5l59gs/D5OJLLpWgea1c7nPLk6Jzd0vLBLlxTCbMvRjAws/4t/ogRd6q
sha512-v0IFeP+3/J4kBy9aBv0+gl40DRsUZIGAPMsQnNn9vn3AycUYZ0kdvbiRY9BEjq5Zdq5KJhG5+4ux/RRi5SX8Rg==

 

<style crossorigin="anonymous" integrity="sha256-IdXeMPXup38GJ2mk4l86YUMK+Z8pxpUpvhQoca9n+2k=" />


 

12. Html-Parsing via https://validator.w3.org/nu/


No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns-1372.awsdns-43.org, ns-1984.awsdns-56.co.uk, ns-659.awsdns-18.net, ns-81.awsdns-10.com

 

QNr.DomainTypeNS used
1
org
NS
b.root-servers.net (2001:500:200::b)

Answer: a0.org.afilias-nst.info, a2.org.afilias-nst.info, b0.org.afilias-nst.org, b2.org.afilias-nst.org, c0.org.afilias-nst.info, d0.org.afilias-nst.org
2
ns-1372.awsdns-43.org
NS
a0.org.afilias-nst.info (2001:500:e::1)

Answer: g-ns-1070.awsdns-43.org, g-ns-1643.awsdns-43.org, g-ns-171.awsdns-43.org, g-ns-749.awsdns-43.org

Answer: g-ns-1070.awsdns-43.org
205.251.196.46, 2600:9000:5304:2e00::1

Answer: g-ns-1643.awsdns-43.org
205.251.198.107, 2600:9000:5306:6b00::1

Answer: g-ns-171.awsdns-43.org
205.251.192.171, 2600:9000:5300:ab00::1

Answer: g-ns-749.awsdns-43.org
205.251.194.237, 2600:9000:5302:ed00::1
3
uk
NS
k.root-servers.net (2001:7fd::1)

Answer: dns1.nic.uk, dns2.nic.uk, dns3.nic.uk, dns4.nic.uk, nsa.nic.uk, nsb.nic.uk, nsc.nic.uk, nsd.nic.uk
4
ns-1984.awsdns-56.co.uk
NS
dns1.nic.uk (2a01:618:400::1)

Answer: g-ns-1531.awsdns-56.co.uk, g-ns-1852.awsdns-56.co.uk, g-ns-376.awsdns-56.co.uk, g-ns-952.awsdns-56.co.uk

Answer: g-ns-1531.awsdns-56.co.uk
205.251.197.251, 2600:9000:5305:fb00::1

Answer: g-ns-1852.awsdns-56.co.uk
205.251.199.60, 2600:9000:5307:3c00::1

Answer: g-ns-376.awsdns-56.co.uk
205.251.193.120, 2600:9000:5301:7800::1

Answer: g-ns-952.awsdns-56.co.uk
205.251.195.184, 2600:9000:5303:b800::1
5
net
NS
d.root-servers.net (2001:500:2d::d)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
6
ns-659.awsdns-18.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: g-ns-1362.awsdns-18.net, g-ns-1938.awsdns-18.net, g-ns-467.awsdns-18.net, g-ns-788.awsdns-18.net

Answer: g-ns-1362.awsdns-18.net
205.251.197.82, 2600:9000:5305:5200::1

Answer: g-ns-1938.awsdns-18.net
205.251.199.146, 2600:9000:5307:9200::1

Answer: g-ns-467.awsdns-18.net
205.251.193.211, 2600:9000:5301:d300::1

Answer: g-ns-788.awsdns-18.net
205.251.195.20, 2600:9000:5303:1400::1
7
com
NS
k.root-servers.net (2001:7fd::1)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
8
ns-81.awsdns-10.com
NS
e.gtld-servers.net (2001:502:1ca1::30)

Answer: g-ns-11.awsdns-10.com, g-ns-1162.awsdns-10.com, g-ns-1738.awsdns-10.com, g-ns-586.awsdns-10.com

