Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 8 Checks (20:10:58)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

N

 

No trusted Certificate

 

Checked:
10.04.2020 09:21:40

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
paxtour.net
A
51.77.210.94
Strasbourg/Grand Est/France (FR) - OVH SAS
Hostname: paxtour.net
yes
1
0

AAAA

yes


www.paxtour.net
A
51.77.210.94
Strasbourg/Grand Est/France (FR) - OVH SAS
Hostname: paxtour.net
yes
1
0

AAAA

yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 33853, Flags 256






Public Key with Algorithm 8, KeyTag 48903, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.04.2020, 00:00:00 +, Signature-Inception: 01.04.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: net

net
1 DS RR in the parent zone found






1 RRSIG RR to validate DS RR found






RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 23.04.2020, 05:00:00 +, Signature-Inception: 10.04.2020, 04:00:00 +, KeyTag 48903, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 48903 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 24512, Flags 256






Public Key with Algorithm 8, KeyTag 35886, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 19.04.2020, 16:28:30 +, Signature-Inception: 04.04.2020, 16:23:30 +, KeyTag 35886, Signer-Name: net






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 35886 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 35886, DigestType 2 and Digest "eGKyf19Rbr4ZaARE1M5edimBkxhCxGXwAjZAHYvZc+4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: paxtour.net

paxtour.net
1 DS RR in the parent zone found






1 RRSIG RR to validate DS RR found






RRSIG-Owner paxtour.net., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 14.04.2020, 06:37:07 +, Signature-Inception: 07.04.2020, 05:27:07 +, KeyTag 24512, Signer-Name: net






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 24512 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 7, KeyTag 18603, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 7, KeyTag 27764, Flags 256






2 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner paxtour.net., Algorithm: 7, 2 Labels, original TTL: 86400 sec, Signature-expiration: 26.04.2020, 05:54:34 +, Signature-Inception: 27.03.2020, 05:54:34 +, KeyTag 18603, Signer-Name: paxtour.net






RRSIG-Owner paxtour.net., Algorithm: 7, 2 Labels, original TTL: 86400 sec, Signature-expiration: 26.04.2020, 05:54:34 +, Signature-Inception: 27.03.2020, 05:54:34 +, KeyTag 27764, Signer-Name: paxtour.net






• Status: Good - Algorithmus 7 and DNSKEY with KeyTag 18603 used to validate the DNSKEY RRSet






• Status: Good - Algorithmus 7 and DNSKEY with KeyTag 27764 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 18603, DigestType 2 and Digest "0fBKu5KwtkEaN5W+0FA748pjTmGu+W+pnmrFbK2rJxc=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone






RRSIG Type 1 validates the A - Result: 51.77.210.94
Validated: RRSIG-Owner paxtour.net., Algorithm: 7, 2 Labels, original TTL: 86400 sec, Signature-expiration: 26.04.2020, 05:54:34 +, Signature-Inception: 27.03.2020, 05:54:34 +, KeyTag 27764, Signer-Name: paxtour.net






RRSIG Type 16 validates the TXT - Result: v=spf1 include:mx.ovh.com ~all
Validated: RRSIG-Owner paxtour.net., Algorithm: 7, 2 Labels, original TTL: 600 sec, Signature-expiration: 26.04.2020, 05:54:34 +, Signature-Inception: 27.03.2020, 05:54:34 +, KeyTag 27764, Signer-Name: paxtour.net






RRSIG Type 50, expiration 2020-04-26 05:54:34 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM






RRSIG Type 50, expiration 2020-04-26 05:54:34 + validates the NSEC3 RR that proves the not-existence of the AAAA RR.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM






RRSIG Type 50, expiration 2020-04-26 05:54:34 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: No Bitmap?






