Check DNS, Urls + Redirects, Certificates and Content of your Website

...

skip EDNS-Check

skip Content-Check

check links

Top config

Checked:
31.01.2023 00:43:38

Older results

No older results found

1. IP-Addresses

Host	Type	IP-Address	is auth.	∑ Queries	∑ Timeout
secure.capitalab.co.uk	CNAME	secure.gslb.capitalab.co.uk	yes	1	0
www.secure.capitalab.co.uk		Name Error	yes	1	0
secure.capitalab.co.uk	A	148.106.153.95 London/England/United Kingdom (GB) - BGC Partners No Hostname found	no
*.capitalab.co.uk	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes
*.secure.capitalab.co.uk	A	Name Error	yes
	AAAA	Name Error	yes
	CNAME	Name Error	yes

2. DNSSEC

Zone (*)	DNSSEC - Informations

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 951, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.02.2023, 00:00:00 +, Signature-Inception: 21.01.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: uk
uk	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 43876, DigestType 2 and Digest oQftKsG9FNkkFzvH6CehFTWCByOU+Scro34jU7xllgM=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner uk., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.02.2023, 21:00:00 +, Signature-Inception: 30.01.2023, 20:00:00 +, KeyTag 951, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 951 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 43056, Flags 256


	Public Key with Algorithm 8, KeyTag 43876, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner uk., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 13.02.2023, 08:57:04 +, Signature-Inception: 30.01.2023, 08:46:57 +, KeyTag 43876, Signer-Name: uk


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 43876 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 43876, DigestType 2 and Digest "oQftKsG9FNkkFzvH6CehFTWCByOU+Scro34jU7xllgM=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: co.uk
co.uk	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 33621, DigestType 2 and Digest uRmdi3/KcQfXjEGNHRvJ6f6dm5sYe9E8ltxLZYJCXNg=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner co.uk., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 13.02.2023, 17:38:19 +, Signature-Inception: 30.01.2023, 17:13:45 +, KeyTag 43056, Signer-Name: uk


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 43056 used to validate the DS RRSet in the parent zone


	1 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 33621, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner co.uk., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 01.03.2023, 10:46:12 +, Signature-Inception: 25.01.2023, 10:34:20 +, KeyTag 33621, Signer-Name: co.uk


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33621 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 33621, DigestType 2 and Digest "uRmdi3/KcQfXjEGNHRvJ6f6dm5sYe9E8ltxLZYJCXNg=" validates local Key with the same values

Zone: capitalab.co.uk
capitalab.co.uk	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "itqcg3nbqp6t0rl7gbpn1n77oorhjfta" between the hashed NSEC3-owner "itpte49ufknic2e884e8vbbljfht9apd" and the hashed NextOwner "itqdsioah8nagdar5sdh4m53182cfham". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner itpte49ufknic2e884e8vbbljfht9apd.co.uk., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 28.02.2023, 12:54:14 +, Signature-Inception: 24.01.2023, 12:26:48 +, KeyTag 33621, Signer-Name: co.uk


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "g9f1kiihm8m9vhjk7lrvetbqceogjiqp" as Owner. That's the Hash of "co.uk" with the NextHashedOwnerName "g9f3nq74ntit1d6qsrkccs86r4t7h1md". So that domain name is the Closest Encloser of "capitalab.co.uk". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.03.2023, 03:07:17 +, Signature-Inception: 27.01.2023, 03:04:46 +, KeyTag 33621, Signer-Name: co.uk


	0 DNSKEY RR found




Zone: secure.capitalab.co.uk
secure.capitalab.co.uk	0 DS RR in the parent zone found

Zone: www.secure.capitalab.co.uk
www.secure.capitalab.co.uk	0 DS RR in the parent zone found

Zone: (root)
(root)	1 DS RR published


	DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=


	• Status: Valid because published


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 951, Flags 256


	Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 11.02.2023, 00:00:00 +, Signature-Inception: 21.01.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: uk
uk	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 43876, DigestType 2 and Digest oQftKsG9FNkkFzvH6CehFTWCByOU+Scro34jU7xllgM=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner uk., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 12.02.2023, 21:00:00 +, Signature-Inception: 30.01.2023, 20:00:00 +, KeyTag 951, Signer-Name: (root)


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 951 used to validate the DS RRSet in the parent zone


	2 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 43056, Flags 256


	Public Key with Algorithm 8, KeyTag 43876, Flags 257 (SEP = Secure Entry Point)


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner uk., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 13.02.2023, 08:57:04 +, Signature-Inception: 30.01.2023, 08:46:57 +, KeyTag 43876, Signer-Name: uk


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 43876 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 43876, DigestType 2 and Digest "oQftKsG9FNkkFzvH6CehFTWCByOU+Scro34jU7xllgM=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: co.uk
co.uk	1 DS RR in the parent zone found


	DS with Algorithm 8, KeyTag 33621, DigestType 2 and Digest uRmdi3/KcQfXjEGNHRvJ6f6dm5sYe9E8ltxLZYJCXNg=


	2 RRSIG RR to validate DS RR found


	RRSIG-Owner co.uk., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 13.02.2023, 17:38:19 +, Signature-Inception: 30.01.2023, 17:13:45 +, KeyTag 43056, Signer-Name: uk


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 43056 used to validate the DS RRSet in the parent zone


	1 DNSKEY RR found


	Public Key with Algorithm 8, KeyTag 33621, Flags 256


	1 RRSIG RR to validate DNSKEY RR found


	RRSIG-Owner co.uk., Algorithm: 8, 2 Labels, original TTL: 300 sec, Signature-expiration: 01.03.2023, 10:46:12 +, Signature-Inception: 25.01.2023, 10:34:20 +, KeyTag 33621, Signer-Name: co.uk


	• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33621 used to validate the DNSKEY RRSet


	• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 33621, DigestType 2 and Digest "uRmdi3/KcQfXjEGNHRvJ6f6dm5sYe9E8ltxLZYJCXNg=" validates local Key with the same values

Zone: capitalab.co.uk
capitalab.co.uk	0 DS RR in the parent zone found


	DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "itqcg3nbqp6t0rl7gbpn1n77oorhjfta" between the hashed NSEC3-owner "itpte49ufknic2e884e8vbbljfht9apd" and the hashed NextOwner "itqdsioah8nagdar5sdh4m53182cfham". So the parent zone confirmes the not-existence of a DS RR. Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner itpte49ufknic2e884e8vbbljfht9apd.co.uk., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 28.02.2023, 12:54:14 +, Signature-Inception: 24.01.2023, 12:26:48 +, KeyTag 33621, Signer-Name: co.uk


	DS-Query in the parent zone sends valid NSEC3 RR with the Hash "g9f1kiihm8m9vhjk7lrvetbqceogjiqp" as Owner. That's the Hash of "co.uk" with the NextHashedOwnerName "g9f3nq74ntit1d6qsrkccs86r4t7h1md". So that domain name is the Closest Encloser of "capitalab.co.uk". Opt-Out: True. Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner g9f1kiihm8m9vhjk7lrvetbqceogjiqp.co.uk., Algorithm: 8, 3 Labels, original TTL: 10800 sec, Signature-expiration: 03.03.2023, 03:07:17 +, Signature-Inception: 27.01.2023, 03:04:46 +, KeyTag 33621, Signer-Name: co.uk


	0 DNSKEY RR found




Zone: gslb.capitalab.co.uk
gslb.capitalab.co.uk	0 DS RR in the parent zone found


	0 DNSKEY RR found




Zone: secure.gslb.capitalab.co.uk
secure.gslb.capitalab.co.uk	0 DS RR in the parent zone found