Answer: g-ns-11.awsdns-10.com
205.251.192.11, 2600:9000:5300:b00::1

Answer: g-ns-1162.awsdns-10.com
205.251.196.138, 2600:9000:5304:8a00::1

Answer: g-ns-1738.awsdns-10.com
205.251.198.202, 2600:9000:5306:ca00::1

Answer: g-ns-586.awsdns-10.com
205.251.194.74, 2600:9000:5302:4a00::1
9
ns-1372.awsdns-43.org: 205.251.197.92
A
g-ns-1070.awsdns-43.org (2600:9000:5304:2e00::1)
10
ns-1372.awsdns-43.org: 2600:9000:5305:5c00::1
AAAA
g-ns-1070.awsdns-43.org (2600:9000:5304:2e00::1)
11
ns-1984.awsdns-56.co.uk: 205.251.199.192
A
g-ns-1531.awsdns-56.co.uk (2600:9000:5305:fb00::1)
12
ns-1984.awsdns-56.co.uk: 2600:9000:5307:c000::1
AAAA
g-ns-1531.awsdns-56.co.uk (2600:9000:5305:fb00::1)
13
ns-659.awsdns-18.net: 205.251.194.147
A
g-ns-1362.awsdns-18.net (2600:9000:5305:5200::1)
14
ns-659.awsdns-18.net: 2600:9000:5302:9300::1
AAAA
g-ns-1362.awsdns-18.net (2600:9000:5305:5200::1)
15
ns-81.awsdns-10.com: 205.251.192.81
A
g-ns-11.awsdns-10.com (2600:9000:5300:b00::1)
16
ns-81.awsdns-10.com: 2600:9000:5300:5100::1
AAAA
g-ns-11.awsdns-10.com (2600:9000:5300:b00::1)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.dradis.netflix.com



1
0
dradis.netflix.com
0

no CAA entry found
1
0
www.netflix.com



1
0
netflix.com
5
issue
digicert.com
1
0

5
issue
digicert.com
1
0

5
issue
letsencrypt.org
1
0

5
issue
letsencrypt.org
1
0

5
issue
pki.goog
1
0

5
issue
pki.goog
1
0
com
0

no CAA entry found
1
0

0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
netflix.com
1password-site-verification=BXCRTZRWNVG4PFLIYFIBWSYHX4
ok
1
0
netflix.com
8cd468d7d5994fcc9d350683a8cb07a1
ok
1
0
netflix.com
anthropic-domain-verification-vxqysx=XDtJHKRTpvy6QvuMuyVMXbMxT
ok
1
0
netflix.com
apple-domain-verification=Ohlo8qLyb9N4JaIm
ok
1
0
netflix.com
apple-domain-verification=U1j_Aj0pS5fid78Cag85YGM14jHrzxM-S2ICXc8rGxg
ok
1
0
netflix.com
appspace-domain-verification=59cd40985507690b0ac0e2c83d24dd6dfa24c7d7571f00b7401e01d5c12332af
ok
1
0
netflix.com
asv=4853f01b1e9226ed9d0031284948059f
ok
1
0
netflix.com
atlassian-domain-verification=TX0Efjn8bXAu0o9GAHyYowM0mcu4oDPHFf10cqaDXFCvU9tRB7R/A9oeQcDmEAD8
ok
1
0
netflix.com
canva-site-verification=DW6T-OKEapKu9QB9ChMocw
ok
1
0
netflix.com
docker-verification=5f9a055c-22b9-4d40-be7f-5af4171e1e71
ok
1
0
netflix.com
docusign=f249396f-8150-48f8-8bd2-705be6e03826
ok
1
0
netflix.com
docusign=f3d36bef-ec7d-42e5-9334-626611acb127
ok
1
0
netflix.com
dropbox-domain-verification=htwo11xk2yl1
ok
1
0
netflix.com
facebook-domain-verification=k65vedr09b2tp2q144ho1zewp3xsc6
ok
1
0
netflix.com
google-site-verification=9DgwSKXMlFzcnW-HuGWef6aVVHWDCQNehxHTq0Ps9IA
ok
1
0
netflix.com
google-site-verification=a8Lak2UwVjIlmH1xRYU3mJ6nSQ7rJnyf2VKWtH4nKZI
ok
1
0
netflix.com
google-site-verification=F6fRKDfeR1Uqz8qJvmH3HmQQxpu9JYY9GJUFeV3hU3Y
ok
1
0
netflix.com
google-site-verification=nCi1QdlMabPJOvtQNCo5KaPyDfwog9pDr3d8IN767YA
ok
1
0
netflix.com
google-site-verification=VQKoV3pv-QYIDfbQa1N4r97x8W07veRTK6JhWUavIuc
ok
1
0
netflix.com
google-site-verification=Wn4h4x_Gf8Zs5qiw88ZingFRjLUNzga-zJXts2UPics
ok
1
0
netflix.com
google-site-verification=YVxAf7gFR4vFk1RkUwiYt3pzl2AVUP6aPdBgV1qtwcw
ok
1
0
netflix.com
h1-domain-verification=AYCqXFtcqVzAhHLWr58GvY2WrbTfkGeMsijza2jPS2E1qcn1
ok
1
0
netflix.com
infoblox-domain-mastery=83433630723145c8e700674aa65ad12bf58d7cd22434a5527c383d131ccc354a77
ok
1
0
netflix.com
jamf-site-verification=vqjVdHx1f_q52DK-WclChA
ok
1
0
netflix.com
klaviyo-site-verification=UM4UEX
ok
1
0
netflix.com
klaviyo-site-verification=WwbqJa
ok
1
0
netflix.com
logmein-verification-code=4FVB4FQ17eVMyHCC7RAApS4Zp
ok
1
0
netflix.com
logmein-verification-code=905b1ed4-1c2e-466f-b24c-756e6ca39eb5
ok
1
0
netflix.com
loom-verification=0004053852
ok
1
0
netflix.com
lucidlink-verification=26PKTJ9J3ATM2SWV49QRS442K4
ok
1
0
netflix.com
miro-verification=9ac407d6774b2ec4313b004d40204399e37f3b48
ok
1
0
netflix.com
notion-domain-verification=MHmHAv2mrRGxVuA3rhIRmz6vwrsAEbsqCR6yRIycSoj
ok
1
0
netflix.com
smartsheet-site-validation=zZPtdlBFlbl-n54tmRUUcd6Bd8lllpAR
ok
1
0
netflix.com
unity-sso-verification=46eb4cbd-e316-4691-84c2-4f4bce784d84
ok
1
0
netflix.com
v=spf1 include:_spf_ipv4.netflix.com include:_spf.google.com include:amazonses.com include:servers.mcsv.net include:_spf.salesforce.com include:_spf.createsend.com -all
ok
1
0
netflix.com
zapier-domain-verification-challenge=d740d03c-47a4-491c-934d-c61bdba6099e
ok
1
0
www.netflix.com