RRSIG Type 50, expiration 2020-04-26 05:54:34 + validates the NSEC3 RR that proves the not-existence of the CAA RR.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM



Zone: www.paxtour.net

www.paxtour.net
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "rb27aj9j8um0sovadu39pf648cukab5t" between the hashed NSEC3-owner "rb27aj9j8um0sovadu39pf648cukab5t" and the hashed NextOwner "rgspq50b01r9lmit93g2m9nrm2khqnnj". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, RRSIG Validated: RRSIG-Owner rb27aj9j8um0sovadu39pf648cukab5t.paxtour.net., Algorithm: 7, 3 Labels, original TTL: 300 sec, Signature-expiration: 26.04.2020, 05:54:34 +, Signature-Inception: 27.03.2020, 05:54:34 +, KeyTag 27764, Signer-Name: paxtour.net






RRSIG Type 1 validates the A - Result: 51.77.210.94
Validated: RRSIG-Owner www.paxtour.net., Algorithm: 7, 3 Labels, original TTL: 86400 sec, Signature-expiration: 26.04.2020, 05:54:34 +, Signature-Inception: 27.03.2020, 05:54:34 +, KeyTag 27764, Signer-Name: paxtour.net






RRSIG Type 50, expiration 2020-04-26 05:54:34 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A, RRSIG






RRSIG Type 50, expiration 2020-04-26 05:54:34 + validates the NSEC3 RR that proves the not-existence of the TXT RR.
Bitmap: A, RRSIG






RRSIG Type 50, expiration 2020-04-26 05:54:34 + validates the NSEC3 RR that proves the not-existence of the AAAA RR.
Bitmap: A, RRSIG






RRSIG Type 50, expiration 2020-04-26 05:54:34 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: A, RRSIG






RRSIG Type 50, expiration 2020-04-26 05:54:34 + validates the NSEC3 RR that proves the not-existence of the CAA RR.
Bitmap: A, RRSIG

 

3. Name Servers

DomainNameserverNS-IP
www.paxtour.net
•  dns200.anycast.me
•
paxtour.net
•  dns200.anycast.me
46.105.206.200
Clichy-sous-Bois/Île-de-France/France (FR) - OVH SAS		•

•  ns200.anycast.me
46.105.207.200
Clichy-sous-Bois/Île-de-France/France (FR) - OVH SAS		•
net
•  a.gtld-servers.net
•

•  b.gtld-servers.net
•

•  c.gtld-servers.net
•

•  d.gtld-servers.net
•

•  e.gtld-servers.net
•

•  f.gtld-servers.net
•

•  g.gtld-servers.net
•

•  h.gtld-servers.net
•

•  i.gtld-servers.net
•

•  j.gtld-servers.net
•

•  k.gtld-servers.net
•

•  l.gtld-servers.net
•

•  m.gtld-servers.net
•

 

4. SOA-Entries


Domain:net
Zone-Name:
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1586503276
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:9


Domain:net
Zone-Name:
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1586503291
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:4


Domain:paxtour.net
Zone-Name:
Primary:dns200.anycast.me
Mail:tech.ovh.net
Serial:2020032701
Refresh:86400
Retry:3600
Expire:3600000
TTL:300
num Entries:2


Domain:www.paxtour.net
Zone-Name:
Primary:dns200.anycast.me
Mail:tech.ovh.net
Serial:2020032701
Refresh:86400
Retry:3600
Expire:3600000
TTL:300
num Entries:1


5. Screenshots

Startaddress: https://paxtour.net, address used: https://paxtour.net/, Screenshot created 2020-04-10 09:23:00 +00:0

 

Mobil (412px x 732px)

 

1518 milliseconds

 

Screenshot mobile - https://paxtour.net/
Mobil + Landscape (732px x 412px)

 

1543 milliseconds

 

Screenshot mobile landscape - https://paxtour.net/
Screen (1280px x 1680px)

 

2689 milliseconds

 

Screenshot Desktop - https://paxtour.net/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport396732
content Size3965998

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

Chrome-Connection: secure. secure connection settings. The connection to this site is encrypted and authenticated using TLS 1.2, ECDHE_RSA with P-256, and AES_128_GCM.

 

Chrome-Resources : secure. all served securely. All resources on this page are served securely.