3. Name Servers

Domain	Nameserver	NS-IP
www.secure.capitalab.co.uk	• romkg-espd-iblx-dns6.core.infrastructure
capitalab.co.uk	• ns0.cfinfrastructure.com	148.106.153.10 London/England/United Kingdom (GB) - BGC Partners	•
	• ns1.cfinfrastructure.com	148.106.4.49 New York/United States (US) - Cantor Fitzgerald & Co.	•
	• romkg-espd-iblx-dns6.core.infrastructure
co.uk	• dns1.nic.uk	213.248.216.1 Oxford/England/United Kingdom (GB) - Nominet	•
	•	2a01:618:400::1 Oxford/England/United Kingdom (GB) - Nominet	•
	• dns2.nic.uk	103.49.80.1 Oxford/England/United Kingdom (GB) - NOMINET-NS	•
	•	2401:fd80:400::1 New York/United States (US) - Nominet UK	•
	• dns3.nic.uk	213.248.220.1 London/England/United Kingdom (GB) - Nominet	•
	•	2a01:618:404::1 Oxford/England/United Kingdom (GB) - Nominet	•
	• dns4.nic.uk	43.230.48.1 Oxford/England/United Kingdom (GB) - NOMINET-NS	•
	•	2401:fd80:404::1 Sydney/New South Wales/Australia (AU) - Nominet UK	•
	• nsa.nic.uk / TLD_Host2.Amsterdam_Node1	156.154.100.3 New York/United States (US) - NeuStar, Inc.	•
	•	2001:502:ad09::3 Sterling/Virginia/United States (US) - NeuStar, Inc.	•
	• nsb.nic.uk / TLD_Host1.Frankfurt_Node1	156.154.101.3 New York/United States (US) - NeuStar, Inc.	•
	•	2001:502:2eda::3 Sterling/Virginia/United States (US) - NeuStar, Inc.	•
	• nsc.nic.uk / TLD_Host1.Frankfurt_Node1	156.154.102.3 Ashburn/Virginia/United States (US) - NeuStar, Inc.	•
	•	2610:a1:1009::3 Miami/Florida/United States (US) - NeuStar	•
	• nsd.nic.uk / TLD_Host1.Amsterdam_Node1	156.154.103.3 New York/United States (US) - NeuStar, Inc.	•
	•	2610:a1:1010::3 Chicago/Illinois/United States (US) - NeuStar	•
uk	• dns1.nic.uk		•
	• dns2.nic.uk		•
	• dns3.nic.uk		•
	• dns4.nic.uk		•
	• nsa.nic.uk / TLD_Host1.Frankfurt_Node1		•
	• nsb.nic.uk / TLD_Host1.Amsterdam_Node1		•
	• nsc.nic.uk / TLD_Host1.Frankfurt_Node1		•
	• nsd.nic.uk / TLD_Host2.Amsterdam_Node1		•

gslb.capitalab.co.uk	• ns3.cfinfrastructure.com	148.106.4.120 New York/United States (US) - Cantor Fitzgerald & Co.
	• ns4.cfinfrastructure.com	148.106.153.15 London/England/United Kingdom (GB) - BGC Partners
	• ns5.cfinfrastructure.com	148.106.83.10 Singapore/North West/Singapore (SG) - BGC Partners
capitalab.co.uk	• ns0.cfinfrastructure.com	148.106.153.10 London/England/United Kingdom (GB) - BGC Partners	•
	• ns1.cfinfrastructure.com	148.106.4.49 New York/United States (US) - Cantor Fitzgerald & Co.	•
	• romkg-espd-iblx-dns6.core.infrastructure
co.uk	• dns1.nic.uk	213.248.216.1 Oxford/England/United Kingdom (GB) - Nominet	•
	•	2a01:618:400::1 Oxford/England/United Kingdom (GB) - Nominet	•
	• dns2.nic.uk	103.49.80.1 Oxford/England/United Kingdom (GB) - NOMINET-NS	•
	•	2401:fd80:400::1 New York/United States (US) - Nominet UK	•
	• dns3.nic.uk	213.248.220.1 London/England/United Kingdom (GB) - Nominet	•
	•	2a01:618:404::1 Oxford/England/United Kingdom (GB) - Nominet	•
	• dns4.nic.uk	43.230.48.1 Oxford/England/United Kingdom (GB) - NOMINET-NS	•
	•	2401:fd80:404::1 Sydney/New South Wales/Australia (AU) - Nominet UK	•
	• nsa.nic.uk / TLD_Host1.Amsterdam_Node1	156.154.100.3 New York/United States (US) - NeuStar, Inc.	•
	•	2001:502:ad09::3 Sterling/Virginia/United States (US) - NeuStar, Inc.	•
	• nsb.nic.uk / TLD_Host1.Amsterdam_Node1	156.154.101.3 New York/United States (US) - NeuStar, Inc.	•
	•	2001:502:2eda::3 Sterling/Virginia/United States (US) - NeuStar, Inc.	•
	• nsc.nic.uk / TLD_Host1.Frankfurt_Node1	156.154.102.3 Ashburn/Virginia/United States (US) - NeuStar, Inc.	•
	•	2610:a1:1009::3 Miami/Florida/United States (US) - NeuStar	•
	• nsd.nic.uk / TLD_Host1.Amsterdam_Node1	156.154.103.3 New York/United States (US) - NeuStar, Inc.	•
	•	2610:a1:1010::3 Chicago/Illinois/United States (US) - NeuStar	•
uk	• dns1.nic.uk		•
	• dns2.nic.uk		•
	• dns3.nic.uk		•
	• dns4.nic.uk		•
	• nsa.nic.uk / TLD_Host2.Amsterdam_Node1		•
	• nsb.nic.uk / TLD_Host2.Frankfurt_Node1		•
	• nsc.nic.uk / TLD_Host2.Frankfurt_Node1		•
	• nsd.nic.uk / TLD_Host1.Amsterdam_Node1		•

4. SOA-Entries

Domain:	uk
Zone-Name:	uk
Primary:	dns1.nic.uk
Mail:	hostmaster.nic.uk
Serial:	1406955204
Refresh:	7200
Retry:	900
Expire:	2419200
TTL:	10800
num Entries:	8

Domain:	co.uk
Zone-Name:	co.uk
Primary:	dns1.nic.uk
Mail:	hostmaster.nominet.org.uk
Serial:	1313727125
Refresh:	900
Retry:	300
Expire:	2419200
TTL:	10800
num Entries:	16

Domain:	capitalab.co.uk
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1

Domain:	capitalab.co.uk
Zone-Name:	capitalab.co.uk
Primary:	romkg-espd-iblx-dns6.core.infrastructure
Mail:	webdomainadmin.cantor.com
Serial:	74
Refresh:	10800
Retry:	3600
Expire:	2419200
TTL:	900
num Entries:	2

Domain:	www.secure.capitalab.co.uk
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1


Domain:	uk
Zone-Name:	uk
Primary:	dns1.nic.uk
Mail:	hostmaster.nic.uk
Serial:	1406955205
Refresh:	7200
Retry:	900
Expire:	2419200
TTL:	10800
num Entries:	3

Domain:	uk
Zone-Name:	uk
Primary:	dns1.nic.uk
Mail:	hostmaster.nic.uk
Serial:	1406955206
Refresh:	7200
Retry:	900
Expire:	2419200
TTL:	10800
num Entries:	5

Domain:	co.uk
Zone-Name:	co.uk
Primary:	dns1.nic.uk
Mail:	hostmaster.nominet.org.uk
Serial:	1313727126
Refresh:	900
Retry:	300
Expire:	2419200
TTL:	10800
num Entries:	16

