Check DNS, Urls + Redirects, Certificates and Content of your Website




X

DNS-problem - authoritative Nameserver refused, not defined or timeout

Checked:
02.04.2024 18:44:19


Older results

No older results found


1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
snapbox.co.za
A
156.38.171.136
Pretoria/Gauteng/South Africa (ZA) - Xneelo (Pty) Ltd
Hostname: xavier.hkdns.host
yes
2
0

AAAA

yes


www.snapbox.co.za
CNAME
snapbox.co.za
yes
1
0

A
156.38.171.136
Pretoria/Gauteng/South Africa (ZA) - Xneelo (Pty) Ltd
Hostname: xavier.hkdns.host
yes


*.snapbox.co.za
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes



2. DNSSEC

Zone (*)DNSSEC - Informations

Zone: (root)
(root)
1 DS RR published



DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=



Status: Valid because published



3 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 5613, Flags 256



Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 30903, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.04.2024, 00:00:00 +, Signature-Inception: 01.04.2024, 00:00:00 +, KeyTag 20326, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: za
za
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 45749, DigestType 2 and Digest PisLfmBjyhFAD6S1TYpTCIgjTNDrO1+/ggwHUHhNqE4=



1 RRSIG RR to validate DS RR found



RRSIG-Owner za., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 15.04.2024, 05:00:00 +, Signature-Inception: 02.04.2024, 04:00:00 +, KeyTag 5613, Signer-Name: (root)



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 5613 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 45749, Flags 257 (SEP = Secure Entry Point)



Public Key with Algorithm 8, KeyTag 52710, Flags 256



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner za., Algorithm: 8, 1 Labels, original TTL: 604800 sec, Signature-expiration: 16.04.2024, 16:01:28 +, Signature-Inception: 02.04.2024, 14:31:28 +, KeyTag 45749, Signer-Name: za



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 45749 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 45749, DigestType 2 and Digest "PisLfmBjyhFAD6S1TYpTCIgjTNDrO1+/ggwHUHhNqE4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: co.za
co.za
1 DS RR in the parent zone found



DS with Algorithm 8, KeyTag 28207, DigestType 2 and Digest +ljK+/7rW8gJZElsLZ+x+i1zzyr/11wVAmk9RYNY9s8=



1 RRSIG RR to validate DS RR found



RRSIG-Owner co.za., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 16.04.2024, 16:01:28 +, Signature-Inception: 02.04.2024, 14:31:28 +, KeyTag 52710, Signer-Name: za



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 52710 used to validate the DS RRSet in the parent zone



2 DNSKEY RR found



Public Key with Algorithm 8, KeyTag 2523, Flags 256



Public Key with Algorithm 8, KeyTag 28207, Flags 257 (SEP = Secure Entry Point)



1 RRSIG RR to validate DNSKEY RR found



RRSIG-Owner co.za., Algorithm: 8, 2 Labels, original TTL: 604800 sec, Signature-expiration: 16.04.2024, 16:33:45 +, Signature-Inception: 02.04.2024, 15:03:45 +, KeyTag 28207, Signer-Name: co.za



Status: Good - Algorithmus 8 and DNSKEY with KeyTag 28207 used to validate the DNSKEY RRSet



Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 28207, DigestType 2 and Digest "+ljK+/7rW8gJZElsLZ+x+i1zzyr/11wVAmk9RYNY9s8=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Zone: snapbox.co.za
snapbox.co.za
0 DS RR in the parent zone found



DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "121ptqqbf7ese07p5cm1rtcfams10016" between the hashed NSEC3-owner "120fkt8s36q8od7mnboq2m31vnhpggoo" and the hashed NextOwner "12g971t49igf7fcfevsupmgf6o9i48e0". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner 120fkt8s36q8od7mnboq2m31vnhpggoo.co.za., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 16.04.2024, 16:33:45 +, Signature-Inception: 02.04.2024, 15:03:45 +, KeyTag 2523, Signer-Name: co.za



DS-Query in the parent zone sends valid NSEC3 RR with the Hash "j7pm24bg7r40ec5gioec8gc47u4ds78l" as Owner. That's the Hash of "co.za" with the NextHashedOwnerName "j8cu2l5jtg4b015m24ple29q9cms530d". So that domain name is the Closest Encloser of "snapbox.co.za". Opt-Out: True.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner j7pm24bg7r40ec5gioec8gc47u4ds78l.co.za., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 16.04.2024, 16:33:45 +, Signature-Inception: 02.04.2024, 15:03:45 +, KeyTag 2523, Signer-Name: co.za



0 DNSKEY RR found




Zone: www.snapbox.co.za
www.snapbox.co.za
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
snapbox.co.za
  ns01.hkdns.host
156.38.224.10
Pretoria/Gauteng/South Africa (ZA) - Xneelo (Pty) Ltd


  ns02.hkdns.host
156.38.224.11
Pretoria/Gauteng/South Africa (ZA) - Xneelo (Pty) Ltd

co.za
  coza1.dnsnode.net / s2.amx
194.146.106.74
Stockholm/Stockholm County/Sweden (SE) - Netnod AB


 
2001:67c:1010:18::53
Stockholm/Stockholm County/Sweden (SE) - Netnod AB


  ns.coza.net.za
206.223.136.200
Midrand/Gauteng/South Africa (ZA) - ZA CENTRAL REGISTRY NPC


 
2001:43f8:30::200
Midrand/Gauteng/South Africa (ZA) - ZA CENTRAL REGISTRY NPC


  ns0.is.co.za
196.4.160.17
Cape Town/Western Cape/South Africa (ZA) - Dimension Data


  ns2us.dns.business
147.135.106.236
St Louis/Missouri/United States (US) - OVH US LLC


 
2604:2dc0:200:2eb::2
Reston/Virginia/United States (US) - OVH SAS

za
  nsza.is.co.za


  za1.dnsnode.net / s2.amx


  za-ns.anycast.pch.net / 2.ams.pch


  za-ns.dns.net.za


4. SOA-Entries


Domain:za
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:za
Zone-Name:za
Primary:za-ns.dns.net.za
Mail:dnsadmin.zadna.org.za
Serial:2023094277
Refresh:21600
Retry:3600
Expire:2592000
TTL:86400
num Entries:3


Domain:co.za
Zone-Name:co.za
Primary:ns.coza.net.za
Mail:this-is-probably-not-the-email-address-you-are-looking-for.co.za
Serial:2023110783
Refresh:28800
Retry:7200
Expire:2592000
TTL:3600
num Entries:7


Domain:snapbox.co.za
Zone-Name:snapbox.co.za
Primary:ns01.hkdns.host
Mail:cpanel.hostking.co.za
Serial:2023120102
Refresh:3600
Retry:3600
Expire:1209600
TTL:86400
num Entries:2


5. Screenshots

Startaddress: https://snapbox.co.za/, address used: https://snapbox.co.za/, Screenshot created 2024-04-02 19:13:01 +00:0 url is insecure, certificate invalid

Mobil (412px x 732px)

1754 milliseconds

Screenshot mobile - https://snapbox.co.za/
Mobil + Landscape (732px x 412px)

1857 milliseconds

Screenshot mobile landscape - https://snapbox.co.za/
Screen (1280px x 1680px)

4711 milliseconds

Screenshot Desktop - https://snapbox.co.za/

Mobile- and other Chrome-Checks

widthheight
visual Viewport396732
content Size39613524

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://www.snapbox.co.za/
156.38.171.136
301
http://snapbox.co.za/
0.923
D
Connection: close
X-Powered-By: PHP/8.1.26
x-redirect-by: WordPress
Location: http://snapbox.co.za/
Date: Tue, 02 Apr 2024 16:40:37 GMT
Server: LiteSpeed
Vary: User-Agent
Content-Type: text/html; charset=UTF-8
Content-Length: 0