 

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://www.paxtour.net/
51.77.210.94
301
https://www.paxtour.net/
Html is minified: 100.00 %
0.064
A
Date: Fri, 10 Apr 2020 07:22:05 GMT
Server: Apache/2.4.25 (Debian)
Location: https://www.paxtour.net/
Content-Length: 313
Connection: close
Content-Type: text/html; charset=iso-8859-1

• http://paxtour.net/
51.77.210.94
200

Html is minified: 221.60 %
0.057
H
Date: Fri, 10 Apr 2020 07:22:04 GMT
Server: Apache/2.4.25 (Debian)
Last-Modified: Tue, 22 Jan 2019 08:44:24 GMT
ETag: "29cd-58007fc0213e9-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3041
Connection: close
Content-Type: text/html

• https://www.paxtour.net/
51.77.210.94
301
https://paxtour.net/

3.460
N
Certificate error: RemoteCertificateNameMismatch
Date: Fri, 10 Apr 2020 07:22:09 GMT
Server: Apache/2.4.25 (Debian)
Set-Cookie: PHPSESSID=sgrpmj7j9lumjh2brfjfgrvki3; Path=/; Domain=www.paxtour.net
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Pingback: https://paxtour.net/xmlrpc.php
Location: https://paxtour.net/
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

• https://paxtour.net/
51.77.210.94
Inline-JavaScript (∑/total): 6/2398 Inline-CSS (∑/total): 2/560		200

Html is minified: 129.78 %
Other inline scripts (∑/total): 6/2398		3.990
B
Date: Fri, 10 Apr 2020 07:22:05 GMT
Server: Apache/2.4.25 (Debian)
Set-Cookie: PHPSESSID=htasb9i08mjetevsf97s12ftj4; Path=/; Domain=paxtour.net
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Pingback: https://paxtour.net/xmlrpc.php
Link: <https://paxtour.net/>; rel=shortlink
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8008
Connection: close
Content-Type: text/html; charset=UTF-8

• http://www.paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
51.77.210.94
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		301
https://www.paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0		0.047
A
Visible Content: Moved Permanently The document has moved here . Apache/2.4.25 (Debian) Server at www.paxtour.net Port 80
Date: Fri, 10 Apr 2020 07:22:13 GMT
Server: Apache/2.4.25 (Debian)
Location: https://www.paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 382
Connection: close
Content-Type: text/html; charset=iso-8859-1

• http://paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
51.77.210.94
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0		404

Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0		0.057
A
Not Found
Visible Content: Not Found The requested URL was not found on this server. Apache/2.4.25 (Debian) Server at paxtour.net Port 80
Date: Fri, 10 Apr 2020 07:22:13 GMT
Server: Apache/2.4.25 (Debian)
Content-Length: 273
Connection: close
Content-Type: text/html; charset=iso-8859-1

• https://www.paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

301
https://paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

3.527
N
Certificate error: RemoteCertificateNameMismatch
Visible Content:
Date: Fri, 10 Apr 2020 07:22:13 GMT
Server: Apache/2.4.25 (Debian)
Set-Cookie: PHPSESSID=ks224mcasbo4uuqsf0nknddgf4; Path=/; Domain=www.paxtour.net
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-Pingback: https://paxtour.net/xmlrpc.php
Location: https://paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Content-Length: 0
Connection: close
Content-Type: text/html; charset=UTF-8

• https://paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 3/1464 Inline-CSS (∑/total): 2/560		404

Html is minified: 137.08 %
Other inline scripts (∑/total): 3/1464		3.580
A
Not Found
Visible Content: Mobile Menu Toggle Accueil Destinations Prochains départs Qui sommes-nous ? Actualités Nous contacter Mon compte The page you were looking for could not be found. 404 Accueil Destinations Prochains départs Qui sommes-nous ? Actualités Nous contacter Mon compte &copy; 2014 Pax Tour
Info: Html-Content with meta and/or script, may be a problem creating a Letsencrypt certificate using http-01 validation
Date: Fri, 10 Apr 2020 07:22:17 GMT
Server: Apache/2.4.25 (Debian)
Set-Cookie: PHPSESSID=akqnbfg3dbdefrc295alt94ol4; Path=/; Domain=paxtour.net
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Pragma: no-cache
X-Pingback: https://paxtour.net/xmlrpc.php
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8