Domain:	capitalab.co.uk
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	1

Domain:	capitalab.co.uk
Zone-Name:	capitalab.co.uk
Primary:	romkg-espd-iblx-dns6.core.infrastructure
Mail:	webdomainadmin.cantor.com
Serial:	74
Refresh:	10800
Retry:	3600
Expire:	2419200
TTL:	900
num Entries:	2

Domain:	gslb.capitalab.co.uk
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:	3

5. Screenshots

Startaddress: https://secure.capitalab.co.uk/, address used: https://secure.capitalab.co.uk/#/login, Screenshot created 2023-01-31 00:45:57 +00:0

Mobil (412px x 732px)

1980 milliseconds

Screenshot mobile - https://secure.capitalab.co.uk/#/login

Mobil + Landscape (732px x 412px)

1990 milliseconds

Screenshot mobile landscape - https://secure.capitalab.co.uk/#/login

Screen (1280px x 1680px)

4099 milliseconds

Screenshot Desktop - https://secure.capitalab.co.uk/#/login

Mobile- and other Chrome-Checks

	width	height
visual Viewport	412	732
content Size	412	732

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks

show header:

Domainname	Http-Status	redirect	Sec.	G
• http://secure.capitalab.co.uk/ 148.106.153.95	302	https://secure.capitalab.co.uk/	0.083	A
Location: https://secure.capitalab.co.uk/
Server: BigIP
Connection: close
Content-Length: 0

• https://secure.capitalab.co.uk/ 148.106.153.95 No Compression used - 627 / 880 - 71.25 % possible Inline-JavaScript (∑/total): 4/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 105.77 % Other inline scripts (∑/total): 0/0	3.580	A
small visible content (num chars: 19) Loading </app-root>
Date: Mon, 30 Jan 2023 23:45:25 GMT
Server: Apache/2.4.6 (CentOS)
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; font-src 'self' http://netdna.bootstrapcdn.com https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline'; connect-src 'self' https://icanhazdadjoke.com/ https://api.leilex.com
Cookie: Secure
Last-Modified: Wed, 25 Jan 2023 09:50:24 GMT
ETag: "370-5f3138fad9800"
Accept-Ranges: bytes
Content-Length: 880
Cache-Control: no-store
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8

• http://secure.capitalab.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 148.106.153.95	302	https://secure.capitalab.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	0.054	A
Visible Content:
Location: https://secure.capitalab.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Server: BigIP
Connection: close
Content-Length: 0

• https://secure.capitalab.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0	404	Html is minified: 100.00 % Other inline scripts (∑/total): 0/0	4.637	A
Not Found
Visible Content: Not Found The requested URL /.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de was not found on this server.
Date: Mon, 30 Jan 2023 23:45:36 GMT
Server: Apache/2.4.6 (CentOS)
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; font-src 'self' http://netdna.bootstrapcdn.com https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline'; connect-src 'self' https://icanhazdadjoke.com/ https://api.leilex.com
Cookie: Secure
Content-Length: 267
Connection: close
Content-Type: text/html; charset=iso-8859-1

• https://148.106.153.95/ 148.106.153.95 No Compression used - 627 / 880 - 71.25 % possible Inline-JavaScript (∑/total): 4/0 Inline-CSS (∑/total): 0/0	200	Html is minified: 105.77 % Other inline scripts (∑/total): 0/0	3.426	N
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 19) Loading </app-root>
Date: Mon, 30 Jan 2023 23:45:30 GMT
Server: Apache/2.4.6 (CentOS)
Strict-Transport-Security: max-age=31536000; includeSubDomains
X-Frame-Options: SAMEORIGIN
Referrer-Policy: no-referrer
X-Xss-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Content-Security-Policy: default-src 'self'; font-src 'self' http://netdna.bootstrapcdn.com https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline'; connect-src 'self' https://icanhazdadjoke.com/ https://api.leilex.com
Cookie: Secure
Last-Modified: Wed, 25 Jan 2023 09:50:24 GMT
ETag: "370-5f3138fad9800"
Accept-Ranges: bytes
Content-Length: 880
Cache-Control: no-store
Pragma: no-cache
Connection: close
Content-Type: text/html; charset=UTF-8

7. Comments

	1. General Results, most used to calculate the result
A	name "secure.capitalab.co.uk" is subdomain, public suffix is ".co.uk", top-level-domain is ".uk", top-level-domain-type is "country-code", Country is United Kingdom of Great Britain and Northern Ireland, tld-manager is "Nominet UK", num .uk-domains preloaded: 4410 (complete: 216710)
A	Good: All ip addresses are public addresses
A	Good: No asked Authoritative Name Server had a timeout
A	DNS: "Name Error" means: No www-dns-entry defined. This isn't a problem
A	Good: destination is https
A	Good - only one version with Http-Status 200
A	Good: one preferred version: non-www is preferred
A	Good: No cookie sent via http.
A	Good: every https has a Strict Transport Security Header
A	Good: HSTS max-age is long enough, 31536000 seconds = 365 days
A	Good: HSTS has includeSubdomains - directive
	HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
A	Good: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
A	http://secure.capitalab.co.uk/ 148.106.153.95	302	https://secure.capitalab.co.uk/	Correct redirect http - https with the same domain name
N	https://148.106.153.95/ 148.106.153.95	200		Error - Certificate isn't trusted, RemoteCertificateNameMismatch
X	Fatal error: Nameserver doesn't support TCP connection: ns3.cfinfrastructure.com / 148.106.4.120: Refused
X	Fatal error: Nameserver doesn't support TCP connection: ns4.cfinfrastructure.com / 148.106.153.15: Refused
X	Fatal error: Nameserver doesn't support TCP connection: ns5.cfinfrastructure.com / 148.106.83.10: Refused
B	No _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.secure.capitalab.co.uk
	2. Header-Checks
A	secure.capitalab.co.uk 148.106.153.95	Content-Security-Policy		Ok: Header without syntax errors found: default-src 'self'; font-src 'self' http://netdna.bootstrapcdn.com https://fonts.gstatic.com data:; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' 'unsafe-inline'; connect-src 'self' https://icanhazdadjoke.com/ https://api.leilex.com
A				Good: default-src directive only with 'none' or 'self', additional sources are blocked.
A				Good: default-src without 'unsafe-inline' or 'unsave-eval'.
E				Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E				Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E				Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
A				Good: No object-src found, but the default-src used as fallback is defined and restricted.
F				Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A				Good: script-src without * and a scheme found.
A				Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
A				Good: frame-src without data: defined or frame-src missing and the default-src used as fallback not allows the data: schema. That blocks hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
A		X-Content-Type-Options		Ok: Header without syntax errors found: nosniff
A		Referrer-Policy		Ok: Header without syntax errors found: no-referrer
A		X-Frame-Options		Ok: Header without syntax errors found: SAMEORIGIN
B				Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A		X-Xss-Protection		Ok: Header without syntax errors found: 1; mode=block
B				Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
F	secure.capitalab.co.uk 148.106.153.95	Permissions-Policy		Critical: Missing Header:
	3. DNS- and NameServer - Checks
A	Info:: 2 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
A	Info:: 2 Queries complete, 2 with IPv6, 0 with IPv4.
A	Good: All DNS Queries done via IPv6.
A	Good: Some ip addresses of name servers found with the minimum of two DNS Queries. One to find the TLD-Zone, one to ask the TLD-Zone.ns0.cfinfrastructure.com (148.106.153.10), ns1.cfinfrastructure.com (148.106.4.49)
A	Good (1 - 3.0):: An average of 1.0 queries per domain name server required to find all ip addresses of all name servers.
A	Info:: 3 different Name Servers found: ns0.cfinfrastructure.com, ns1.cfinfrastructure.com, romkg-espd-iblx-dns6.core.infrastructure, 2 Name Servers included in Delegation: ns0.cfinfrastructure.com, ns1.cfinfrastructure.com, 2 Name Servers included in 2 Zone definitions: ns0.cfinfrastructure.com, ns1.cfinfrastructure.com, 1 Name Servers listed in SOA.Primary: romkg-espd-iblx-dns6.core.infrastructure.
A	Good: Only one SOA.Primary Name Server found.: romkg-espd-iblx-dns6.core.infrastructure.
	Error: SOA.Primary Name Server not included in the delegation set.: romkg-espd-iblx-dns6.core.infrastructure.