• http://snapbox.co.za/
156.38.171.136 GZip used - 26141 / 200648 - 86.97 %
200

Html is minified: 344.66 %
1.750
H
Connection: close
X-Powered-By: PHP/8.1.26
Link: <http://snapbox.co.za/wp-json/>; rel="https://api.w.org/", <http://snapbox.co.za/wp-json/wp/v2/pages/26>; rel="alternate"; type="application/json", <http://snapbox.co.za/>; rel=shortlink
Transfer-Encoding: chunked
Vary: Accept-Encoding, User-Agent
Date: Tue, 02 Apr 2024 16:40:35 GMT
Server: LiteSpeed
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip

• https://www.snapbox.co.za/
156.38.171.136
301
https://snapbox.co.za/
6.560
N
Certificate error: RemoteCertificateChainErrors
Connection: close
X-Powered-By: PHP/8.1.26
x-redirect-by: WordPress
Location: https://snapbox.co.za/
Date: Tue, 02 Apr 2024 16:40:48 GMT
Server: LiteSpeed
Vary: User-Agent
Alt-Svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000
Content-Type: text/html; charset=UTF-8
Content-Length: 0

• https://snapbox.co.za/
156.38.171.136 GZip used - 26139 / 200693 - 86.98 %
Inline-JavaScript (∑/total): 6/3732 Inline-CSS (∑/total): 158/126141
200

Html is minified: 344.49 %
7.303
N
Certificate error: RemoteCertificateChainErrors
Connection: close
X-Powered-By: PHP/8.1.26
Link: <https://snapbox.co.za/wp-json/>; rel="https://api.w.org/", <https://snapbox.co.za/wp-json/wp/v2/pages/26>; rel="alternate"; type="application/json", <https://snapbox.co.za/>; rel=shortlink
Transfer-Encoding: chunked
Vary: Accept-Encoding, User-Agent
Date: Tue, 02 Apr 2024 16:40:39 GMT
Server: LiteSpeed
Alt-Svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip

• http://snapbox.co.za/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
156.38.171.136
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 101.39 %
0.386
A
Not Found
Visible Content:
Connection: close
Cache-Control: no-store, must-revalidate, no-cache, max-age=0, private
Pragma: no-cache
Date: Tue, 02 Apr 2024 16:40:54 GMT
Server: LiteSpeed
Vary: User-Agent, User-Agent
Content-Type: text/html
Content-Length: 1163

• http://www.snapbox.co.za/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
156.38.171.136
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 101.39 %
0.366
A
Not Found
Visible Content:
Connection: close
Cache-Control: no-store, must-revalidate, no-cache, max-age=0, private
Pragma: no-cache
Date: Tue, 02 Apr 2024 16:40:54 GMT
Server: LiteSpeed
Vary: User-Agent
Content-Type: text/html
Content-Length: 1163

• https://156.38.171.136/
156.38.171.136
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 100.00 %
5.673
N
Certificate error: RemoteCertificateNameMismatch
Connection: close
ETag: "2f-6552e61e-dcdb711fdf82afd3;;;"
Accept-Ranges: bytes
Date: Tue, 02 Apr 2024 16:40:56 GMT
Server: LiteSpeed
Vary: User-Agent
Alt-Svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000
Content-Type: text/html
Last-Modified: Tue, 14 Nov 2023 03:14:38 GMT
Content-Length: 47

7. Comments


1. General Results, most used to calculate the result

Aname "snapbox.co.za" is domain, public suffix is ".co.za", top-level-domain is ".za", top-level-domain-type is "country-code", Country is South Africa, tld-manager is "ZA Domain Name Authority", num .za-domains preloaded: 770 (complete: 240622)
AGood: All ip addresses are public addresses
Warning: Only one ip address found: snapbox.co.za has only one ip address.
Warning: Only one ip address found: www.snapbox.co.za has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: snapbox.co.za has no ipv6 address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.snapbox.co.za has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
HSTS-Preload-Status: unknown. Domain never included in the Preload-list. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (5 urls)
http://snapbox.co.za/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 156.38.171.136


Url with incomplete Content-Type - header - missing charset
http://www.snapbox.co.za/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 156.38.171.136


Url with incomplete Content-Type - header - missing charset
https://156.38.171.136/ 156.38.171.136


Url with incomplete Content-Type - header - missing charset
Bhttps://snapbox.co.za/ 156.38.171.136
200

Missing HSTS-Header
Bhttps://www.snapbox.co.za/ 156.38.171.136
301

Missing HSTS-Header
Dhttp://www.snapbox.co.za/ 156.38.171.136
301
http://snapbox.co.za/
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
HFatal error: http result with http-status 200, no encryption. Add a redirect http ⇒ https, so every connection is secure. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop.
Ihttps://snapbox.co.za/ 156.38.171.136
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Nhttps://snapbox.co.za/ 156.38.171.136
200

Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nhttps://www.snapbox.co.za/ 156.38.171.136
301
https://snapbox.co.za/
Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nhttps://156.38.171.136/ 156.38.171.136
200

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nwww.snapbox.co.za:25


Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nsnapbox.co.za:25


Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nsnapbox.co.za:465


Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nsnapbox.co.za:587


Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nsnapbox.co.za:993


Error - Certificate isn't trusted, RemoteCertificateChainErrors
Nsnapbox.co.za:995


Error - Certificate isn't trusted, RemoteCertificateChainErrors
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain snapbox.co.za, 1 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.snapbox.co.za, 1 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.snapbox.co.za

2. Header-Checks

Fsnapbox.co.za 156.38.171.136
Content-Security-Policy
Critical: Missing Header:
Fsnapbox.co.za 156.38.171.136
X-Content-Type-Options
Critical: Missing Header:
Fsnapbox.co.za 156.38.171.136
Referrer-Policy
Critical: Missing Header:
Fsnapbox.co.za 156.38.171.136
Permissions-Policy
Critical: Missing Header:

3. DNS- and NameServer - Checks

AInfo:: 18 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 18 Queries complete, 18 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Bad (greater 8):: An average of 9.0 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: ns01.hkdns.host, ns02.hkdns.host, 2 Name Servers included in Delegation: ns01.hkdns.host, ns02.hkdns.host, 2 Name Servers included in 1 Zone definitions: ns01.hkdns.host, ns02.hkdns.host, 1 Name Servers listed in SOA.Primary: ns01.hkdns.host.
AGood: Only one SOA.Primary Name Server found.: ns01.hkdns.host.
AGood: SOA.Primary Name Server included in the delegation set.: ns01.hkdns.host.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: ns01.hkdns.host, ns02.hkdns.host
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
Warning: No Name Server IPv6 address found. IPv6 is the future, so your name servers should be visible via IPv6.: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: host
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: hkdns.host
Warning: All Name Servers from the same Country / IP location.: 2 Name Servers, 1 Countries: ZA
AInfo: Ipv4-Subnet-list: 2 Name Servers, 1 different subnets (first Byte): 156., 1 different subnets (first two Bytes): 156.38., 1 different subnets (first three Bytes): 156.38.224.
XFatal: All Name Server IPv4 addresses from the same subnet. Check https://www.iana.org/help/nameserver-requirements to learn some basics about name server configurations. If you manage these name servers, fix it. If it's your provider, change your provider.:
AGood: Nameserver supports TCP connections: 2 good Nameserver
AGood: Nameserver supports Echo Capitalization: 2 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 2 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 2 good Nameserver
Nameserver doesn't pass all EDNS-Checks: za-ns.dns.net.za: OP100: no result. FLAGS: no result. V1: no result. V1OP100: no result. V1FLAGS: no result. DNSSEC: no result. V1DNSSEC: no result. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