 

7. Comments


1. General Results, most used to calculate the result

Aname "paxtour.net" is domain, public suffix is "net", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services"
AGood: All ip addresses are public addresses
AGood: No asked Authoritative Name Server had a timeout
AGood: one preferred version: non-www is preferred
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):3 complete Content-Type - header (4 urls)
http://paxtour.net/ 51.77.210.94


Url with incomplete Content-Type - header - missing charset
Ahttp://www.paxtour.net/ 51.77.210.94
301
https://www.paxtour.net/
Correct redirect http - https with the same domain name
Bhttps://paxtour.net/ 51.77.210.94
200

Missing HSTS-Header
Bhttps://www.paxtour.net/ 51.77.210.94
301

Missing HSTS-Header
Bhttps://paxtour.net/ 51.77.210.94
200
PHPSESSID=htasb9i08mjetevsf97s12ftj4; Path=/; Domain=paxtour.net
Cookie sent via https, but not marked as secure
Bhttps://www.paxtour.net/ 51.77.210.94
301
PHPSESSID=sgrpmj7j9lumjh2brfjfgrvki3; Path=/; Domain=www.paxtour.net
Cookie sent via https, but not marked as secure
CError - more then one version with Http-Status 200. After all redirects, all users (and search engines) should see the same https url: Non-www or www, but not both with http status 200.
HFatal error: http result with http-status 200, no encryption. Add a redirect http ⇒ https, so every connection is secure. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop.
Ihttps://paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Nhttps://www.paxtour.net/ 51.77.210.94
301
https://paxtour.net/
Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://www.paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
301
https://paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Error - Certificate isn't trusted, RemoteCertificateNameMismatch

2. Header-Checks (Cross-Origin-* headers are alpha - started 2024-06-05)


3. DNS- and NameServer - Checks

AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: dns200.anycast.me,ns200.anycast.me
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://paxtour.net/ 51.77.210.94
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://paxtour.net/ 51.77.210.94
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://paxtour.net/ 51.77.210.94
200

Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 59 external CSS / JavaScript files found
AGood: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 2 images (type image/png, image/jpg) found without additional GZip. Not required because these images are already compressed
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 54 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 7 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 61 complete.
Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 11 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 11 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AGood: All img-elements have a valid alt-attribute.: 11 img-elements found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://paxtour.net/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
404
3.580 seconds
Warning: 404 needs more then one second
ADuration: 84610 milliseconds, 84.610 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
paxtour.net
51.77.210.94
443
ok
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
paxtour.net
51.77.210.94
443
ok
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
 Tls.1.2
Tls.1.1
Tls.1.0
Chain - too much certificates, don't send root certificates

1CN=paxtour.net


2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


3CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


www.paxtour.net
51.77.210.94
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok

www.paxtour.net
51.77.210.94
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
 Tls.1.2
Tls.1.1
Tls.1.0
Chain - too much certificates, don't send root certificates

1CN=paxtour.net


2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


3CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


paxtour.net
paxtour.net
443
ok
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok

paxtour.net
paxtour.net
443
ok
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
 Tls.1.2
Tls.1.1
Tls.1.0
Chain - too much certificates, don't send root certificates

1CN=paxtour.net


2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


3CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


www.paxtour.net
www.paxtour.net
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok

www.paxtour.net
www.paxtour.net
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
error checking OCSP stapling
ok
no http/2 via ALPN 
Tls.1.2
Tls.1.1
Tls.1.0
no http/2 via ALPN
 Tls.1.2
Tls.1.1
Tls.1.0
Chain - too much certificates, don't send root certificates

1CN=paxtour.net


2CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US


3CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US

 

9. Certificates

1.
1.
CN=paxtour.net
19.03.2020
17.06.2020
1629 days expired		paxtour.net - 1 entry
1.
1.
CN=paxtour.net
19.03.2020