A	Info: Ipv4-Subnet-list: 2 Name Servers, 1 different subnets (first Byte): 148., 1 different subnets (first two Bytes): 148.106., 2 different subnets (first three Bytes): 148.106.153., 148.106.4.
A	Good: Name Server IPv4-addresses from different subnet found:
A	Good: Nameserver supports TCP connections: 4 good Nameserver
A	Good: Nameserver supports Echo Capitalization: 4 good Nameserver
A	Good: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 4 good Nameserver
	Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 213.248.216.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 213.248.216.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 2a01:618:400::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns1.nic.uk / 2a01:618:400::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk / 103.49.80.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk / 103.49.80.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk / 2401:fd80:400::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns2.nic.uk / 2401:fd80:400::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk / 213.248.220.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk / 213.248.220.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk / 2a01:618:404::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns3.nic.uk / 2a01:618:404::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk / 43.230.48.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk / 43.230.48.1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk / 2401:fd80:404::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: dns4.nic.uk / 2401:fd80:404::1: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: ok. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns3.cfinfrastructure.com / 148.106.4.120: OP100: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. FLAGS: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns4.cfinfrastructure.com / 148.106.153.15: OP100: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. FLAGS: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: ns5.cfinfrastructure.com / 148.106.83.10: OP100: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. FLAGS: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
	Nameserver doesn't pass all EDNS-Checks: romkg-espd-iblx-dns6.core.infrastructure: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
	Nameserver doesn't pass all EDNS-Checks: romkg-espd-iblx-dns6.core.infrastructure: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
	Nameserver doesn't pass all EDNS-Checks: romkg-espd-iblx-dns6.core.infrastructure: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
A	Good: All SOA have the same Serial Number
	Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.
	4. Content- and Performance-critical Checks
A	Good: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
	https://secure.capitalab.co.uk/ 148.106.153.95	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
	https://148.106.153.95/ 148.106.153.95	200		Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
A	Good: Every https result with status 200 has a minified Html-Content with a quota lower then 110 %.
	https://secure.capitalab.co.uk/ 148.106.153.95	200		Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
	https://148.106.153.95/ 148.106.153.95	200		Warning: Https connections (Standard Port 443) found without support of the http/2 protocol via ALPN. Http/2 is the new Http-Version (old: http 1.1) with some important new features. Update your server software so http/2 is available. Only one TCP-connection per Server (that's a performance boost), Header-Compression and Server Pushs are available. Domain Sharding and Inline-CSS/Javascript shouldn't used with http/2.
	https://secure.capitalab.co.uk/ 148.106.153.95	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
	https://148.106.153.95/ 148.106.153.95	200		Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
	Warning: CSS / JavaScript found without Compression. Compress these ressources, gzip, deflate, br are checked. 5 external CSS / JavaScript files without GZip found - 0 with GZip, 5 complete
	Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 5 external CSS / JavaScript files without Cache-Control-Header, 5 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 10 complete.
A	Good: All checked attribute values are enclosed in quotation marks (" or ').
A	Info: No img element found, no alt attribute checked
A	Good: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
	https://secure.capitalab.co.uk/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de	404	4.637 seconds	Warning: 404 needs more then one second
A	Info: Different Server-Headers found
A	Duration: 149274 milliseconds, 149.274 seconds

8. Connections

Domain

Port

Cert.

Protocol

KeyExchange

Strength

Cipher

Strength

HashAlgorithm

OCSP stapling

Domain/KeyExchange

IP/Strength

Port/Cipher

Cert./Strength

Protocol/HashAlgorithm

OCSP stapling

secure.capitalab.co.uk

148.106.153.95

443

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

not supported

secure.capitalab.co.uk

148.106.153.95

443

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

not supported

no http/2 via ALPN
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

no http/2 via ALPN
No SNI required - domain included in main certificate

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Chain - too much certificates, don't send root certificates	1	CN=*.capitalab.co.uk, O="BGC Partners, Inc.", L=New York, C=US, ST=New York
	2	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
	3	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

secure.capitalab.co.uk

443

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

not supported

secure.capitalab.co.uk

443

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

not supported

no http/2 via ALPN

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

no http/2 via ALPN

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Chain - too much certificates, don't send root certificates	1	CN=*.capitalab.co.uk, O="BGC Partners, Inc.", L=New York, C=US, ST=New York
	2	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
	3	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

148.106.153.95

443

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

not supported

148.106.153.95

443

name does not match

Tls12

ECDH Ephermal

256

Aes256

256

Sha384

not supported

no http/2 via ALPN
Cert sent without SNI

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

no http/2 via ALPN
Cert sent without SNI

Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2

Chain - too much certificates, don't send root certificates	1	CN=*.capitalab.co.uk, O="BGC Partners, Inc.", L=New York, C=US, ST=New York
	2	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US
	3	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

9. Certificates

CN=*.capitalab.co.uk, O="BGC Partners, Inc.", L=New York, S=New York, C=US

14.04.2022

22.04.2023
1187 days expired

*.capitalab.co.uk, capitalab.co.uk - 2 entries

CN=*.capitalab.co.uk, O="BGC Partners, Inc.", L=New York, S=New York, C=US

14.04.2022

22.04.2023
1187 days expired

*.capitalab.co.uk, capitalab.co.uk - 2 entries

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	07EF9ED35DC913D623635F28D112A85A
Thumbprint:	1690BB53FABB4A37D98A198A484390F6B2A5A3CF
SHA256 / Certificate:	GUmMAFjvncyh3GHAsqUYvpr2Wjgpo6Mwp3QCyjoVbeg=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	1b7cd0c7d8b54a70c02a4596fe0428167c91b2c0fffeaa85be116e77e42f0710
SHA256 hex / Subject Public Key Information (SPKI):	1b7cd0c7d8b54a70c02a4596fe0428167c91b2c0fffeaa85be116e77e42f0710 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	yes
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

14.04.2021

14.04.2031
expires in 1727 days

CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US

14.04.2021

14.04.2031
expires in 1727 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA256 With RSA-Encryption
Serial Number:	06D8D904D5584346F68A2FA754227EC4
Thumbprint:	1C58A3A8518E8759BF075B76B750D4F2DF264FCD
SHA256 / Certificate:	UidMV85N7jtJ23p/9wjAQPdxiYs76IclqG+0QwGC/hQ=
SHA256 hex / Cert (DANE * 0 1):	e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):	450799901e36ce751fb0320815621189811c2a5ee71f0345c160ab9cc3096d57
SHA256 hex / Subject Public Key Information (SPKI):	450799901e36ce751fb0320815621189811c2a5ee71f0345c160ab9cc3096d57
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Check unknown. No result 404 / 200
OCSP - Url:	http://ocsp.digicert.com
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:	Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