AGood: All checks /.well-known/acme-challenge/random-filename without redirects answer with the expected http status 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge should work. If it doesn't work: Check your vHost configuration (apachectl -S, httpd -S, nginx -T). Every combination of port and ServerName / ServerAlias (Apache) or Server (Nginx) must be unique. Merge duplicated entries in one vHost. If you use an IIS, extensionless files must be allowed in the /.well-known/acme-challenge subdirectory. Create a web.config in that directory. Content: <configuration><system.webServer><staticContent><mimeMap fileExtension="." mimeType="text/plain" /></staticContent></system.webServer></configuration>. If you have a redirect http ⇒ https, that's ok, Letsencrypt follows such redirects to port 80 / 443 (same or other server). There must be a certificate. But the certificate may be expired, self signed or with a not matching domain name. Checking the validation file Letsencrypt ignores such certificate errors. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 supports GZip.
https://snapbox.co.za/ 156.38.171.136
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://snapbox.co.za/ 156.38.171.136
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
https://snapbox.co.za/ 156.38.171.136
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 4 script elements without defer/async.
AGood: All CSS / JavaScript files are sent with GZip. That reduces the content of the files. 9 external CSS / JavaScript files found
AGood: All images with internal compression not sent via GZip. Images (.png, .jpg) are already compressed, so an additional GZip isn't helpful. 12 images (type image/png, image/jpg) found without additional GZip. Not required because these images are already compressed
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 1 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 2 with Cache-Control max-age too short (minimum 7 days), 7 with Cache-Control long enough, 10 complete.
Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 12 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 12 with Cache-Control long enough, 24 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AGood: All img-elements have a valid alt-attribute.: 6 img-elements found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
ADuration: 1744136 milliseconds, 1744.136 seconds


8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
snapbox.co.za
156.38.171.136
443
Certificate/chain invalid
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
snapbox.co.za
156.38.171.136
443
Certificate/chain invalid
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=autodiscover.snapbox.co.za

2CN=R3, O=Let's Encrypt, C=US


www.snapbox.co.za
156.38.171.136
443
Certificate/chain invalid
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

www.snapbox.co.za
156.38.171.136
443
Certificate/chain invalid
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=autodiscover.snapbox.co.za

2CN=R3, O=Let's Encrypt, C=US


156.38.171.136
156.38.171.136
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

156.38.171.136
156.38.171.136
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=xavier.hkdns.host

2CN=R3, O=Let's Encrypt, C=US


snapbox.co.za
156.38.171.136
25
Certificate/chain invalid
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

snapbox.co.za
156.38.171.136
25
Certificate/chain invalid
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


snapbox.co.za
156.38.171.136
465
Certificate/chain invalid
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

snapbox.co.za
156.38.171.136
465
Certificate/chain invalid
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=autodiscover.snapbox.co.za

2CN=R3, O=Let's Encrypt, C=US


snapbox.co.za
156.38.171.136
587
Certificate/chain invalid
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

snapbox.co.za
156.38.171.136
587
Certificate/chain invalid
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


snapbox.co.za
156.38.171.136
993
Certificate/chain invalid
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

snapbox.co.za
156.38.171.136
993
Certificate/chain invalid
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=autodiscover.snapbox.co.za

2CN=R3, O=Let's Encrypt, C=US


snapbox.co.za
156.38.171.136
995
Certificate/chain invalid
Tls12
ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok

snapbox.co.za
156.38.171.136
995
Certificate/chain invalid
Tls12

ECDH Ephermal
255
Aes256
256
Sha384
not supported
ok
 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)
1CN=autodiscover.snapbox.co.za

2CN=R3, O=Let's Encrypt, C=US


www.snapbox.co.za
156.38.171.136
25
Certificate/chain invalid
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok

www.snapbox.co.za
156.38.171.136
25
Certificate/chain invalid
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
error checking OCSP stapling
ok
 
no Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2

no Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2


9. Certificates

1.
1.
CN=autodiscover.snapbox.co.za
18.10.2023
16.01.2024
93 days expired
autodiscover.snapbox.co.za, cpanel.snapbox.co.za, cpcalendars.snapbox.co.za, cpcontacts.snapbox.co.za, mail.snapbox.co.za, snapbox.co.za, webdisk.snapbox.co.za, webmail.snapbox.co.za, www.snapbox.co.za - 9 entries
1.
1.
CN=autodiscover.snapbox.co.za
18.10.2023

16.01.2024
93 days expired
autodiscover.snapbox.co.za, cpanel.snapbox.co.za, cpcalendars.snapbox.co.za, cpcontacts.snapbox.co.za, mail.snapbox.co.za, snapbox.co.za, webdisk.snapbox.co.za, webmail.snapbox.co.za, www.snapbox.co.za - 9 entries

KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:0389F788627E45DDB07C3CE0F424E095737E
Thumbprint:20FB19B929573C1A29D4723FE5B0E9D3AD9A7FD2
SHA256 / Certificate:kXBLVV/5BZKddJgzAmNyxrMGx9SMECQO4yml69Lq90Q=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):81a55684bb42d194414e014a1706070ce6fdac3263939ed5051f306d0e69bc16
SHA256 hex / Subject Public Key Information (SPKI):81a55684bb42d194414e014a1706070ce6fdac3263939ed5051f306d0e69bc16 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://r3.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)

NotTimeValid: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
OfflineRevocation: The revocation function was unable to check revocation because the revocation server was offline.

2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020
15.09.2025
expires in 515 days


2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020

15.09.2025
expires in 515 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 4064 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 4064 days


KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:


2.
1.
CN=xavier.hkdns.host
14.03.2024
12.06.2024
expires in 55 days
xavier.hkdns.host - 1 entry
2.
1.
CN=xavier.hkdns.host
14.03.2024

12.06.2024
expires in 55 days
xavier.hkdns.host - 1 entry

KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:SHA256 With RSA-Encryption
Serial Number:0407A8FCAF7991C6FB01FC927EE3118B7A0F
Thumbprint:6074A26C8E0420053CD7ED0DECB11932135C7112
SHA256 / Certificate:K9ur+hWmX6335naiXhDmpwEDeaXu2WLFOHAfVWjXiTs=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8372158f3bb1cf3ddd060c4b51cedf49219daba9a89d7a2657d0ba5c061f0007
SHA256 hex / Subject Public Key Information (SPKI):8372158f3bb1cf3ddd060c4b51cedf49219daba9a89d7a2657d0ba5c061f0007 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://r3.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)


2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020
15.09.2025
expires in 515 days


2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020

15.09.2025
expires in 515 days


KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 4064 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 4064 days


KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:



10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found


2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuerlast 7 daysactivenum Certs
CN=R3, O=Let's Encrypt, C=US
0 /0 new
0
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
10816912766
precert
CN=R3, O=Let's Encrypt, C=US
2023-10-17 21:59:20
2024-01-15 22:59:19
autodiscover.snapbox.co.za, cpanel.snapbox.co.za, cpcalendars.snapbox.co.za, cpcontacts.snapbox.co.za, mail.snapbox.co.za, snapbox.co.za, webdisk.snapbox.co.za, webmail.snapbox.co.za, www.snapbox.co.za
9 entries