17.06.2020
1629 days expired


paxtour.net - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:049A412965922B1FE296BBB00AF9FDA960FA
Thumbprint:75A3686D6BADC1CF745B1DD081D078C37AD2C6A6
SHA256 / Certificate:z8g0nK+jDS5Ssf78jaeecx3jbxrNSKxaSI1jdYbmeBU=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b21672ce6b493c5ac6bfe612933be7a87a15e221317bc2946c8f6ed60006e1c0
SHA256 hex / Subject Public Key Information (SPKI):b21672ce6b493c5ac6bfe612933be7a87a15e221317bc2946c8f6ed60006e1c0
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.int-x3.letsencrypt.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
06.10.2016
06.10.2021
1153 days expired

2.
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
06.10.2016

06.10.2021
1153 days expired




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00D3B17226342332DCF40528512AEC9C6A
Thumbprint:1B23675354FCAD90119D88075015EA17ADD527D8
SHA256 / Certificate:cx09nPqgYUh6HXFEWkL2ffCvyipsLS+Y/3s84RKx9Wg=
SHA256 hex / Cert (DANE * 0 1):731d3d9cfaa061487a1d71445a42f67df0afca2a6c2d2f98ff7b3ce112b1f568
SHA256 hex / PublicKey (DANE * 1 1):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
SHA256 hex / Subject Public Key Information (SPKI):60b87575447dcba2a36b7d11ac09fb24a9db406fee12d2cc90180517616e8a18
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.root-x1.letsencrypt.org/
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3836 days

3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3836 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Small Code Update - wait one minute

 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute

 

11. Html-Content - Entries

Summary

No data found or small Code-update

 

Details

Small Code Update - wait one minute

 

12. Html-Parsing via https://validator.nu/ / https://validator.w3.org/nu/ (started 2024-09-28, 09:00, alpha)

  Unfortunately, there are differences between the first used validator.nu and validator.w3.org/nu/ - switched to validator.w3.org/nu/. Looks like some error messages (link - fetchpriority attribute) of validator.nu are obsolete, not seen in the w3.org-version and not found in the current specification: link may have a fetchpriority attribute.

Small Code update, wait one minute

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers:

 

No NameServer - IP address informations found. The feature is new (2020-05-07), so recheck this domain.

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.paxtour.net
0

no CAA entry found
1
0
paxtour.net
0

no CAA entry found
1
0
net
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
paxtour.net
v=spf1 include:mx.ovh.com ~all
ok
1
0
www.paxtour.net

ok
1
0
_acme-challenge.paxtour.net

Name Error - The domain name does not exist
1
0
_acme-challenge.www.paxtour.net

Name Error - The domain name does not exist
1
0
_acme-challenge.paxtour.net.paxtour.net

Name Error - The domain name does not exist
1
0
_acme-challenge.www.paxtour.net.paxtour.net

Name Error - The domain name does not exist
1
0
_acme-challenge.www.paxtour.net.www.paxtour.net

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

No DomainServiceEntries entries found

 

 

17. Cipher Suites

No Ciphers found

 

18. Portchecks

DomainIPPortDescriptionResultAnswer
paxtour.net
51.77.210.94
21
FTP



paxtour.net
51.77.210.94
21
FTP



www.paxtour.net
51.77.210.94
21
FTP



www.paxtour.net
51.77.210.94
21
FTP



www.paxtour.net
51.77.210.94
22
SSH



www.paxtour.net
51.77.210.94
22
SSH



paxtour.net
51.77.210.94
22
SSH



paxtour.net
51.77.210.94
22
SSH



www.paxtour.net
51.77.210.94
25
SMTP



www.paxtour.net
51.77.210.94
25
SMTP



paxtour.net
51.77.210.94
25
SMTP



paxtour.net
51.77.210.94
25
SMTP



paxtour.net
51.77.210.94
53
DNS



paxtour.net
51.77.210.94
53
DNS



www.paxtour.net
51.77.210.94
53
DNS



www.paxtour.net
51.77.210.94
53
DNS



www.paxtour.net
51.77.210.94
110
POP3



www.paxtour.net
51.77.210.94
110
POP3



paxtour.net
51.77.210.94
110
POP3



paxtour.net
51.77.210.94
110
POP3



paxtour.net
51.77.210.94
143
IMAP



paxtour.net
51.77.210.94
143
IMAP



www.paxtour.net
51.77.210.94
143
IMAP



www.paxtour.net
51.77.210.94
143
IMAP



www.paxtour.net
51.77.210.94
465
SMTP (encrypted)



www.paxtour.net
51.77.210.94
465
SMTP (encrypted)



paxtour.net
51.77.210.94
465
SMTP (encrypted)



paxtour.net
51.77.210.94
465
SMTP (encrypted)



paxtour.net
51.77.210.94
587
SMTP (encrypted, submission)



paxtour.net
51.77.210.94
587
SMTP (encrypted, submission)



www.paxtour.net
51.77.210.94
587
SMTP (encrypted, submission)



www.paxtour.net
51.77.210.94
587
SMTP (encrypted, submission)



paxtour.net
51.77.210.94
993
IMAP (encrypted)



paxtour.net
51.77.210.94
993
IMAP (encrypted)



www.paxtour.net
51.77.210.94
993
IMAP (encrypted)



www.paxtour.net
51.77.210.94
993
IMAP (encrypted)



www.paxtour.net
51.77.210.94
995
POP3 (encrypted)



www.paxtour.net
51.77.210.94
995
POP3 (encrypted)



paxtour.net
51.77.210.94
995
POP3 (encrypted)



paxtour.net
51.77.210.94
995
POP3 (encrypted)



paxtour.net
51.77.210.94
1433
MS SQL



paxtour.net
51.77.210.94
1433
MS SQL



www.paxtour.net
51.77.210.94
1433
MS SQL



www.paxtour.net
51.77.210.94
1433
MS SQL



www.paxtour.net
51.77.210.94
2082
cPanel (http)



www.paxtour.net
51.77.210.94
2082
cPanel (http)



paxtour.net
51.77.210.94
2082
cPanel (http)



paxtour.net
51.77.210.94
2082
cPanel (http)



paxtour.net
51.77.210.94
2083
cPanel (https)



paxtour.net
51.77.210.94
2083
cPanel (https)



www.paxtour.net
51.77.210.94
2083
cPanel (https)



www.paxtour.net
51.77.210.94
2083
cPanel (https)



www.paxtour.net
51.77.210.94
2086
WHM (http)



www.paxtour.net
51.77.210.94
2086
WHM (http)



paxtour.net
51.77.210.94
2086
WHM (http)



paxtour.net
51.77.210.94
2086
WHM (http)



paxtour.net
51.77.210.94
2087
WHM (https)



paxtour.net
51.77.210.94
2087
WHM (https)



www.paxtour.net
51.77.210.94
2087
WHM (https)



www.paxtour.net
51.77.210.94
2087
WHM (https)



www.paxtour.net
51.77.210.94
2089
cPanel Licensing



www.paxtour.net
51.77.210.94
2089
cPanel Licensing



paxtour.net
51.77.210.94
2089
cPanel Licensing



paxtour.net
51.77.210.94
2089
cPanel Licensing



paxtour.net
51.77.210.94
2095
cPanel Webmail (http)



paxtour.net
51.77.210.94
2095
cPanel Webmail (http)



www.paxtour.net
51.77.210.94
2095
cPanel Webmail (http)



www.paxtour.net
51.77.210.94
2095
cPanel Webmail (http)



www.paxtour.net
51.77.210.94
2096
cPanel Webmail (https)



www.paxtour.net
51.77.210.94
2096
cPanel Webmail (https)



paxtour.net
51.77.210.94
2096
cPanel Webmail (https)



paxtour.net
51.77.210.94
2096
cPanel Webmail (https)



paxtour.net
51.77.210.94
2222
DirectAdmin (http)



paxtour.net
51.77.210.94
2222
DirectAdmin (http)



paxtour.net
51.77.210.94
2222
DirectAdmin (https)



paxtour.net
51.77.210.94
2222
DirectAdmin (https)



www.paxtour.net
51.77.210.94
2222
DirectAdmin (http)



www.paxtour.net
51.77.210.94
2222
DirectAdmin (http)