10.11.2006

10.11.2031
expires in 1937 days

CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US

10.11.2006

10.11.2031
expires in 1937 days

Keyalgorithm	RSA encryption (2048 bit)
Signatur:	SHA-1 with RSA Encryption
Serial Number:	083BE056904246B1A1756AC95991C74A
Thumbprint:	A8985D3A65E5E5C4B2D7D66D40C6DD2FB19C5436
SHA256 / Certificate:	Q0ig6URMeMsmXgWNXolEtNhPlmK9Jtslf4k0pEPHAWE=
SHA256 hex / Cert (DANE * 0 1):	4348a0e9444c78cb265e058d5e8944b4d84f9662bd26db257f8934a443c70161
SHA256 hex / PublicKey (DANE * 1 1):	aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SHA256 hex / Subject Public Key Information (SPKI):	aff988906dde12955d9bebbf928fdcc31cce328d5b9384f21c8941ca26e20391
SPKI checked via https://v1.pwnedkeys.com/spki-hash:	Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:	no
Certificate Transparency:	no
Enhanced Key Usage:

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Small Code Update - wait one minute

11. Html-Content - Entries

Summary

							Subresource Integrity (SRI)
Domainname	HtmlElement	rel/property	∑	∑ size	∑ problems	∑ int.	∑ ext.	∑ Origin poss.	∑ SRI ParseErrors	∑ SRI valid	∑ SRI missing
https://secure.capitalab.co.uk/ 148.106.153.95	link	stylesheet	1	377,422 Bytes	0	1	0	0	0	0
	link	other	1	50,174 Bytes	0	1	0	0	0	0
	meta	other	4		0			0	0	0
	script		4	4,281,937 Bytes	0	4	0	0	0	0
https://148.106.153.95/ 148.106.153.95	link	stylesheet	1		0			0	0	0
	link	other	1		0			0	0	0
	meta	other	4		0			0	0	0
	script		4		0			0	0	0

Details (currently limited to 500 rows - some problems with spam users)

Domainname

Html-Element

name/equiv/ property/rel

href/src/content

HttpStatus

msg

∑

Status

https://secure.capitalab.co.uk/
148.106.153.95

link

icon

favicon.ico

200

image/vnd.microsoft.icon
X-Content-Type-Options nosniff found

Cache-Control: max-age=31536000, public with long duration found.

No Compression - 50174 Bytes

link

stylesheet

styles.f1a4ad47df0b21edc9b3.css

200

text/css
X-Content-Type-Options nosniff found

Cache-Control: no-store - max-age missing.

Compression required: 377422 Bytes

local SRI possible, possible hash-values:

sha256-iA6w1kTj3+6ZFw55EqlTk+/JtYYoYiUalZ2XCELZtxQ=
sha384-3bjB5ufUhCZG2J1ZLy76QEGyl4MOF+FUO9IUCxRzn1qxPx7uzQQSJoLo5Zsd32PJ
sha512-XxejdiNwF6iVpmGdzYBMAcn/PXML91TSG5ieuqdhBZt45Qk6DWl1BUR1sn3jt1TaJd09rZyu4j+mQbnHhAZBXA==

Content loaded via url("...")