11. Html-Content - Entries

Summary

Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://snapbox.co.za/
156.38.171.136
a

27

0


0
0
0


form

1

0


0
0
0


img

6
8,179 Bytes
6
12
0
0
0
0


link
alternate
5

0


0
0
0


link
dns-prefetch
1

0


0
0
0


link
stylesheet
6
56,890 Bytes
1
3
2
2
0
0
-2

link
other
7

0
0
2
2
0
0
-2

meta
other
3

0


0
0
0


script

4
67,821 Bytes
0
4
0
0
0
0


style

2
3,434 Bytes
0
2
0
0
0
0

Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://snapbox.co.za/
156.38.171.136
a

#


16
ok








a

https://plus.google.com/share?url=snapbox.co.za/


1
ok








a

https://popularfx.com


1
ok








a

https://snapbox.co.za


2
ok








a

https://snapbox.co.za/


1
ok








a

https://snapbox.co.za/about/


1
ok








a

https://snapbox.co.za/blog/


1
ok








a

https://snapbox.co.za/contact/


1
ok








a

https://twitter.com/intent/tweet?url=snapbox.co.za/


1
ok








a

https://www.facebook.com/sharer/sharer.php?u=snapbox.co.za/


1
ok








a

https://www.instagram.com/


1
ok








form
post



1
ok








img
src
https://snapbox.co.za/wp-content/uploads/2024/04/analysis.png
200

5
ok
alt: analysisimage/png, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 with long duration found.
No GZip - 1295 Bytes





srcset
https://snapbox.co.za/wp-content/uploads/2024/04/analysis.png, https://snapbox.co.za/wp-content/uploads/2024/04/analysis.png 1x,


5
ok


https://snapbox.co.za/wp-content/uploads/2024/04/analysis.png
200

5
ok
image/png, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 with long duration found.
No GZip - 1295 Bytes





https://snapbox.co.za/wp-content/uploads/2024/04/analysis.png 1x,


5
Wrong definition, must end with "x" or "w"






img
src
https://snapbox.co.za/wp-content/uploads/2024/04/home2.png
200

1
ok
alt: home2image/png, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 with long duration found.
No GZip - 1704 Bytes





srcset
https://snapbox.co.za/wp-content/uploads/2024/04/home2.png, https://snapbox.co.za/wp-content/uploads/2024/04/home2.png 1x,


1
ok


https://snapbox.co.za/wp-content/uploads/2024/04/home2.png
200

1
ok
image/png, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 with long duration found.
No GZip - 1704 Bytes





https://snapbox.co.za/wp-content/uploads/2024/04/home2.png 1x,


1
Wrong definition, must end with "x" or "w"






link
alternate
https://snapbox.co.za/comments/feed/


1
ok








link
alternate
https://snapbox.co.za/feed/


1
ok








link
alternate
https://snapbox.co.za/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsnapbox.co.za%2F


1
ok








link
alternate
https://snapbox.co.za/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fsnapbox.co.za%2F&format=xml


1
ok








link
alternate
https://snapbox.co.za/wp-json/wp/v2/pages/26


1
ok








link
dns-prefetch
https://fonts.gstatic.com


1
ok








link
EditURI
https://snapbox.co.za/xmlrpc.php?rsd


1
ok








link
https://api.w.org/
https://snapbox.co.za/wp-json/


1
ok








link
preconnect
https://fonts.gstatic.com


1
ok








link
preload
https://fonts.googleapis.com/css?family=Raleway%3A400%2C600%7CPoppins%3A400%2C500
200

1
ok
text/css; charset=utf-8, X-Content-Type-Options nosniff found

266 Bytes




Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-c9Vi5MpKaUsmBPD2INx7DpySCm/Vy+xlc8nUTbyEJ/0=
sha384-ciklE9phNHQQL+YcbdOSqgkKwz76gyp9pqn0sSKTCgAJ04THtONJsTDoPokyBkl+
sha512-P9mj1kVxrxGhV90jOawtTn00fhJSH+fFR2vzXJHJP3kda9iHZKVlMJPS/rWbBtIKdvW2Fq+zIBuiUakuGCsenA==

<link rel="preload" href="https://fonts.googleapis.com/css?family=Raleway%3A400%2C600%7CPoppins%3A400%2C500" crossorigin="anonymous" integrity="sha256-c9Vi5MpKaUsmBPD2INx7DpySCm/Vy+xlc8nUTbyEJ/0=" />




link
preload
https://fonts.googleapis.com/css?family=Raleway%3A400%7CMontserrat%3A400%2C600%2C500
200

1
ok
text/css; charset=utf-8, X-Content-Type-Options nosniff found

274 Bytes




Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-FYUDCNmB3I/DDD/KSABUNXDYdrLlT0MAm+Xb68cREvw=
sha384-KxR+9dOAPC3e/UlTt8v7cgWn5c+qQ9l8AcGLRvB8SbOQMux0qrnP+fZbZ0SAQQNk
sha512-Cn7pqPYTthuvl8njQ6sxxVvSmAz79MmBEqD+BlPKyNp8E1noan+V9Vdx61wZH1AkqmE/g4CHFeKE5OlrpKssxw==

<link rel="preload" href="https://fonts.googleapis.com/css?family=Raleway%3A400%7CMontserrat%3A400%2C600%2C500" crossorigin="anonymous" integrity="sha256-FYUDCNmB3I/DDD/KSABUNXDYdrLlT0MAm+Xb68cREvw=" />




link
profile
https://gmpg.org/xfn/11


1
ok








link
shortlink
https://snapbox.co.za/


1
ok








link
stylesheet
http://snapbox.co.za/wp-content/uploads/popularfx-templates/host/style.css?ver=1.2.5


1
http-link, change to https








link
stylesheet
https://fonts.googleapis.com/css?family=Raleway%3A400%2C600%7CPoppins%3A400%2C500&ver=1.8.5
200

1
ok
text/css; charset=utf-8, X-Content-Type-Options nosniff found

GZip: 266/766 Bytes




Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-c9Vi5MpKaUsmBPD2INx7DpySCm/Vy+xlc8nUTbyEJ/0=
sha384-ciklE9phNHQQL+YcbdOSqgkKwz76gyp9pqn0sSKTCgAJ04THtONJsTDoPokyBkl+
sha512-P9mj1kVxrxGhV90jOawtTn00fhJSH+fFR2vzXJHJP3kda9iHZKVlMJPS/rWbBtIKdvW2Fq+zIBuiUakuGCsenA==

<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Raleway%3A400%2C600%7CPoppins%3A400%2C500&ver=1.8.5" crossorigin="anonymous" integrity="sha256-c9Vi5MpKaUsmBPD2INx7DpySCm/Vy+xlc8nUTbyEJ/0=" />



Content loaded via url("...")

https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlEA.ttf1
https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfedw.ttf1
https://fonts.gstatic.com/s/raleway/v29/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVsEpbCIPrQ.ttf1
https://fonts.gstatic.com/s/raleway/v29/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrQ.ttf1

link
stylesheet
https://fonts.googleapis.com/css?family=Raleway%3A400%7CMontserrat%3A400%2C600%2C500&ver=1.8.5
200

1
ok
text/css; charset=utf-8, X-Content-Type-Options nosniff found

GZip: 274/826 Bytes




Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

sha256-FYUDCNmB3I/DDD/KSABUNXDYdrLlT0MAm+Xb68cREvw=
sha384-KxR+9dOAPC3e/UlTt8v7cgWn5c+qQ9l8AcGLRvB8SbOQMux0qrnP+fZbZ0SAQQNk
sha512-Cn7pqPYTthuvl8njQ6sxxVvSmAz79MmBEqD+BlPKyNp8E1noan+V9Vdx61wZH1AkqmE/g4CHFeKE5OlrpKssxw==