www.paxtour.net
51.77.210.94
2222
DirectAdmin (https)



www.paxtour.net
51.77.210.94
2222
DirectAdmin (https)



paxtour.net
51.77.210.94
3306
mySql



paxtour.net
51.77.210.94
3306
mySql



www.paxtour.net
51.77.210.94
3306
mySql



www.paxtour.net
51.77.210.94
3306
mySql



www.paxtour.net
51.77.210.94
5224
Plesk Licensing



www.paxtour.net
51.77.210.94
5224
Plesk Licensing



paxtour.net
51.77.210.94
5224
Plesk Licensing



paxtour.net
51.77.210.94
5224
Plesk Licensing



paxtour.net
51.77.210.94
5432
PostgreSQL



paxtour.net
51.77.210.94
5432
PostgreSQL



www.paxtour.net
51.77.210.94
5432
PostgreSQL



www.paxtour.net
51.77.210.94
5432
PostgreSQL



www.paxtour.net
51.77.210.94
8080
Ookla Speedtest (http)



www.paxtour.net
51.77.210.94
8080
Ookla Speedtest (http)



www.paxtour.net
51.77.210.94
8080
Ookla Speedtest (https)



www.paxtour.net
51.77.210.94
8080
Ookla Speedtest (https)



paxtour.net
51.77.210.94
8080
Ookla Speedtest (http)



paxtour.net
51.77.210.94
8080
Ookla Speedtest (http)



paxtour.net
51.77.210.94
8080
Ookla Speedtest (https)



paxtour.net
51.77.210.94
8080
Ookla Speedtest (https)



paxtour.net
51.77.210.94
8083
VestaCP http



paxtour.net
51.77.210.94
8083
VestaCP http



paxtour.net
51.77.210.94
8083
VestaCP https



paxtour.net
51.77.210.94
8083
VestaCP https



www.paxtour.net
51.77.210.94
8083
VestaCP http



www.paxtour.net
51.77.210.94
8083
VestaCP http



www.paxtour.net
51.77.210.94
8083
VestaCP https



www.paxtour.net
51.77.210.94
8083
VestaCP https



www.paxtour.net
51.77.210.94
8443
Plesk Administration (https)



www.paxtour.net
51.77.210.94
8443
Plesk Administration (https)



paxtour.net
51.77.210.94
8443
Plesk Administration (https)



paxtour.net
51.77.210.94
8443
Plesk Administration (https)



paxtour.net
51.77.210.94
8447
Plesk Installer + Updates



paxtour.net
51.77.210.94
8447
Plesk Installer + Updates



www.paxtour.net
51.77.210.94
8447
Plesk Installer + Updates



www.paxtour.net
51.77.210.94
8447
Plesk Installer + Updates



www.paxtour.net
51.77.210.94
8880
Plesk Administration (http)



www.paxtour.net
51.77.210.94
8880
Plesk Administration (http)



paxtour.net
51.77.210.94
8880
Plesk Administration (http)



paxtour.net
51.77.210.94
8880
Plesk Administration (http)



paxtour.net
51.77.210.94
10000
Webmin (http)



paxtour.net
51.77.210.94
10000
Webmin (http)



paxtour.net
51.77.210.94
10000
Webmin (https)



paxtour.net
51.77.210.94
10000
Webmin (https)



www.paxtour.net
51.77.210.94
10000
Webmin (http)



www.paxtour.net
51.77.210.94
10000
Webmin (http)



www.paxtour.net
51.77.210.94
10000
Webmin (https)



www.paxtour.net
51.77.210.94
10000
Webmin (https)



 

 

Permalink: https://check-your-website.server-daten.de/?i=95d561c4-5e10-4924-9262-3bc615c38c4b

 

Last Result: https://check-your-website.server-daten.de/?q=paxtour.net - 2020-04-10 09:21:40

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=paxtour.net" target="_blank">Check this Site: paxtour.net</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=paxtour.net

 

 

Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • USt-IdNr.: DE221734518

 

Errors, ideas, questions? Use the Contact form • A project using Server-Daten - Web Database solutions