check.68a5b65e33ba386f26d8.svg

data:application/font-woff;charset=utf-8;base64,d09GRgABAAAAABX4AAsAAAAAJ8wAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAABHU1VCAAABCAAAAlEAAAReXgFf/09TLzIAAANcAAAAPgAAAFZWTFJaY21hcAAAA5wAAAHtAAAFgFIH7gFnbHlmAAAFjAAADLgAABYYNphscGhlYWQAABJEAAAALwAAADZ2zsSBaGhlYQAAEnQAAAAbAAAAJAfTBC1obXR4AAASkAAAABIAAAEUp/gAAGxvY2EAABKkAAAAZAAAAIwBFQakbWF4cAAAEwgAAAAfAAAAIAFbAHNuYW1lAAATKAAAATUAAAJG0OP3eXBvc3QAABRgAAABlwAAAlqez14KeJx9k09yElEQxr9hCBKISYwxloga/0bjOAwM/yQQCFKWZWXhwoULN3GhpZVylRO49gCWB/AUnsBy6coDeADLA/jrZpCYRXjFzJvur7/+ul8/BZJKSrSr3OTx/nMtHx4cvVdFeU1/5j++Dw7fvjlQcfaFL+/vooLwj5Z1Qy90pG+BgtfB51whzIW74X74IfwU/lAIalMx6LIesGLVeEZkr6uhVDkVsMXsm2qBDnm23bqmC1pwz1AjrZMzJmbkjNt6qptahWfgPH31QCUs4+zzHLNuaeUURKrb8NdR08VqrFUyrGpRe2jso6NDdAvvCr4dMkfEDPANdA68ofLexyd6iaI1r80i6xku4R/TZfuO/KvMmqHa8DfgN74tss7sDTLViLgHex3Uw6yH27pGdAOePmwdj256dBlkDYWJrrKzympUtkT9PT3TK8+6m8X0vYvTmrdQP7cPnC+l2uPWDlxjsHfRMLfaidwhV6QJ/pI2eL/TR33RV33XT/3Sb53B2sVrFfTg3jm1M0X6dxI9xNv+Z7VKC5zPSdT/iEXqbnhvYnyjrIOWrYxO603CPsKaOL6ETsMPUZNyGnlyRJ63hnWB1eU7Bn02m8YWa8n7PGIGbAIqdKfB05im85bS4Usw2W6qa8O71YLnop+W9dRu0rJ/2czbKVfAXOYdUVnd+/MI7xUsxjS3VD0qRbVx3MefonaezVRVUdX02bXJmvgtGJJpkzqmSmrcXLsBE5+q6yioZzdyndMw9Z3spM47LvaoAM1RdpMT75lN8gBtNhXjv2nbY10AAAB4nGNgZMpnnMDAysDAVMW0h4GBoQdCMz5gMGRkAooysDIzYAUBaa4pDA4Muh8NmF8AuVFgEqgRRAAAy9AKRgAAeJy102dSWzEUhuHXhW56TaN3Y2wwvRkb/rAM0hlSGNKZrDI70QZCvnPPyQLITDTz+Ls6o6srjSygDSjImhQhXySHtd+q5rJ6ge6sXuSX+iU6yeu5whU33KXa/b2qFS655jblst7fltPoEk9ZZEe9I811oKdjqrT0xh4b7LPLCXU2OWWdbWo0OGeLQ5qc6f28vl7UGtvp0He7tJIezdhLH/0MMMgQw4wwyhjjTPCYJ/raM42ZZIppZpjVuDnmWdAalvTcwzIr+l1Vr6wFtvOwdvTA8dbWDnaOq63Knna7e1Lf1Ea3a43zrcPm2T9M9h9ayX4KP6N3gZ2ms91eBvt/PA8H8iLYyb4Mx/IqVOV1aMmbYPO+DXtyFTbkOuzLu7Ar78OJfAh1+Rg25Sacym1Yl09hWz6HmnwJDfkazuVb2JLv4VB+hKbcBR1gyjm7KynvsCw4u1up6Ox+pTZn9y61Oyw7HJadDssuh2W3s/uYehyWJWcnmXodln0Oy36H5YDDctBhOeSwHHZYjjgsRx2WYw7LcYflhMPykdPdJAXdUlLQfSUF3VxSyPY16bCcclhOOyxnHJazDss5l+133mG1BYfVFh1WW3JYbdlhtRWXzbPqsrWVHTZ2zWFjKy4bs+6w96oum7PmKP8BU32drwAAAHic7RhpcBvVeb+3lmRZsm5pJdk6V4ety9YdS/Zu7MTGdu7DCRlC0jQHDTFH0tAwIYJCaCAhDDSZcEwzFDoDGZgpw7TTDNMmpUMZMFNi0hQ6JTD9AbQNaRtCyXQGFy393molxybl+l1pd9/33vve9773ve96j2EZ/LHPss8yHJNm1jMMeAlnYQ1E0xROkSixCqQYUgXVRlDbbZwXuKawAEULm4JohA+qVXyetzs45a/WyH97Np+1B6K5YqGIuIViIRKl/3yANXcMxqCpCWKDHdJ70nvTNfBIfwvPAWCbSI4HL3j5HNHpEF65de5/4CFxCqw6v9fg0JlanEZ/xMBNidJ+aNLYDf0Gu1rt9XVbPAC72KevRBo8cm2gEF77+JIfXF8nrUzDslMia7ToHQ691dI+4Gh1egycSazouuwhm75bbzWa250hm5+fR0UFsrweYR9hfAxj5TTRIqcJmOUiag7IRTFglgvOPDGcOHw4MQytM0vpY6X+5pXbG/2tynzkZdbGNGNFmYeHN/clz5xJ7hPI0X2JM2cS+6Q5lC2Zt23sNsbGdDJ5xA/S7bDRrcnQfcjRfdBkaN1Ge+R9KdAeK9JFykg/WoRLW1aPZbLZzNjq1+rAlrGRoVg8HhsaeYYCEENo7MnkU08ln5S/7LYZ6DIgzESXIenj+gj8Mg2enawTIQ2jQ5lmzTx9i1k7f7pSOb9z5we33EK2SteR4erzU1PTYz5gzzFWJsogmU4IpiBvzgmQDWS8YDfbDMAGggYKeWmbQHtToAGUH7C56vfTK7q7V6RJreyqVjwZDz5kr1x2SOteyz4KN01jpOUR7E88aU91D37wIXfj5yPEzDwKN8/mKf7VeWIDaBdfxlF/9SXS++XsSKlhWV1m8MJAfXo+0GBJdSVOcpcRp5PdNYsL9tzlvbQcms2BIodb2U2MCjXWyTBa0HBaYIs+qPkGmyNTyFNFJH+X1pc2SlUQJiZeeU6ncxkd6cG0w+iCF+GJMnZIv4W+iQmhtdXbFnEF0+mgK9zupeSb5DmSrEHRGSPDhHlz1qq8QN/jovgrQTghitVTgvA2yVQnp9+GHZPDrAr5RB6p3pND0sXE++8n4FKtVNayCO3JyvBMN52lLsByQ6gsekEEHNhSwK4Izi7vuT2A7eSnl+Ij8dhIghbxkcinkUJB/khNc2MjcTgiXRfOV7APsjJCXDqFH5IpRKSXKCr0RgqSnljiw3ExH57m+2XyMrUVmGG1l5kj8V9uZjN9iOKbssSq+BBYWPMhMDFbLrh1Gi2QQygM6SKYyJ+odExgQhSVLJtjbAkl08MsZMaYdYhfKGYxfNSiAOXMANGa7y/KXgbZ5AxgBDlY0KpaFmiuCAKIkCI4ppClgrVpwqgpqJwZEVBbUsAHNcCv32pZ+/SdoVazpc3tj/QlRhY8s2zl/GVpk1Wr05lMCbE3IXQv5CCybMmGzWsdtvbSSO+mcgLu6V7AgXfnkR8v4Esj5c2luDTpjl8V74om3LHhWFeUfJRm2cX3Xt0e9MbaAy4kHLbY7N3lVW0pm9PutffF+xIP+67OkzVCn83uVbe0x8ubyiMl6ff+NXkyfGMfGwxiS+9I6WxHF1J0J6JdcSymdfUYyzNtTIopo6TkCKuISH25eDBWcgZSl05NIhqUBioZSgmViqOSQLv1AIqGWi1UG/JYcMP1N+1YszSjyEL8zTgsvP9GnyKLZXfyVADDpQ2l0oadG3p6NvwxNrxyOCZ/WL6x+MUh3mCcW1qtLHxsU5NI+sYHawv3uG9ZQlfr60ESNTp/gBglEiO1ouF7kmwS8wn0gqCs0wOaYkFZbKQPAiqbkjPYi/maahTybBI6nQNFZ/MJAAIaZ2HA1Um2V081yxCqSK2XnIt2e8rdbq3+uwfHdpR0za50n7c7NCiate50n6c7tLdrRUe3p5R2a80KP2RK1mdtXaNVZt5MPlG0WvqW0FBsh6SHS4y+tgZyoeFfrLiaNoz4vOzbuximyOez3GVv+EvqU7IvmvZIV65MVWo/USkFpUR2mmfkaXm0uT6mnxlkRr5uxmZFblQYc8Kzym+Ymx2tVGCX9Ar0SPsbkB6hS9IoHP9m6Vj1n4IgiMrbiGfTe1jz1tTLk7jisf8sCHWvXf037mBdD3ewbSg5M913dMh061muGMXVFqMkKsJ+aZd4QDoLkcnJdAXelbyVNHlQOCEcgAhEpLOTGdyBTJ3WdowDMWa1rNMoVg0KGN0blWpBhHwkmkY9NwCqtBdzXhHVFVXdGpSxsJF6u5TSQUfbsAOb07Ldy1R44sRYGWhraWkf96zoCOU0aofLomctYVO70WDi43t6Yr7xpNPDxTbFFnm2dXHtXNzbDJqwy66z0CHxInA2C+hYC29ot7Xo5qUinWRQq1e1Le+MeLZ5rK2tfRF+yG1h+bAlZI9u7E6H4m2c0b8tdU855QOtH6neXe72e7U6lW9TkkOqVoNxScqTt8ljAtbQtcn0Eqvp/zK5kkxqNnofe9/n/AZDrYzGaRW+ssXhW1TqGoTRaoWbJxIT8GJiIgGuqanq5NTUAoTJOmxF77FuyocAPokMWsU6LPGZeHpq2j6qpMqoGTwyWH3UQDThLsDsoPgP9q2hHct2wO+UcuIsS8vHaoWS4yTJ6/X8G9A66n82WX0APbDygktEexDrex/EmCbPp0ykTAuvN8kT/bA237/easJiO7zwFju0ffkOZewzmLvV7LKejaA51w43UDqYevts6mA//KIfobe7DsLSvfFTp+J74WR1Ek7WYJyZ0rmL3cU4mAQzh5kr5yAMUFXjHLLaoa5R7SoKhKNVjVrRQwxEsm4hGm2NRrpACw45BnWBwwcgjyoUOTlyccUITF27atkNLfpYZNHI81dfO69vLiFh/4339S8dnn+NVhuOLF98cvFYjG9uXjM0uvqCX61e0jcwmktHYbf0YXa8M2Y0W08O9HRI+0I6p7tQWq4Vchm7w/KZj/0eyaWPrdt8zdI5+bDdIfQ8tnL1aP/GgkgSsfuXji1akoqrYslVI2PLHownX+0bGaoEQxqV2wG3SQ+b2sKRXKn8GvE6pH3iof55nUmVwHZ29Arlz1qUfR1nb0Pt62B6UTLy4U8+ENr5zyf/vCbjsKmDkVwBAsEINhXKYA/ksxkHIqrJdr3B5Vvlcxn0lWBPEB+4VCunzC5X0OUCnaR3h0JuEXYJ7nCY9VhsToPFYnDaLIgkjSqDjuPH7PQ78ak+HnbBcXeoUgm5pVFXuOGz9yDPQYxuDNSzxgLuAS1EoNuloXkD9TRoTzS98IEmgquC2v4VOUdWTi1h2SEgTSqtp9RV3Nhs1LssnA289rmD38HsgrXZk9xDGDj+YtXqm01HCx0ZM7ibOQLN5Ehzi85osJjegNsPYS5l1HfotLoNbq+zzWoxSO+2j+k3q1WufLyb0yEF8oDJZDU4jhpYtk36q9oWdeYsD2Gk0zRb3qDLabksbvtxJ/qZIWYBs5K5htnAbPkfsTtgdsgXJyoavn2Y5tUsw46JoIavXTk4ZMGEbVw2H1VrsvliDFAiWUw87Fmq3WE1r7FnixHenv2iwA67q698eAGjrrbaDBiD/fDLlsTYyoQ2NtSxU5sYG0u0zA1l3F6ovgp7bgOoiLkFmAnsFuHkboqP4uiJ3fHCnKvu+MJQ/2n1VbUW0S+cMptwMrgNjDJx7c0dV8WJNrES5wGVxuqIeYfm3P7r0fwdnxTC68U9e4I0IQDYU4HbG/pxDs+19H5Dud0wUXXwU3GYZt1uBGmdXkIV4NK9O7fPmz9/3vadYKpD9+7asrHU21vauOUCAuUyAuw52iFdnIkszMChQG/9vF/nRfha3My6e5FxviqL8NwVblW+Mt/S6NjMkZTY7FyJ5lfo/DEwcZg0oWePstulswdEaRfsFw+kK5IX3q2kJycx4zp7gGZLB2iaNDmp0BnHnKAVvTID5gDm2TYHOhk8Gavqnp51Vp9fkQ6S4WBa+vl46fTp0vhKJPUOhKR36CkfQu3j5dOny+NwuHHfpiKH5XM6KXJFtkm6KKd6ZAtN3xFgZuMBPRNjvpqopfV31coGzov1Mz+HONKhn+HRd4AcQSB5Dww0aCWJje6yFWVwQg6AVqFx93QDO477Hsf8m7EGMdHG0wxGHXpYRS+LscWK+Y2XoMOKaqbzoSjQzIeTTZteltZgGqT4Y4SECPkRzDlPVDIkTZwnphTncSz/9saQkBT4rTFnQNNsdwtJeKJzsQebzElX1yqL2exD2OdXO9o2zmG34WAVOSpNfIAEQU2OQvE8kW7FVAbxfTIhfZsp1R4abUNCo36ZjoNVZRIda5CO6Fu1tiNdxhX+FyXYf3Z4nGNgZGBgAOJNb47Mjue3+crAzfwCKBDF+XhfA4JmYGB+CRJn4GBgAvEAeqIMgAB4nGNgZGBgfsHAACH//2d+ycDIgApcAXBnBQgAeJxjYGBgYH4xdDA9AADYnCd6AAB4nGNgAIIZDBcYnjE6MEYxLmF8xaTBFMVUw9THdIPpEzMHswzzBhYNlgKWLpYrrEGsOayT2GTYlrE9Ymdgl2K3YI9hf8PhxrGBM4xzDhcTlxpXAFcKVxlXF9cMbh7SIQDoHxaseJxjYGRgYHBlSGfgYQABJiDmAkIGhv9gPgMAGrQBzwB4nHWPP07DMBjFX2haRIsQEhJiwxMLUvpnYOjYodk7dGBzGydtlcSR41bqxjE4Acdg5AicgkPwEr6hQqotOT///N4nBcAtvhCgWQGu27NZF7jk7Y87pDvhkPwo3MUAz8I9+hfhPu1MeMBmwQlBeEXzgDfhC9zgXbhD/yEckj+Fu7jHt3CP/ke4j2UQCg/wFLzqLHbbZKbzjS4WJtvn2p2qU14aV29tqcbR6FTHpjROe5Oo1VHVh2zifapSZws1t6U3eW5V5ezOrH208b6aDoep+GhtC2hkiOGwRcI/18ix4VlgAcOXPe+ar+dS5/ySbYea3qKEwhgRRmfTMdNl29Dw/CZsrHDkWePAzoTWI+U9ZcayoTBvJzfpnNvSVO3bjmZNH3F206owxZA7/ZePmOKkX1qXaMkAAAB4nG2R6W7bMBCE/cWSrThp47ptet/3obbpfadX+h40RclEJFIgKR95+hJ1ESBA9w9nBsvZWbK30VvXqPf/OmCDPgkpA4ZkbDJii21OcZodxpxhwlnOcZ5dLnCRS1zmCle5xnVucJNb3OYOd7nHfR7wkEc85glPyXnGc16wx0te8Zo3vOUd7/nARz7xmS98ZZ9vfOcHP/nFAb97W6KqnKpE0NYMhHN24fvCy4EURqo6lTPhwljOlDyc2mX+F6hi91jQplBBuUYbEdTkWO7Mv85taWvr8lZH4oaRdI3xI2lNcEIGVSTStqtUOut9UigvM7VsRfQsNtVK5b4WftaPaFDqOo5JS+18SCqn27RytmuT2BCSWpVhUGsT52XrI98b1lYU2lRZI5a60UcqaZTpshh0zYw1asvYkIu6tgtVpG10Uv1Wm7TVcxvGLl63+bQLwZrcluXOScGkTlezkHgxVyPfRJe8sAuTrWFMFuLKk+CUOvlGWWfWERFUOBQBjcWwwCOpmXHIlGX8zYKGjpYVJUfMe70/6zKeWwA=