<link rel="stylesheet" href="https://fonts.googleapis.com/css?family=Raleway%3A400%7CMontserrat%3A400%2C600%2C500&ver=1.8.5" crossorigin="anonymous" integrity="sha256-FYUDCNmB3I/DDD/KSABUNXDYdrLlT0MAm+Xb68cREvw=" />



Content loaded via url("...")

https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aX8.ttf1
https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtZ6Hw5aX8.ttf1
https://fonts.gstatic.com/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCu173w5aX8.ttf1
https://fonts.gstatic.com/s/raleway/v29/1Ptxg8zYS_SKggPN4iEgvnHyvveLxVvaorCIPrQ.ttf1

link
stylesheet
https://snapbox.co.za/wp-content/plugins/pagelayer/css/combined.css?ver=1.8.5
200

1
ok
text/css, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 - with long duration found.
GZip: 40123/264154 Bytes




local SRI possible, possible hash-values:

sha256-lsbBQi1PfimG8iO8aIBTOmOCiCNO5qtBn3/ow+kDv+c=
sha384-gwjyFSifEJ52brZs5XTzYllVo2XntAwsKAY8fwVKszl9bIOgX4ReDGOlgyUf2YTk
sha512-9/Vx+23k0itrGlVmApndNOr0eBnnxkDQTZEySuM880zEM91XqpoyLZyTzfvu6jGS+K0gEw5cL6hUSHj0GMiJUQ==

<link rel="stylesheet" href="https://snapbox.co.za/wp-content/plugins/pagelayer/css/combined.css?ver=1.8.5" crossorigin="anonymous" integrity="sha256-lsbBQi1PfimG8iO8aIBTOmOCiCNO5qtBn3/ow+kDv+c=" />



Content loaded via url("...")

../fonts/fa-brands-400.eot1
../fonts/fa-brands-400.eot?#iefix1
../fonts/fa-brands-400.svg#fontawesome1
../fonts/fa-brands-400.ttf1
../fonts/fa-brands-400.woff1
../fonts/fa-brands-400.woff21
../fonts/fa-regular-400.eot1
../fonts/fa-regular-400.eot?#iefix1
../fonts/fa-regular-400.svg#fontawesome1
../fonts/fa-regular-400.ttf1
../fonts/fa-regular-400.woff1
../fonts/fa-regular-400.woff21
../fonts/fa-solid-900.eot1
../fonts/fa-solid-900.eot?#iefix1
../fonts/fa-solid-900.svg#fontawesome1
../fonts/fa-solid-900.ttf1
../fonts/fa-solid-900.woff1
../fonts/fa-solid-900.woff21
../images/nivo-icons/close.png1
../images/nivo-icons/close@2x.png1
../images/nivo-icons/loading.gif1
../images/nivo-icons/loading@2x.gif1
../images/nivo-icons/next.png1
../images/nivo-icons/next@2x.png1
../images/nivo-icons/prev.png1
../images/nivo-icons/prev@2x.png1
owl.video.play.png1

link
stylesheet
https://snapbox.co.za/wp-content/themes/popularfx/sidebar.css?ver=1.2.5
200

1
ok
text/css, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 - with long duration found.
GZip: 2294/8951 Bytes




local SRI possible, possible hash-values:

sha256-aLMRWhG4uNZd+N4sLQu4brG6ljpr5mqT5f8UYLSVV6o=
sha384-635lBr8B8luIuFgnfBqZg0jcz4OBIai5OkqKPsm/HfyW+pUVWfy0zP9ITsmD0AB1
sha512-BcxJ0H9ZWqCPmkPzkqdFcgDA11LRkOvM1Z5CEvLcMVxs2lv8nGspd9BExnSc5J5ZO2FahzRJ0LP0uSZESjmkPw==

<link rel="stylesheet" href="https://snapbox.co.za/wp-content/themes/popularfx/sidebar.css?ver=1.2.5" crossorigin="anonymous" integrity="sha256-aLMRWhG4uNZd+N4sLQu4brG6ljpr5mqT5f8UYLSVV6o=" />




link
stylesheet
https://snapbox.co.za/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3
200

1
ok
text/css, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 - with long duration found.
GZip: 14473/110147 Bytes




local SRI possible, possible hash-values:

sha256-AIWt/S0IpF9ioG2PP5ad3EqU6+jSJlEduQqgOPEe0YA=
sha384-qoNElGaFHqNA8Zx0r4EK4aVxMS/HXc9pHVqd9UA/OdwgYJhd2ECPx39ogXF72//y
sha512-KYtDJIUfDZZipI7y+nTmXNePtLxpGRsF5wwlS2zBlnGefzX+PogoVwJvz6Jg8KWxII6WTun0Kp3S4v7QrLBw0Q==

<link rel="stylesheet" href="https://snapbox.co.za/wp-includes/css/dist/block-library/style.min.css?ver=6.4.3" crossorigin="anonymous" integrity="sha256-AIWt/S0IpF9ioG2PP5ad3EqU6+jSJlEduQqgOPEe0YA=" />



Content loaded via url("...")

data:image/svg+xml;utf8,<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50"/></svg>2

meta

UTF-8


1
ok








meta
generator
WordPress 6.4.3


1
ok








meta
viewport
width=device-width, initial-scale=1


1
ok








script
src
https://snapbox.co.za/wp-content/plugins/pagelayer/js/combined.js?ver=1.8.5
200

1
ok
Missing defer / async attribute. application/javascript, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 - with long duration found.
GZip: 30856/120865 Bytes




local SRI possible, possible hash-values:

sha256-8yJ3akNdEUT1wppCVWWPmgC82ydaVDjPuzKHVKg39RY=
sha384-0y05Jxrp9yE938eSEMkQhXYsP71VRAl2Xuac8Zhu6kMVVCQclTUpAAp8rMQxjvFN
sha512-NRXq8PoQtOeiOrfTS+R+RihHnpxOd0APm20oeAZLwJBKSqafkoD/OzGApwZ5la6Jb7UMVvPec6gtufbj39QPiA==

<script src="https://snapbox.co.za/wp-content/plugins/pagelayer/js/combined.js?ver=1.8.5" crossorigin="anonymous" integrity="sha256-8yJ3akNdEUT1wppCVWWPmgC82ydaVDjPuzKHVKg39RY=" />




script
src
https://snapbox.co.za/wp-content/themes/popularfx/js/navigation.js?ver=1.2.5
200

1
ok
Missing defer / async attribute. application/javascript, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 - with long duration found.
GZip: 1683/4386 Bytes




local SRI possible, possible hash-values:

sha256-IBiyKRLNeJf+9Iux4PvqZxJfWl8VosI3FK0YQx3bZRM=
sha384-Incw4JUcuQIMPgBMx6UwlASuXfXm2MGQAzBemcn5MlMTZAaM8DwmbVv3vNCth+Q/
sha512-w3fxic7PMsSEKpbtMxvYLVXnVsyppkF3hkm3hGcKqYLpLjylmlS/hBFXqI9zyXcdY68yqhZwLabpLjet6lrnzQ==

<script src="https://snapbox.co.za/wp-content/themes/popularfx/js/navigation.js?ver=1.2.5" crossorigin="anonymous" integrity="sha256-IBiyKRLNeJf+9Iux4PvqZxJfWl8VosI3FK0YQx3bZRM=" />




script
src
https://snapbox.co.za/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
200