1
0
www.dradis.netflix.com


1
0
_acme-challenge.netflix.com
v=spf1 include:_spf_ipv4.netflix.com include:_spf.google.com include:amazonses.com include:_spf.salesforce.com -all
missing entry or wrong length
1
0
_acme-challenge.www.netflix.com
v=spf1 include:_spf_ipv4.netflix.com include:_spf.google.com include:amazonses.com include:_spf.salesforce.com -all
missing entry or wrong length
1
0
_acme-challenge.www.dradis.netflix.com

Name Error - The domain name does not exist
1
0
_acme-challenge.netflix.com.netflix.com
v=spf1 include:_spf_ipv4.netflix.com include:_spf.google.com include:amazonses.com include:_spf.salesforce.com -all
perhaps wrong
1
0
_acme-challenge.www.netflix.com.netflix.com
v=spf1 include:_spf_ipv4.netflix.com include:_spf.google.com include:amazonses.com include:_spf.salesforce.com -all
perhaps wrong
1
0
_acme-challenge.www.netflix.com.www.netflix.com
v=spf1 include:_spf_ipv4.netflix.com include:_spf.google.com include:amazonses.com include:_spf.salesforce.com -all
perhaps wrong
1
0
_acme-challenge.www.dradis.netflix.com.dradis.netflix.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.dradis.netflix.com.www.dradis.netflix.com

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

netflix.com
1
aspmx.l.google.com
05ok

A


74.125.71.27
01ok

AAAA


2a00:1450:400c:c0a::1b
01ok

CNAME


00ok
MX

netflix.com
5
alt1.aspmx.l.google.com
05ok

A


192.178.213.26
01ok

AAAA


2a00:1450:4013:c1e::1a
01ok

CNAME


00ok
MX

netflix.com
5
alt2.aspmx.l.google.com
05ok

A


142.250.147.27
01ok

AAAA


2a00:1450:4025:c01::1a
01ok

CNAME


00ok
MX

netflix.com
10
aspmx2.googlemail.com
05ok

A


192.178.213.26
01ok

AAAA


2a00:1450:4013:c1e::1b
01ok

CNAME


00ok
MX

netflix.com
10
aspmx3.googlemail.com
05ok

A


142.250.147.26
01ok

AAAA


2a00:1450:4025:c01::1a
01ok

CNAME


00ok
_mta-sts
TXT
_mta-sts.netflix.com

v=spf1 include:_spf_ipv4.netflix.com include:_spf.google.com include:amazonses.com include:_spf.salesforce.com -all
2A MTA-STS TXT Entry (Mail Transfer Agent Strict Transport Security) must start with "'v=STSv1". Do you really want to create a MTA-STS? Or is it the effect of a wildcard * DNS?
SPF
TXT
netflix.com

v=spf1 include:_spf_ipv4.netflix.com include:_spf.google.com include:amazonses.com include:servers.mcsv.net include:_spf.salesforce.com include:_spf.createsend.com -all
ok

TXT
_spf_ipv4.netflix.com

v=spf1 ip4:205.139.44.20 ip4:66.150.112.120 ip4:205.139.45.20 ip4:209.177.164.2 ip4:209.177.166.34 ip4:207.45.73.162/31
8Invalid record: Last element (except exp) must be "all" or "redirect".

TXT
_spf.google.com

v=spf1 include:_netblocks.google.com include:_netblocks2.google.com ~all
ok

TXT
amazonses.com

v=spf1 ip4:199.255.192.0/22 ip4:199.127.232.0/22 ip4:54.240.0.0/18 ip4:69.169.224.0/20 ip4:23.249.208.0/20 ip4:23.251.224.0/19 ip4:76.223.176.0/20 ip4:54.240.64.0/18 ip4:76.223.128.0/19 ip4:216.221.160.0/19 ip4:206.55.144.0/20 ip4:24.110.64.0/18 -all
ok

TXT
servers.mcsv.net

v=spf1 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 -all
ok

TXT
_spf.salesforce.com

v=spf1 exists:%{i}._spf.mta.salesforce.com -all
ok

TXT
_spf.createsend.com

v=spf1 ip4:103.28.42.0/24 ip4:146.88.28.0/24 ip4:163.47.180.0/22 ip4:203.55.21.0/24 ip4:204.75.142.0/24 ip4:27.126.146.0/24 ~all
ok

TXT
_netblocks.google.com

v=spf1 ip4:74.125.0.0/16 ip4:173.194.0.0/16 ip4:209.85.128.0/17 ip4:216.58.192.0/19 ip4:216.239.32.0/19 ip4:172.217.32.0/21 ip4:172.253.56.0/21 ip4:172.253.112.0/20 ~all
ok

TXT
_netblocks2.google.com

v=spf1 ip6:2001:4860:4000::/36 ip6:2404:6800:4000::/36 ip6:2607:f8b0:4000::/36 ip6:2800:3f0:4000::/36 ip6:2a00:1450:4000::/36 ip6:2c0f:fb50:4000::/36 ~all
ok
_dmarc
TXT
_dmarc.netflix.com

v=DMARC1; p=reject; fo=1; rua=mailto:netflix@rua.netcraft.com,mailto:dmarcreports@netflix.com,mailto:dmarc_agg@dmarc.250ok.net;ruf=mailto:netflix@ruf.netcraft.com,mailto:dmarcreports@netflix.com,mailto:dmarc_fr@dmarc.250ok.net
ok

TXT
netflix.com._report._dmarc.dmarc.250ok.net

mailto:dmarc_agg@dmarc.250ok.net
okMail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.

TXT
netflix.com._report._dmarc.rua.netcraft.com

mailto:netflix@rua.netcraft.com
okMail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.

TXT
netflix.com._report._dmarc.dmarc.250ok.net

v=DMARC1
okConfirmed. Sending reports to external domain is allowed.

TXT
netflix.com._report._dmarc.rua.netcraft.com

v=DMARC1;
okConfirmed. Sending reports to external domain is allowed.

TXT
netflix.com._report._dmarc.dmarc.250ok.net

mailto:dmarc_fr@dmarc.250ok.net
okMail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.

TXT
netflix.com._report._dmarc.ruf.netcraft.com

mailto:netflix@ruf.netcraft.com
okMail domain unequal current domain. Check required, if there is a confirming _report._dmarc-Record. See RFC 7489, 7.1.

TXT
netflix.com._report._dmarc.dmarc.250ok.net

v=DMARC1
okConfirmed. Sending reports to external domain is allowed.

TXT
netflix.com._report._dmarc.ruf.netcraft.com

v=DMARC1;
okConfirmed. Sending reports to external domain is allowed.

 

 

17. Cipher Suites




Skipped, CDN used or too many ip addresses

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=6f83d8f0-1fd1-4ec8-93bf-5dfc31cfc2b0

 

Last Result: https://check-your-website.server-daten.de/?q=netflix.com - 2025-11-02 02:51:32

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=netflix.com" target="_blank">Check this Site: netflix.com</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=netflix.com