data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAoCAMAAADJ7yrpAAAAKlBMVEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKE86IAAAADXRSTlMABBEmRGprlJW72e77tTkTKwAAAFJJREFUeAHtzjkSgCAQRNFmQYUZ7n9dKUvru0TmvPAn3br0QfgdZ5xx6x+rQn23GqTYnq1FDcnuzZIO2WmedVqIRVxgGKEyjNgYRjKGkZ1hFIZ3I70LyM0VtU8AAAAASUVORK5CYII=	1

data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAoCAMAAADJ7yrpAAAAKlBMVEUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKE86IAAAADXRSTlMABBEmRGprlJW72e77tTkTKwAAAFNJREFUeAHtzjkSgCAUBNHPgsoy97+ulGXRqJE5L+xkxoYt2UdsLb5bqFINz+aLuuLn5rIu2RkO3fZpWENimNgiw6iBYRTPMLJjGFxQZ1hxxb/xBI1qC8k39CdKAAAAAElFTkSuQmCC	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' width='8' height='8' viewBox='0 0 8 8'%3e%3cpath d='M2.75 0l-1.5 1.5L3.75 4l-2.5 2.5L2.75 8l4-4-4-4z'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' width='8' height='8' viewBox='0 0 8 8'%3e%3cpath d='M5.25 0l-4 4 4 4 1.5-1.5L4.25 4l2.5-2.5L5.25 0z'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' fill='none' stroke='%23d10426' viewBox='0 0 12 12'%3e%3ccircle cx='6' cy='6' r='4.5'/%3e%3cpath stroke-linejoin='round' d='M5.8 3.6h.4L6 6.5z'/%3e%3ccircle cx='6' cy='8.2' r='.6' fill='%23d10426' stroke='none'/%3e%3c/svg%3e	2

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='12' height='12' viewBox='-4 -4 8 8'%3e%3ccircle r='3' fill='%23fff'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='30' height='30' viewBox='0 0 30 30'%3e%3cpath stroke='rgba%280, 0, 0, 0.5%29' stroke-linecap='round' stroke-miterlimit='10' stroke-width='2' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='30' height='30' viewBox='0 0 30 30'%3e%3cpath stroke='rgba%28255, 255, 255, 0.5%29' stroke-linecap='round' stroke-miterlimit='10' stroke-width='2' d='M4 7h22M4 15h22M4 23h22'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='4' height='4' viewBox='0 0 4 4'%3e%3cpath stroke='%23fff' d='M0 2h4'/%3e%3c/svg%3e	1

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='8' height='8' viewBox='0 0 8 8'%3e%3cpath fill='%235cb85c' d='M2.3 6.73L.6 4.53c-.4-1.04.46-1.4 1.1-.8l1.1 1.4 3.4-3.8c.6-.63 1.6-.27 1.2.7l-4 4.6c-.43.5-.8.4-1.1.1z'/%3e%3c/svg%3e	2

data:image/svg+xml,%3csvg xmlns='http://www.w3.org/2000/svg' width='8' height='8' viewBox='0 0 8 8'%3e%3cpath fill='%23fff' d='M6.564.75l-3.59 3.612-1.538-1.55L0 4.26l2.974 2.99L8 2.193z'/%3e%3c/svg%3e	1

data:image/svg+xml;base64,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	1

data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 4 5'%3E%3Cpath fill='%23333' d='M2 0L0 2h4zm0 5L0 3h4z'/%3E%3C/svg%3E	3

https://fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,600italic,400,300,600

meta

charset

utf-8

meta

Content-Language

meta

x-ua-compatible

IE=edge

meta

viewport

width=device-width, initial-scale=1

script

src

main.1a1a84c40b7d52a4208e.js

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: no-store - max-age missing.

Compression required: 4102797 Bytes

local SRI possible, possible hash-values:

sha256-qSdNW6m2da26pPXY0bhHPVFBlHszQR2Wp7yotC0VUpc=
sha384-fcnnIgbfY3b7BtQhgHtWr86tENADDc4/fafecyOUlJ3MOTNOVxzriOowd0rKEMuL
sha512-dTnoLzRjuRMLVlPAceetMofYDHpoe5Kq9XyP4O2jHjArNXuHdM10NR8GMGNcQ6Cm1DryM5QbXkAG1saX402paQ==

script

src

polyfills.59d676746c90f6da8426.js

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: no-store - max-age missing.

Compression required: 45829 Bytes

local SRI possible, possible hash-values:

sha256-9Tw2ZnN61F3F1gmbS8dZ67N10zTPiFZKttgOeiCh7MQ=
sha384-6sw4NWlUa+h+AoFdaU4AkVH/VEQYz51EetFdFz32zX5EhhJJqZ4BzVI+OjFg/sYJ
sha512-N5y9J+ryH5lIZ+9/QUC/Ad27bfm1ibxihW/dpH5+SHhJAONYe2sqMUOQNn2VEm4hbJY4LRDOpZSARPQBrhXpBQ==

script

src

polyfills-es5.7adfed6b126b235b30f6.js

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: no-store - max-age missing.

Compression required: 130685 Bytes

local SRI possible, possible hash-values:

sha256-fGYktcFBbmKq5k3oOJAujZh8XnXL03wWXbiHPZGEjhQ=
sha384-F86wMePZOfAoOFIrqmBawtYHee1XV4E847QUZm7zi+JpxUFE7nyZfTkb4OEYcfRl
sha512-AzLlgziUb3vSJOXwd0/ZyQ2may/ndZNqClYSN39xdt2k2g3XbWEP8zAIl+Bma/wvbigDwEYfoVY5euztcMvb9A==

script

src

runtime.a17e1e6110c53037a4da.js

200

Missing defer / async attribute.

application/javascript
X-Content-Type-Options nosniff found

Cache-Control: no-store - max-age missing.

Compression required: 2626 Bytes

local SRI possible, possible hash-values:

sha256-+EGb38fRIjbPwqXQLM9ko3Z7VeANzKEYFpfeQiPRxMQ=
sha384-s5xjV24cmIv+/sBdphGsKnzVJcuIcg+TO6o3E5bYKsVdXfZkNTjM0NnCChS2G5wW
sha512-yVdQe0FRWVObH/v/hpCZufcjRjvXMGJ65W5ujsMoflY3aj+AN2WpwzDtOeIOj+z5wcWJ6E6xJBw9N8dw21plQg==

https://148.106.153.95/
148.106.153.95

link

icon

favicon.ico

link

stylesheet

styles.f1a4ad47df0b21edc9b3.css

meta

charset

utf-8

meta

Content-Language

meta

x-ua-compatible

IE=edge

meta

viewport

width=device-width, initial-scale=1

script

src

main.1a1a84c40b7d52a4208e.js

Missing defer / async attribute.

script

src

polyfills.59d676746c90f6da8426.js

Missing defer / async attribute.

script

src

polyfills-es5.7adfed6b126b235b30f6.js

Missing defer / async attribute.

script

src

runtime.a17e1e6110c53037a4da.js

Missing defer / async attribute.

12. Html-Parsing via https://validator.w3.org/nu/

Small Code update, wait one minute

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns0.cfinfrastructure.com, ns1.cfinfrastructure.com

QNr.	Domain	Type	NS used
1	com	NS	a.root-servers.net (2001:503:ba3e::2:30)
	Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2	ns0.cfinfrastructure.com: 148.106.153.10	NS	a.gtld-servers.net (2001:503:a83e::2:30)
	Answer: ns1.cfinfrastructure.com 148.106.4.49

14. CAA - Entries

Domainname	flag	Value	∑ Queries
secure.capitalab.co.uk			1
gslb.capitalab.co.uk	-5	Refused - The name server refuses to perform the specified operation for policy reasons	1
capitalab.co.uk	0	no CAA entry found	1
	0	no CAA entry found	1
co.uk	0	no CAA entry found	1
	0	no CAA entry found	1
uk	0	no CAA entry found	1
	0	no CAA entry found	1

15. TXT - Entries

Domainname	TXT Entry	Status	∑ Queries
capitalab.co.uk	bv6wvdc85r1rzpqb1b8fbvg09p1z3v7t	ok	1
capitalab.co.uk	docusign=31d77ead-5678-4410-9470-80056b221fd4	ok	1
capitalab.co.uk	knowbe4-site-verification=f1355ab3798cabe7f4113e25e7170aed	ok	1
capitalab.co.uk	MS=ms76753645	ok	1
capitalab.co.uk	v=spf1 mx a include:spf-0017d602.pphosted.com include:_spf.bluematrix.com include:clientspf.backstopsolutions.com include:spf.protection.outlook.com ~all	ok	1
capitalab.co.uk	ZOOM_verify_vyWIDxDOJDd6L3T0csu3IX	ok	1
secure.capitalab.co.uk			1
_acme-challenge.secure.capitalab.co.uk			1
_acme-challenge.secure.capitalab.co.uk.capitalab.co.uk		Name Error - The domain name does not exist	1
_acme-challenge.secure.capitalab.co.uk.secure.capitalab.co.uk		Name Error - The domain name does not exist	1

16. DomainService - Entries

No DomainServiceEntries entries found

17. Cipher Suites

No results

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

Permalink: https://check-your-website.server-daten.de/?i=2a640dbb-a851-4f33-93e7-bfeae8a8b76f

Last Result: https://check-your-website.server-daten.de/?q=secure.capitalab.co.uk - 2023-01-31 00:43:38

Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=secure.capitalab.co.uk" target="_blank">Check this Site: secure.capitalab.co.uk</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

QR-Code of this page - https://check-your-website.server-daten.de/?d=secure.capitalab.co.uk

Check DNS, Urls + Redirects, Certificates and Content of your Website

Older results

1. IP-Addresses

2. DNSSEC

3. Name Servers

4. SOA-Entries

5. Screenshots

Mobile- and other Chrome-Checks

6. Url-Checks

7. Comments

1. General Results, most used to calculate the result

2. Header-Checks

3. DNS- and NameServer - Checks

4. Content- and Performance-critical Checks

8. Connections

9. Certificates

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

11. Html-Content - Entries

Summary

Details (currently limited to 500 rows - some problems with spam users)

12. Html-Parsing via https://validator.w3.org/nu/

13. Nameserver - IP-Adresses

14. CAA - Entries

15. TXT - Entries

16. DomainService - Entries

17. Cipher Suites

18. Portchecks