1
ok
Missing defer / async attribute. application/javascript, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 - with long duration found.
GZip: 30412/87553 Bytes




local SRI possible, possible hash-values:

sha256-y28tMsSdHCsl6f/Jqq+j+DB1NGwBvNSubrGHOSpCks8=
sha384-vT0xsrWPQ3JMjk9+X3p3J4glfdqQsMBzYwpxS1LPybrkJs6kZDw7slFXJ2iUkUy4
sha512-/Hn9t2djAl3Dn6wEWiFf8VXvL0kqDpZAB51vCJ+mIYrys6t8bq9jaCfe6SlOaTmpWrJFVOhwyXZnnCVWetY3TA==

<script src="https://snapbox.co.za/wp-includes/js/jquery/jquery.min.js?ver=3.7.1" crossorigin="anonymous" integrity="sha256-y28tMsSdHCsl6f/Jqq+j+DB1NGwBvNSubrGHOSpCks8=" />




script
src
https://snapbox.co.za/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
200

1
ok
Missing defer / async attribute. application/javascript, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 - with long duration found.
GZip: 4870/13577 Bytes




local SRI possible, possible hash-values:

sha256-UnTxHm+zKuDPLfufgEMnKGXDl6fEIjtM+n1Q6lL73ok=
sha384-ez4i72z0XhJqm0ZRoQkpPN0bDV8Kw8PK3n8kjEZsWhRDrfICLd0AGghHJB+vytx0
sha512-jWvlRVCKHDgni4rXgMN1iuSKJeThLu5EM3WqVgMdmzVvjJDyLU8lEUD6P2VgOvQFIxZeM8ri4tYvx47BBuPXMQ==

<script src="https://snapbox.co.za/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1" crossorigin="anonymous" integrity="sha256-UnTxHm+zKuDPLfufgEMnKGXDl6fEIjtM+n1Q6lL73ok=" />




style

https://snapbox.co.za/wp-content/uploads/2024/04/counter.jpg
200

1
ok
image/jpeg, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 with long duration found.
No GZip - 1544 Bytes






style

https://snapbox.co.za/wp-content/uploads/2024/04/home-header1.jpg
200

1
ok
image/jpeg, missing X-Content-Type-Options nosniff

Cache-Control: public, max-age=10368000 with long duration found.
No GZip - 1890 Bytes






12. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: ns01.hkdns.host, ns02.hkdns.host

QNr.DomainTypeNS used
1
host
NS
k.root-servers.net (2001:7fd::1)

Answer: a.nic.host, b.nic.host, e.nic.host, f.nic.host
2
ns01.hkdns.host
NS
a.nic.host (2001:67c:13cc::1:53)

Answer: helium.ns.hetzner.de, hydrogen.ns.hetzner.com, oxygen.ns.hetzner.com
3
ns02.hkdns.host
NS
a.nic.host (2001:67c:13cc::1:53)

Answer: helium.ns.hetzner.de, hydrogen.ns.hetzner.com, oxygen.ns.hetzner.com
4
de
NS
d.root-servers.net (2001:500:2d::d)

Answer: a.nic.de, f.nic.de, l.de.net, n.de.net, s.de.net, z.nic.de
5
helium.ns.hetzner.de
NS
a.nic.de (2001:678:2::53)

Answer: ns.second-ns.com, ns1.your-server.de, ns3.second-ns.de

Answer: ns1.your-server.de
213.133.100.102, 2a01:4f8:0:1::5ddc:1

Answer: ns3.second-ns.de
193.47.99.4, 2001:67c:192c::add:b3
6
com
NS
a.root-servers.net (2001:503:ba3e::2:30)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
7
hydrogen.ns.hetzner.com
NS
b.gtld-servers.net (2001:503:231d::2:30)

Answer: ns.second-ns.com, ns1.your-server.de, ns3.second-ns.de

Answer: ns.second-ns.com
213.239.204.242, 2a01:4f8:0:a101::b:1
8
oxygen.ns.hetzner.com
NS
b.gtld-servers.net (2001:503:231d::2:30)

Answer: ns.second-ns.com, ns1.your-server.de, ns3.second-ns.de

Answer: ns.second-ns.com
213.239.204.242, 2a01:4f8:0:a101::b:1
9
helium.ns.hetzner.de: 193.47.99.5
A
ns.second-ns.com (2a01:4f8:0:a101::b:1)
10
helium.ns.hetzner.de: 2001:67c:192c::add:5
AAAA
ns.second-ns.com (2a01:4f8:0:a101::b:1)
11
hydrogen.ns.hetzner.com: 213.133.100.98
A
ns.second-ns.com (2a01:4f8:0:a101::b:1)
12
hydrogen.ns.hetzner.com: 2a01:4f8:0:1::add:1098
AAAA
ns.second-ns.com (2a01:4f8:0:a101::b:1)
13
oxygen.ns.hetzner.com: 88.198.229.192
A
ns.second-ns.com (2a01:4f8:0:a101::b:1)
14
oxygen.ns.hetzner.com: 2a01:4f8:0:1::add:2992
AAAA
ns.second-ns.com (2a01:4f8:0:a101::b:1)
15
ns01.hkdns.host: 156.38.224.10
A
helium.ns.hetzner.de (2001:67c:192c::add:5)
16
ns01.hkdns.host: No AAAA record found
AAAA
helium.ns.hetzner.de (2001:67c:192c::add:5)
17
ns02.hkdns.host: 156.38.224.11
A
helium.ns.hetzner.de (2001:67c:192c::add:5)
18
ns02.hkdns.host: No AAAA record found
AAAA
helium.ns.hetzner.de (2001:67c:192c::add:5)


13. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.snapbox.co.za



1
0
snapbox.co.za
0

no CAA entry found
1
0
co.za
0

no CAA entry found
1
0
za
0

no CAA entry found
1
0


14. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
snapbox.co.za
v=spf1 a mx ip4:156.38.171.136 ~all
ok
1
0
www.snapbox.co.za
v=spf1 a mx ip4:156.38.171.136 ~all
ok
1
0
_acme-challenge.snapbox.co.za
d3zBEE0s8_LvWTmqyVv7B6hGKCZe_DnEf4Jg9kZQTxg
looks good, correct length, correct characters
1
0
_acme-challenge.www.snapbox.co.za

Name Error - The domain name does not exist
1
0
_acme-challenge.snapbox.co.za.snapbox.co.za

Name Error - The domain name does not exist
1
0
_acme-challenge.www.snapbox.co.za.snapbox.co.za

Name Error - The domain name does not exist
1
0
_acme-challenge.www.snapbox.co.za.www.snapbox.co.za

Name Error - The domain name does not exist
1
0


15. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

snapbox.co.za
0
snapbox.co.za
01ok

A


156.38.171.136
01ok

CNAME


00ok



16. Cipher Suites

DomainIPPortCipher (OpenSsl / IANA)
snapbox.co.za
156.38.171.136
25
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
4 Ciphers, 304.50 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDH
RSA
CHACHA20/POLY1305(256)
AEAD



ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
DH
RSA
AESGCM(128)
AEAD


443
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
3 Ciphers, 96.87 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDH
RSA
CHACHA20/POLY1305(256)
AEAD



ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD


465
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
5 Ciphers, 120.39 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDH
RSA
CHACHA20/POLY1305(256)
AEAD



ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
DH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
DH
RSA
AESGCM(128)
AEAD


587
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
5 Ciphers, 236.29 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDH
RSA
CHACHA20/POLY1305(256)
AEAD



ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
DH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
DH
RSA
AESGCM(128)
AEAD


993
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
5 Ciphers, 101.38 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDH
RSA
CHACHA20/POLY1305(256)
AEAD



ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
DH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
DH
RSA
AESGCM(128)
AEAD


995
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
5 Ciphers, 103.51 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDH
RSA
CHACHA20/POLY1305(256)
AEAD



ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
DH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
DH
RSA
AESGCM(128)
AEAD
www.snapbox.co.za
156.38.171.136
25
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
5 Ciphers, 235.66 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDH
RSA
CHACHA20/POLY1305(256)
AEAD



ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



DHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0x00,0x9F
FS

TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
DH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD



DHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0x00,0x9E
FS

TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
DH
RSA
AESGCM(128)
AEAD


443
ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS
3 Ciphers, 94.93 sec
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
ECDH
RSA
CHACHA20/POLY1305(256)
AEAD



ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
ECDH
RSA
AESGCM(256)
AEAD



ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
ECDH
RSA
AESGCM(128)
AEAD


17. Portchecks

DomainIPPortDescriptionResultAnswer
snapbox.co.za
156.38.171.136
21
FTP
open
220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 18:41. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity.

snapbox.co.za
156.38.171.136
21
FTP
open
220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 18:41. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity.

snapbox.co.za
156.38.171.136
22
SSH
open
SSH-2.0-OpenSSH_8.0

snapbox.co.za
156.38.171.136
22
SSH
open
SSH-2.0-OpenSSH_8.0
Bad: SSH without DNS SSHFP Record found
Possible DNS SSHFP Entries:
snapbox.co.za
156.38.171.136
25
SMTP
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:41:08 +0200

Answer EHLO: 250-xavier.hkdns.host Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP

Answer AUTH LOGIN: 334 VXNlcm5hbWU6

Mail certificate is invalid
snapbox.co.za
156.38.171.136
25
SMTP
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:41:08 +0200
Mail certificate is invalid
Answer EHLO: 250-xavier.hkdns.host Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP Good: STARTTLS found
Answer AUTH LOGIN: 334 VXNlcm5hbWU6 Bad: Unencrypted Login allowed
snapbox.co.za
156.38.171.136
53
DNS
open


snapbox.co.za
156.38.171.136
53
DNS
open


snapbox.co.za
156.38.171.136
110
POP3
open
+OK Dovecot DA ready.

snapbox.co.za
156.38.171.136
110
POP3
open
+OK Dovecot DA ready.
This port ist unencrypted and deprecated. Don't use it.
snapbox.co.za
156.38.171.136
143
IMAP
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.

snapbox.co.za
156.38.171.136
143
IMAP
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.
This port ist unencrypted and deprecated. Don't use it.
snapbox.co.za
156.38.171.136
465
SMTP (encrypted)
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:41:28 +0200
Mail certificate is invalid
snapbox.co.za
156.38.171.136
465
SMTP (encrypted)
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:41:28 +0200
Mail certificate is invalid
snapbox.co.za
156.38.171.136
587
SMTP (encrypted, submission)
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:41:08 +0200

Answer EHLO: 250-xavier.hkdns.host Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP

Answer AUTH LOGIN: 334 VXNlcm5hbWU6

Mail certificate is invalid
snapbox.co.za
156.38.171.136
587
SMTP (encrypted, submission)
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:41:08 +0200
Mail certificate is invalid
Answer EHLO: 250-xavier.hkdns.host Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP Good: STARTTLS found
Answer AUTH LOGIN: 334 VXNlcm5hbWU6 Bad: Unencrypted Login allowed
snapbox.co.za
156.38.171.136
993
IMAP (encrypted)
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot DA ready.
Mail certificate is invalid
snapbox.co.za
156.38.171.136
993
IMAP (encrypted)
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN] Dovecot DA ready.
Mail certificate is invalid
snapbox.co.za
156.38.171.136
995
POP3 (encrypted)
open
+OK Dovecot DA ready.
Mail certificate is invalid
snapbox.co.za
156.38.171.136
995
POP3 (encrypted)
open
+OK Dovecot DA ready.
Mail certificate is invalid
snapbox.co.za
156.38.171.136
1433
MS SQL



snapbox.co.za
156.38.171.136
1433
MS SQL



snapbox.co.za
156.38.171.136
2082
cPanel (http)



snapbox.co.za
156.38.171.136
2082
cPanel (http)



snapbox.co.za
156.38.171.136
2083
cPanel (https)



snapbox.co.za
156.38.171.136
2083
cPanel (https)



snapbox.co.za
156.38.171.136
2086
WHM (http)



snapbox.co.za
156.38.171.136
2086
WHM (http)



snapbox.co.za
156.38.171.136
2087
WHM (https)



snapbox.co.za
156.38.171.136
2087
WHM (https)



snapbox.co.za
156.38.171.136
2089
cPanel Licensing



snapbox.co.za
156.38.171.136
2089
cPanel Licensing



snapbox.co.za
156.38.171.136
2095
cPanel Webmail (http)



snapbox.co.za
156.38.171.136
2095
cPanel Webmail (http)



snapbox.co.za
156.38.171.136
2096
cPanel Webmail (https)



snapbox.co.za
156.38.171.136
2096
cPanel Webmail (https)



snapbox.co.za
156.38.171.136
2222
DirectAdmin (http)
open
http://156.38.171.136:2222/
Http-Status: 400
Bad Request

snapbox.co.za
156.38.171.136
2222
DirectAdmin (http)
open
http://156.38.171.136:2222/
Http-Status: 400
Bad Request

snapbox.co.za
156.38.171.136
2222
DirectAdmin (https)
open
https://156.38.171.136:2222/
Http-Status: -16
UnknownError - The SSL connection could not be established, see inner exception. - Cannot determine the frame size or a corrupted frame was received

snapbox.co.za
156.38.171.136
2222
DirectAdmin (https)
open
https://156.38.171.136:2222/
Http-Status: -16
UnknownError - The SSL connection could not be established, see inner exception. - Cannot determine the frame size or a corrupted frame was received

snapbox.co.za
156.38.171.136
3306
mySql
open


snapbox.co.za
156.38.171.136
3306
mySql
open


snapbox.co.za
156.38.171.136
5224
Plesk Licensing



snapbox.co.za
156.38.171.136
5224
Plesk Licensing



snapbox.co.za
156.38.171.136
5432
PostgreSQL



snapbox.co.za
156.38.171.136
5432
PostgreSQL



snapbox.co.za
156.38.171.136
8080
Ookla Speedtest (http)



snapbox.co.za
156.38.171.136
8080
Ookla Speedtest (http)



snapbox.co.za
156.38.171.136
8080
Ookla Speedtest (https)



snapbox.co.za
156.38.171.136
8080
Ookla Speedtest (https)



snapbox.co.za
156.38.171.136
8083
VestaCP http



snapbox.co.za
156.38.171.136
8083
VestaCP http



snapbox.co.za
156.38.171.136
8083
VestaCP https



snapbox.co.za
156.38.171.136
8083
VestaCP https



snapbox.co.za
156.38.171.136
8443
Plesk Administration (https)



snapbox.co.za
156.38.171.136
8443
Plesk Administration (https)



snapbox.co.za
156.38.171.136
8447
Plesk Installer + Updates



snapbox.co.za
156.38.171.136
8447
Plesk Installer + Updates



snapbox.co.za
156.38.171.136
8880
Plesk Administration (http)



snapbox.co.za
156.38.171.136
8880
Plesk Administration (http)



snapbox.co.za
156.38.171.136
10000
Webmin (http)



snapbox.co.za
156.38.171.136
10000
Webmin (http)



snapbox.co.za
156.38.171.136
10000
Webmin (https)



snapbox.co.za
156.38.171.136
10000
Webmin (https)



www.snapbox.co.za
156.38.171.136
21
FTP
open
220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 18:41. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity.

www.snapbox.co.za
156.38.171.136
21
FTP
open
220---------- Welcome to Pure-FTPd [privsep] [TLS] ---------- 220-You are user number 1 of 50 allowed. 220-Local time is now 18:41. Server port: 21. 220-This is a private system - No anonymous login 220-IPv6 connections are also welcome on this server. 220 You will be disconnected after 15 minutes of inactivity.

www.snapbox.co.za
156.38.171.136
22
SSH
open
SSH-2.0-OpenSSH_8.0

www.snapbox.co.za
156.38.171.136
22
SSH
open
SSH-2.0-OpenSSH_8.0
Bad: SSH without DNS SSHFP Record found
Possible DNS SSHFP Entries:
www.snapbox.co.za
156.38.171.136
25
SMTP
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:42:00 +0200

Answer EHLO: 250-xavier.hkdns.host Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP

Answer AUTH LOGIN: 334 VXNlcm5hbWU6

Mail certificate is invalid
www.snapbox.co.za
156.38.171.136
25
SMTP
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:42:00 +0200
Mail certificate is invalid
Answer EHLO: 250-xavier.hkdns.host Hello intern.server-daten.de [85.215.2.227] 250-SIZE 52428800 250-8BITMIME 250-PIPELINING 250-PIPECONNECT 250-AUTH PLAIN LOGIN 250-STARTTLS 250 HELP Good: STARTTLS found
Answer AUTH LOGIN: 334 VXNlcm5hbWU6 Bad: Unencrypted Login allowed
www.snapbox.co.za
156.38.171.136
53
DNS
open


www.snapbox.co.za
156.38.171.136
53
DNS
open


www.snapbox.co.za
156.38.171.136
110
POP3
open
+OK Dovecot DA ready.

www.snapbox.co.za
156.38.171.136
110
POP3
open
+OK Dovecot DA ready.
This port ist unencrypted and deprecated. Don't use it.
www.snapbox.co.za
156.38.171.136
143
IMAP
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.

www.snapbox.co.za
156.38.171.136
143
IMAP
open
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN] Dovecot DA ready.
This port ist unencrypted and deprecated. Don't use it.
www.snapbox.co.za
156.38.171.136
465
SMTP (encrypted)
open


www.snapbox.co.za
156.38.171.136
465
SMTP (encrypted)
open


www.snapbox.co.za
156.38.171.136
587
SMTP (encrypted, submission)
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:42:00 +0200

www.snapbox.co.za
156.38.171.136
587
SMTP (encrypted, submission)
open
220 xavier.hkdns.host ESMTP Exim 4.97.1 Tue, 02 Apr 2024 18:42:00 +0200

www.snapbox.co.za
156.38.171.136
993
IMAP (encrypted)
open


www.snapbox.co.za
156.38.171.136
993
IMAP (encrypted)
open


www.snapbox.co.za
156.38.171.136
995
POP3 (encrypted)
open


www.snapbox.co.za
156.38.171.136
995
POP3 (encrypted)
open


www.snapbox.co.za
156.38.171.136
1433
MS SQL



www.snapbox.co.za
156.38.171.136
1433
MS SQL



www.snapbox.co.za
156.38.171.136
2082
cPanel (http)



www.snapbox.co.za
156.38.171.136
2082
cPanel (http)



www.snapbox.co.za
156.38.171.136
2083
cPanel (https)



www.snapbox.co.za
156.38.171.136
2083
cPanel (https)



www.snapbox.co.za
156.38.171.136
2086
WHM (http)



www.snapbox.co.za
156.38.171.136
2086
WHM (http)



www.snapbox.co.za
156.38.171.136
2087
WHM (https)



www.snapbox.co.za
156.38.171.136
2087
WHM (https)



www.snapbox.co.za
156.38.171.136
2089
cPanel Licensing



www.snapbox.co.za
156.38.171.136
2089
cPanel Licensing



www.snapbox.co.za
156.38.171.136
2095
cPanel Webmail (http)



www.snapbox.co.za
156.38.171.136
2095
cPanel Webmail (http)



www.snapbox.co.za
156.38.171.136
2096
cPanel Webmail (https)



www.snapbox.co.za
156.38.171.136
2096
cPanel Webmail (https)



www.snapbox.co.za
156.38.171.136
2222
DirectAdmin (http)
open
http://156.38.171.136:2222/
Http-Status: 400
Bad Request

www.snapbox.co.za
156.38.171.136
2222
DirectAdmin (http)
open
http://156.38.171.136:2222/
Http-Status: 400
Bad Request

www.snapbox.co.za
156.38.171.136
2222
DirectAdmin (https)
open
https://156.38.171.136:2222/
Http-Status: -16
UnknownError - The SSL connection could not be established, see inner exception. - Cannot determine the frame size or a corrupted frame was received

www.snapbox.co.za
156.38.171.136
2222
DirectAdmin (https)
open
https://156.38.171.136:2222/
Http-Status: -16
UnknownError - The SSL connection could not be established, see inner exception. - Cannot determine the frame size or a corrupted frame was received

www.snapbox.co.za
156.38.171.136
3306
mySql
open


www.snapbox.co.za
156.38.171.136
3306
mySql
open


www.snapbox.co.za
156.38.171.136
5224
Plesk Licensing



www.snapbox.co.za
156.38.171.136
5224
Plesk Licensing



www.snapbox.co.za
156.38.171.136
5432
PostgreSQL



www.snapbox.co.za
156.38.171.136
5432
PostgreSQL



www.snapbox.co.za
156.38.171.136
8080
Ookla Speedtest (http)



www.snapbox.co.za
156.38.171.136
8080
Ookla Speedtest (http)



www.snapbox.co.za
156.38.171.136
8080
Ookla Speedtest (https)



www.snapbox.co.za
156.38.171.136
8080
Ookla Speedtest (https)



www.snapbox.co.za
156.38.171.136
8083
VestaCP http



www.snapbox.co.za
156.38.171.136
8083
VestaCP http



www.snapbox.co.za
156.38.171.136
8083
VestaCP https



www.snapbox.co.za
156.38.171.136
8083
VestaCP https



www.snapbox.co.za
156.38.171.136
8443
Plesk Administration (https)



www.snapbox.co.za
156.38.171.136
8443
Plesk Administration (https)



www.snapbox.co.za
156.38.171.136
8447
Plesk Installer + Updates



www.snapbox.co.za
156.38.171.136
8447
Plesk Installer + Updates



www.snapbox.co.za
156.38.171.136
8880
Plesk Administration (http)



www.snapbox.co.za
156.38.171.136
8880
Plesk Administration (http)



www.snapbox.co.za
156.38.171.136
10000
Webmin (http)



www.snapbox.co.za
156.38.171.136
10000
Webmin (http)



www.snapbox.co.za
156.38.171.136
10000
Webmin (https)



www.snapbox.co.za
156.38.171.136
10000
Webmin (https)





Permalink: https://check-your-website.server-daten.de/?i=fbda7480-915a-47e5-8d92-ccf208b037c5


Last Result: https://check-your-website.server-daten.de/?q=snapbox.co.za - 2024-04-02 18:44:19


Do you like this page? Support this tool, add a link on your page:

<a href="https://check-your-website.server-daten.de/?q=snapbox.co.za" target="_blank">Check this Site: snapbox.co.za</a>

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro