Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

A+

 

Top configuration, no warnings +Preload

 

Checked:
07.12.2023 01:32:34

 

Older results

No older results found

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
theintercept.com
A
192.0.66.199
San Francisco/California/United States (US) - Automattic, Inc
No Hostname found
yes
1
0

AAAA

yes


www.theintercept.com
A
192.0.66.199
San Francisco/California/United States (US) - Automattic, Inc
No Hostname found
yes
1
0

AAAA

yes


*.theintercept.com
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 46780, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.12.2023, 00:00:00 +, Signature-Inception: 30.11.2023, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: com

com
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest 4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=






1 RRSIG RR to validate DS RR found






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 19.12.2023, 19:00:00 +, Signature-Inception: 06.12.2023, 18:00:00 +, KeyTag 46780, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 46780 used to validate the DS RRSet in the parent zone






4 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 30909, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 46171, Flags 256






Public Key with Algorithm 8, KeyTag 63246, Flags 256






2 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 14.12.2023, 15:02:35 +, Signature-Inception: 29.11.2023, 14:57:35 +, KeyTag 19718, Signer-Name: com






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 14.12.2023, 15:02:35 +, Signature-Inception: 29.11.2023, 14:57:35 +, KeyTag 30909, Signer-Name: com






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 30909 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 30909, DigestType 2 and Digest "4tPJFvbe6scylOgmj7WIUESoM/xUWViPSpGEz8QaV2Y=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: theintercept.com

theintercept.com
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 2371, DigestType 2 and Digest EOHc7X6AibnauJcrNSbb6NFzzEo/Ry0q2lXC0saSIrw=






2 RRSIG RR to validate DS RR found






RRSIG-Owner theintercept.com., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 10.12.2023, 07:27:58 +, Signature-Inception: 03.12.2023, 06:17:58 +, KeyTag 46171, Signer-Name: com






RRSIG-Owner theintercept.com., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 10.12.2023, 07:27:58 +, Signature-Inception: 03.12.2023, 06:17:58 +, KeyTag 63246, Signer-Name: com






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 46171 used to validate the DS RRSet in the parent zone






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 63246 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 2371, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 34505, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner theintercept.com., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 14.01.2024, 21:43:07 +, Signature-Inception: 14.11.2023, 21:43:07 +, KeyTag 2371, Signer-Name: theintercept.com






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 2371 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 2371, DigestType 2 and Digest "EOHc7X6AibnauJcrNSbb6NFzzEo/Ry0q2lXC0saSIrw=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone






RRSIG Type 1 validates the A - Result: 192.0.66.199
Validated: RRSIG-Owner theintercept.com., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 08.12.2023, 01:33:01 +, Signature-Inception: 05.12.2023, 23:33:01 +, KeyTag 34505, Signer-Name: theintercept.com






RRSIG Type 16 validates the TXT - Result: apple-domain-verification=nuWNBRgq7Tbv7H4V facebook-domain-verification=o4e91x4ku9ni6lkevwxuz63bgud0r4 protonmail-verification=92f35641de8e4632b9a6df3dee851ac3ab3bfa64 google-site-verification=Tkpc06bMzFPgRwNqgcGwmvcbnHB_AnNSlxZcghCbEJM google-site-verification=TyE_QXXZZeU5oOP-HkHp7TLIJPp4tqo2Ei0VnDeM8PQ google-site-verification=gkMPRL0_YiU7JjAjI9_3tIMpdP3WakxZ4u975B0H8Jw v=spf1 include:_spf.protonmail.ch include:_spf.psm.knowbe4.com mx ~all
Validated: RRSIG-Owner theintercept.com., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 08.12.2023, 01:33:01 +, Signature-Inception: 05.12.2023, 23:33:01 +, KeyTag 34505, Signer-Name: theintercept.com






CNAME-Query sends a valid NSEC RR as result with the query name "theintercept.com" equal the NSEC-owner "theintercept.com" and the NextOwner "\000.theintercept.com". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, DNSKEY, TLSA, 53, HIP, CDS, CDNSKEY, 61, 64, 65, URI, CAA Validated: RRSIG-Owner theintercept.com., Algorithm: 13, 2 Labels, original TTL: 1800 sec, Signature-expiration: 08.12.2023, 01:33:01 +, Signature-Inception: 05.12.2023, 23:33:01 +, KeyTag 34505, Signer-Name: theintercept.com






Status: Good. NoData-Proof required and found.






AAAA-Query sends a valid NSEC RR as result with the query name "theintercept.com" equal the NSEC-owner "theintercept.com" and the NextOwner "\000.theintercept.com". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, 13, MX, TXT, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, DNSKEY, TLSA, 53, HIP, CDS, CDNSKEY, 61, 64, 65, URI, CAA Validated: RRSIG-Owner theintercept.com., Algorithm: 13, 2 Labels, original TTL: 1800 sec, Signature-expiration: 08.12.2023, 01:33:01 +, Signature-Inception: 05.12.2023, 23:33:01 +, KeyTag 34505, Signer-Name: theintercept.com






Status: Good. NoData-Proof required and found.






TLSA-Query (_443._tcp.theintercept.com) sends a valid NSEC RR as result with the query name "_443._tcp.theintercept.com" equal the NSEC-owner "_443._tcp.theintercept.com" and the NextOwner "\000._443._tcp.theintercept.com". So the zone confirmes the not-existence of that TLSA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: RRSIG, NSEC Validated: RRSIG-Owner _443._tcp.theintercept.com., Algorithm: 13, 4 Labels, original TTL: 1800 sec, Signature-expiration: 08.12.2023, 01:33:01 +, Signature-Inception: 05.12.2023, 23:33:01 +, KeyTag 34505, Signer-Name: theintercept.com






Status: Good. NoData-Proof required and found.






CAA-Query sends a valid NSEC RR as result with the query name "theintercept.com" equal the NSEC-owner "theintercept.com" and the NextOwner "\000.theintercept.com". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, NS, SOA, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, DNSKEY, TLSA, 53, HIP, CDS, CDNSKEY, 61, 64, 65, URI Validated: RRSIG-Owner theintercept.com., Algorithm: 13, 2 Labels, original TTL: 1800 sec, Signature-expiration: 08.12.2023, 01:33:01 +, Signature-Inception: 05.12.2023, 23:33:01 +, KeyTag 34505, Signer-Name: theintercept.com






Status: Good. NoData-Proof required and found.



Zone: www.theintercept.com

www.theintercept.com
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "www.theintercept.com" and the NextOwner "\000.www.theintercept.com". So the parent zone confirmes the non-existence of a DS RR.
Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA






RRSIG Type 1 validates the A - Result: 192.0.66.199
Validated: RRSIG-Owner www.theintercept.com., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 08.12.2023, 01:33:02 +, Signature-Inception: 05.12.2023, 23:33:02 +, KeyTag 34505, Signer-Name: theintercept.com






CNAME-Query sends a valid NSEC RR as result with the query name "www.theintercept.com" equal the NSEC-owner "www.theintercept.com" and the NextOwner "\000.www.theintercept.com". So the zone confirmes the not-existence of that CNAME RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA Validated: RRSIG-Owner www.theintercept.com., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 08.12.2023, 01:33:02 +, Signature-Inception: 05.12.2023, 23:33:02 +, KeyTag 34505, Signer-Name: theintercept.com






Status: Good. NoData-Proof required and found.






TXT-Query sends a valid NSEC RR as result with the query name "www.theintercept.com" equal the NSEC-owner "www.theintercept.com" and the NextOwner "\000.www.theintercept.com". So the zone confirmes the not-existence of that TXT RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, 13, MX, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA Validated: RRSIG-Owner www.theintercept.com., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 08.12.2023, 01:33:02 +, Signature-Inception: 05.12.2023, 23:33:02 +, KeyTag 34505, Signer-Name: theintercept.com






Status: Good. NoData-Proof required and found.






AAAA-Query sends a valid NSEC RR as result with the query name "www.theintercept.com" equal the NSEC-owner "www.theintercept.com" and the NextOwner "\000.www.theintercept.com". So the zone confirmes the not-existence of that AAAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, 13, MX, TXT, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI, CAA Validated: RRSIG-Owner www.theintercept.com., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 08.12.2023, 01:33:02 +, Signature-Inception: 05.12.2023, 23:33:02 +, KeyTag 34505, Signer-Name: theintercept.com






Status: Good. NoData-Proof required and found.






TLSA-Query (_443._tcp.www.theintercept.com) sends a valid NSEC RR as result with the query name "_443._tcp.www.theintercept.com" equal the NSEC-owner "_443._tcp.www.theintercept.com" and the NextOwner "\000._443._tcp.www.theintercept.com". So the zone confirmes the not-existence of that TLSA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: RRSIG, NSEC Validated: RRSIG-Owner _443._tcp.www.theintercept.com., Algorithm: 13, 5 Labels, original TTL: 1800 sec, Signature-expiration: 08.12.2023, 01:33:02 +, Signature-Inception: 05.12.2023, 23:33:02 +, KeyTag 34505, Signer-Name: theintercept.com






Status: Good. NoData-Proof required and found.






CAA-Query sends a valid NSEC RR as result with the query name "www.theintercept.com" equal the NSEC-owner "www.theintercept.com" and the NextOwner "\000.www.theintercept.com". So the zone confirmes the not-existence of that CAA RR, but the existence of that query name (minimal one RR with that name exists).
Bitmap: A, 13, MX, TXT, AAAA, LOC, SRV, NAPTR, CERT, SSHFP, RRSIG, NSEC, TLSA, 53, HIP, 61, 64, 65, URI Validated: RRSIG-Owner www.theintercept.com., Algorithm: 13, 3 Labels, original TTL: 1800 sec, Signature-expiration: 08.12.2023, 01:33:02 +, Signature-Inception: 05.12.2023, 23:33:02 +, KeyTag 34505, Signer-Name: theintercept.com






Status: Good. NoData-Proof required and found.

 

3. Name Servers

DomainNameserverNS-IP
www.theintercept.com
  dora.ns.cloudflare.com / 67m82

theintercept.com
  dora.ns.cloudflare.com / 67m78
108.162.192.108
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
172.64.32.108
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
173.245.58.108
San Francisco/California/United States (US) - Cloudflare, Inc.


 
2606:4700:50::adf5:3a6c
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.


 
2803:f800:50::6ca2:c06c
San José/Provincia de San Jose/Costa Rica (CR) - Cloudflare, Inc.


 
2a06:98c1:50::ac40:206c
London/England/United Kingdom (GB) - Cloudflare, Inc.


  lamar.ns.cloudflare.com / 67m75
108.162.195.142
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
162.159.44.142
Los Angeles/California/United States (US) - Cloudflare, Inc.


 
172.64.35.142
Toronto/Ontario/Canada (CA) - Cloudflare, Inc.


 
2606:4700:58::a29f:2c8e
Montreal/Quebec/Canada (CA) - Cloudflare, Inc.


 
2803:f800:50::6ca2:c38e
San José/Provincia de San Jose/Costa Rica (CR) - Cloudflare, Inc.


 
2a06:98c1:50::ac40:238e
London/England/United Kingdom (GB) - Cloudflare, Inc.

com
  a.gtld-servers.net / nnn1-par6


  b.gtld-servers.net / nnn1-eltxl1


  c.gtld-servers.net / nnn1-par6


  d.gtld-servers.net / nnn1-par6


  e.gtld-servers.net / nnn1-par6


  f.gtld-servers.net / nnn1-ham1


  g.gtld-servers.net / nnn1-wie3


  h.gtld-servers.net / nnn1-wie2


  i.gtld-servers.net / nnn1-ham5


  j.gtld-servers.net / nnn1-gblon-3


  k.gtld-servers.net / nnn1-gblon-3


  l.gtld-servers.net / nnn1-gblon-3


  m.gtld-servers.net / nnn1-gblon-3

 

4. SOA-Entries


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1701909129
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:8


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1701909144
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:5


Domain:theintercept.com
Zone-Name:theintercept.com
Primary:dora.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2325570287
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:12


Domain:www.theintercept.com
Zone-Name:theintercept.com
Primary:dora.ns.cloudflare.com
Mail:dns.cloudflare.com
Serial:2325570287
Refresh:10000
Retry:2400
Expire:604800
TTL:1800
num Entries:1


5. Screenshots

Startaddress: https://theintercept.com/, address used: https://theintercept.com/, Screenshot created 2023-12-07 01:36:03 +00:0

 

Mobil (412px x 732px)

 

958 milliseconds

 

Screenshot mobile - https://theintercept.com/
Mobil + Landscape (732px x 412px)

 

812 milliseconds

 

Screenshot mobile landscape - https://theintercept.com/
Screen (1280px x 1680px)

 

3267 milliseconds

 

Screenshot Desktop - https://theintercept.com/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport396732
content Size39612519

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://theintercept.com/
192.0.66.199
301
https://theintercept.com/
Html is minified: 109.46 %
0.073
A
Server: nginx
Date: Thu, 07 Dec 2023 00:33:31 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://theintercept.com/

• http://www.theintercept.com/
192.0.66.199
301
https://www.theintercept.com/
Html is minified: 109.46 %
0.053
A
Server: nginx
Date: Thu, 07 Dec 2023 00:33:31 GMT
Content-Type: text/html
Content-Length: 162
Connection: close
Location: https://www.theintercept.com/

• https://www.theintercept.com/
192.0.66.199
301
https://theintercept.com/

2.803
A
Server: nginx
Date: Thu, 07 Dec 2023 00:33:36 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 20
Connection: close
X-hacker: If you're reading this, you should visit wpvip.com/careers and apply to join the fun, mention this header.
Host-Header: a9130478a60e5f9135f765b23f26593b
onion-location: https://gm64cjz7un7ucso4yegkssuqfzmg7ctn7mkb66c7l6sj7gzyo6syphid.onion/
Permissions-Policy: camera=(), display-capture=(), geolocation=(), microphone=(), payment=(), usb=()
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: master-only
X-Download-Options: noopen
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
Expires: Thu, 07 Dec 2023 01:23:18 GMT
Cache-Control: max-age=3600
X-Redirect-By: WordPress
Location: https://theintercept.com/
X-rq: ams8 96 185 443
Content-Encoding: gzip
Age: 618
X-Cache: hit

• https://theintercept.com/
192.0.66.199
Inline-JavaScript (∑/total): 12/1002 Inline-CSS (∑/total): 13/18577
200

Html is minified: 133.59 %
Other inline scripts (∑/total): 6/2381
3.010
A
Server: nginx
Date: Thu, 07 Dec 2023 00:33:31 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 23831
Connection: close
X-hacker: If you're reading this, you should visit wpvip.com/careers and apply to join the fun, mention this header.
Host-Header: a9130478a60e5f9135f765b23f26593b
onion-location: https://gm64cjz7un7ucso4yegkssuqfzmg7ctn7mkb66c7l6sj7gzyo6syphid.onion/
Permissions-Policy: camera=(), display-capture=(), geolocation=(), microphone=(), payment=(), usb=()
Strict-Transport-Security: max-age=31536000
X-Permitted-Cross-Domain-Policies: master-only
X-Download-Options: noopen
X-Frame-Options: deny
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-rq: ams8 96 184 443
Cache-Control: max-age=300, must-revalidate
Content-Encoding: gzip
Age: 277
X-Cache: hit
Vary: Accept-Encoding
Accept-Ranges: bytes

• http://theintercept.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
192.0.66.199
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0
0.317

Visible Content: WP.com
Server: nginx
Date: Thu, 07 Dec 2023 00:33:40 GMT
Content-Type: text/plain;charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding,Cookie
Content-Encoding: gzip

• http://www.theintercept.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
192.0.66.199
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
200

Html is minified: 100.00 %
Other inline scripts (∑/total): 0/0
0.340

Visible Content: WP.com
Server: nginx
Date: Thu, 07 Dec 2023 00:33:41 GMT
Content-Type: text/plain;charset=utf-8
Transfer-Encoding: chunked
Connection: close
Vary: Accept-Encoding,Cookie
Content-Encoding: gzip

• https://192.0.66.199/
192.0.66.199
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
404

Html is minified: 110.61 %
Other inline scripts (∑/total): 0/0
2.027
N
Not Found
Certificate error: RemoteCertificateNameMismatch
small visible content (num chars: 19)
404 Not Found nginx
Server: nginx
Date: Thu, 07 Dec 2023 00:33:42 GMT
Content-Type: text/html
Content-Length: 146
Connection: close

 

7. Comments


1. General Results, most used to calculate the result

Aname "theintercept.com" is domain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 89449 (complete: 231048)
AGood: All ip addresses are public addresses
Warning: Only one ip address found: theintercept.com has only one ip address.
Warning: Only one ip address found: www.theintercept.com has only one ip address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: theintercept.com has no ipv6 address.
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: www.theintercept.com has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: non-www is preferred
AGood: No cookie sent via http.
AExcellent: Domain is in the Google-Preload-List
AExcellent: Domain is in the Mozilla/Firefox-Preload-List
HSTS-Preload-Status: Pending-removal. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):3 complete Content-Type - header (4 urls)
https://192.0.66.199/ 192.0.66.199


Url with incomplete Content-Type - header - missing charset
Ahttp://theintercept.com/ 192.0.66.199
301
https://theintercept.com/
Correct redirect http - https with the same domain name
Ahttp://www.theintercept.com/ 192.0.66.199
301
https://www.theintercept.com/
Correct redirect http - https with the same domain name
Mhttps://192.0.66.199/ 192.0.66.199
404

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://192.0.66.199/ 192.0.66.199
404

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain theintercept.com, 1 ip addresses.
Info: Checking all ip addresses of that domain without sending the hostname only one certificate found. Checking all ip addresses and sending the hostname only one certificate found. Both certificates are different. So that domain requires Server Name Indication (SNI), so the server is able to select the correct certificate.: Domain www.theintercept.com, 1 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.theintercept.com

2. Header-Checks (Cross-Origin-* headers are alpha - started 2024-06-05)

Atheintercept.com 192.0.66.199
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: no-referrer-when-downgrade
A
Permissions-Policy
Ok: Header without syntax errors found: camera=(), display-capture=(), geolocation=(), microphone=(), payment=(), usb=()
A
X-Frame-Options
Ok: Header without syntax errors found: deny
B

Info: Header is deprecated. May not longer work in modern browsers. deny. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Ftheintercept.com 192.0.66.199
Content-Security-Policy
Critical: Missing Header:

3. DNS- and NameServer - Checks

AInfo:: 7 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 2 Name Servers.
AInfo:: 7 Queries complete, 7 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 3.5 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 2 different Name Servers found: dora.ns.cloudflare.com, lamar.ns.cloudflare.com, 2 Name Servers included in Delegation: dora.ns.cloudflare.com, lamar.ns.cloudflare.com, 2 Name Servers included in 1 Zone definitions: dora.ns.cloudflare.com, lamar.ns.cloudflare.com, 1 Name Servers listed in SOA.Primary: dora.ns.cloudflare.com.
AGood: Only one SOA.Primary Name Server found.: dora.ns.cloudflare.com.
AGood: SOA.Primary Name Server included in the delegation set.: dora.ns.cloudflare.com.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: dora.ns.cloudflare.com, lamar.ns.cloudflare.com
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 2 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 2 Name Servers, 1 Top Level Domain: com
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: cloudflare.com
AGood: Name servers with different Country locations found: 2 Name Servers, 4 Countries: CA, CR, GB, US
AInfo: Ipv4-Subnet-list: 6 Name Servers, 4 different subnets (first Byte): 108., 162., 172., 173., 4 different subnets (first two Bytes): 108.162., 162.159., 172.64., 173.245., 6 different subnets (first three Bytes): 108.162.192., 108.162.195., 162.159.44., 172.64.32., 172.64.35., 173.245.58.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 6 Name Servers with IPv6, 3 different subnets (first block): 2606:, 2803:, 2a06:, 3 different subnets (first two blocks): 2606:4700:, 2803:f800:, 2a06:98c1:, 4 different subnets (first three blocks): 2606:4700:0050:, 2606:4700:0058:, 2803:f800:0050:, 2a06:98c1:0050:, 4 different subnets (first four blocks): 2606:4700:0050:0000:, 2606:4700:0058:0000:, 2803:f800:0050:0000:, 2a06:98c1:0050:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 12 good Nameserver
AGood: Nameserver supports Echo Capitalization: 12 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 12 good Nameserver
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 12 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

http://theintercept.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 192.0.66.199
200

Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect. May be a problem creating a Letsencrypt certificate. Checking /.well-known/acme-challenge/random-filename - a http status 404 - Not Found - is expected. If your server sends content and a http status 200, the validation file (87 bytes, token, dot and the hash of the public part of the account key) may be invisible, so Letsencrypt can't validate your domain. If it is an application that sends this content, perhaps create an exception, so /.well-known/acme-challenge sends raw files. Or create a redirect to another domain and / or port 443, but your Letsencrypt client must support such a solution. Certbot: Use webroot as authenticator - https://certbot.eff.org/docs/using.html Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
http://www.theintercept.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 192.0.66.199
200

Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect. May be a problem creating a Letsencrypt certificate. Checking /.well-known/acme-challenge/random-filename - a http status 404 - Not Found - is expected. If your server sends content and a http status 200, the validation file (87 bytes, token, dot and the hash of the public part of the account key) may be invisible, so Letsencrypt can't validate your domain. If it is an application that sends this content, perhaps create an exception, so /.well-known/acme-challenge sends raw files. Or create a redirect to another domain and / or port 443, but your Letsencrypt client must support such a solution. Certbot: Use webroot as authenticator - https://certbot.eff.org/docs/using.html Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://theintercept.com/ 192.0.66.199
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://theintercept.com/ 192.0.66.199
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
AGood: Some script Elements (type text/javascript) with a src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
https://theintercept.com/ 192.0.66.199
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 8 script elements without defer/async.
Warning: CSS / JavaScript found without Compression. Compress these ressources, gzip, deflate, br are checked. 3 external CSS / JavaScript files without GZip found - 14 with GZip, 17 complete
AGood: All images with internal compression not compressed. Some Images (.png, .jpg, .jpeg, .webp, .gif) are already compressed, so an additional compression isn't helpful. 1 images (type image/png, image/jpg) found without additional GZip. Not required because these images are already compressed
Warning: CSS / JavaScript files with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 15 external CSS / JavaScript files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 1 with Cache-Control max-age too short (minimum 7 days), 1 with Cache-Control long enough, 17 complete.
Warning: Images with a missing or too short Cache-Control header found. Browsers should cache and re-use these files. 36 image files without Cache-Control-Header, 0 with Cache-Control, but no max-age, 0 with Cache-Control max-age too short (minimum 7 days), 0 with Cache-Control long enough, 36 complete.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AGood: Some img-elements have a valid alt-attribute.: 36 img-elements found, 32 img-elements with correct alt-attributes (defined, not an empty value).
Wrong: img-elements without alt-attribute or empty alt-attribute found. The alt-attribute ("alternative") is required and should describe the img. So Screenreader and search engines are able to use these informations.: 4 img-elements without alt-attribute, 0 img-elements with empty alt-attribute found.
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
https://192.0.66.199/ 192.0.66.199
404
2.027 seconds
Warning: 404 needs more then one second
ADuration: 220433 milliseconds, 220.433 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
theintercept.com
192.0.66.199
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
theintercept.com
192.0.66.199
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=theintercept.com


2CN=R3, O=Let's Encrypt, C=US


3CN=ISRG Root X1, O=Internet Security Research Group, C=US


www.theintercept.com
192.0.66.199
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
supported
ok

www.theintercept.com
192.0.66.199
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - too much certificates, don't send root certificates

1CN=theintercept.com


2CN=R3, O=Let's Encrypt, C=US


3CN=ISRG Root X1, O=Internet Security Research Group, C=US


192.0.66.199
192.0.66.199
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

192.0.66.199
192.0.66.199
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.go-vip.co


2CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, C=GB, ST=Greater Manchester


3CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, C=US, ST=New Jersey

 

9. Certificates

1.
1.
CN=theintercept.com
08.10.2023
06.01.2024
333 days expired
theintercept.com, www.theintercept.com - 2 entries
1.
1.
CN=theintercept.com
08.10.2023

06.01.2024
333 days expired


theintercept.com, www.theintercept.com - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:SHA256 With RSA-Encryption
Serial Number:04C58DDC680920351000DE5708CBC2DBA55A
Thumbprint:075CEEBE174C64F616C1678234BFD7C094A8DC68
SHA256 / Certificate:m2bZstvauEps0xLhj7qlxLq3HYNdCWzwb5aATRDvkyY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d2b77feb69342d08e59233de5db166517be1df4f53f216d795da34126a119af5
SHA256 hex / Subject Public Key Information (SPKI):d2b77feb69342d08e59233de5db166517be1df4f53f216d795da34126a119af5 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://r3.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020
15.09.2025
expires in 285 days


2.
CN=R3, O=Let's Encrypt, C=US
04.09.2020

15.09.2025
expires in 285 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:00912B084ACF0C18A753F6D62E25A75F5A
Thumbprint:A053375BFE84E8B748782C7CEE15827A6AF5A405
SHA256 / Certificate:Z63RFmsCCuYbj1/JaBPATCqliZYHloZVcqPH5zdhPf0=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SHA256 hex / Subject Public Key Information (SPKI):8d02536c887482bc34ff54e41d2ba659bf85b341a0a20afadb5813dcfbcf286d
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3834 days


3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3834 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=*.go-vip.co
08.11.2023
09.12.2024
expires in 5 days
*.go-vip.co, go-vip.co - 2 entries
2.
1.
CN=*.go-vip.co
08.11.2023

09.12.2024
expires in 5 days


*.go-vip.co, go-vip.co - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:38F088668F1DFEAFDA24403314667E71
Thumbprint:8BCEA7A05C47A76A897B69D1C8385AC591A406E5
SHA256 / Certificate:GYRaOEzhUhDYds3DSNNdXBSH241uzxOqqf6jqW9TQ+o=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):1ce2d76d32e7620035837881fa821d1583290e8ceefd6e61c3043701a59a0b92
SHA256 hex / Subject Public Key Information (SPKI):1ce2d76d32e7620035837881fa821d1583290e8ceefd6e61c3043701a59a0b92 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.sectigo.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=*.go-vip.co
08.11.2023
09.12.2024
expires in 5 days
*.go-vip.co, go-vip.co - 2 entries

2.
CN=*.go-vip.co
08.11.2023

09.12.2024
expires in 5 days


*.go-vip.co, go-vip.co - 2 entries

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:38F088668F1DFEAFDA24403314667E71
Thumbprint:8BCEA7A05C47A76A897B69D1C8385AC591A406E5
SHA256 / Certificate:GYRaOEzhUhDYds3DSNNdXBSH241uzxOqqf6jqW9TQ+o=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):1ce2d76d32e7620035837881fa821d1583290e8ceefd6e61c3043701a59a0b92
SHA256 hex / Subject Public Key Information (SPKI):1ce2d76d32e7620035837881fa821d1583290e8ceefd6e61c3043701a59a0b92 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.sectigo.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018
01.01.2031
expires in 2219 days


3.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018

01.01.2031
expires in 2219 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.usertrust.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




4.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018
01.01.2031
expires in 2219 days


4.
CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, S=Greater Manchester, C=GB
02.11.2018

01.01.2031
expires in 2219 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:7D5B5126B476BA11DB74160BBC530DA7
Thumbprint:33E4E80807204C2B6182A3A14B591ACD25B5F0DB
SHA256 / Certificate:f6T/aOwEqZ11KNUIX5SQf00d0cU4G6zcgy7VyWAhRnY=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SHA256 hex / Subject Public Key Information (SPKI):e1ae9c3de848ece1ba72e0d991ae4d0d9ec547c6bad1dddab9d6beb0a7e0e0d8
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.usertrust.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




5.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
01.02.2010
19.01.2038
expires in 4794 days


5.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
01.02.2010

19.01.2038
expires in 4794 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:01FD6D30FCA3CA51A81BBC640E35032D
Thumbprint:2B8F1B57330DBBA2D07A6C51F70EE90DDAB9AD8E
SHA256 / Certificate:55PJsC/YqhPiHDEiisywgRlkO3SciYlksXRtRsPUy9I=
SHA256 hex / Cert (DANE * 0 1):e793c9b02fd8aa13e21c31228accb08119643b749c898964b1746d46c3d4cbd2
SHA256 hex / PublicKey (DANE * 1 1):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:





6.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
12.03.2019
01.01.2029
expires in 1489 days


6.
CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, S=New Jersey, C=US
12.03.2019

01.01.2029
expires in 1489 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA384 With RSA Encryption
Serial Number:3972443AF922B751D7D36C10DD313595
Thumbprint:D89E3BD43D5D909B47A18977AA9D5CE36CEE184C
SHA256 / Certificate:aLnHYSGaWx8BMXhEdGZdthu9sQngDwXKn3QkTuX19Ss=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SHA256 hex / Subject Public Key Information (SPKI):c784333d20bcd742b9fdc3236f4e509b8937070e73067e254dd3bf9c45bf4dde
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://ocsp.comodoca.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




7.
CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB
01.01.2004
01.01.2029
expires in 1489 days


7.
CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, S=Greater Manchester, C=GB
01.01.2004

01.01.2029
expires in 1489 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA-1 with RSA Encryption
Serial Number:01
Thumbprint:D1EB23A46D17D68FD92564C2F1F1601764D8E349
SHA256 / Certificate:16eg+11+JzHXcelITrze9x1fDD4KKUh4K8g+4OppnvQ=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SHA256 hex / Subject Public Key Information (SPKI):bd153ed7b0434f6886b17bce8bbe84ed340c7132d702a8f4fa318f756ecbd6f3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://theintercept.com/
192.0.66.199
a

96

0


0
0
0


form

2

0
1
0
0
0
0


img

36
4,413,914 Bytes
0
36
0
0
0
0


link
alternate
2

0


0
0
0


link
dns-prefetch
2

0


0
0
0


link
stylesheet
8

0
8
0
0
0
0


link
other
23
78,133 Bytes
0
18
0
0
0
0


meta
og
5
23,831 Bytes
0
1
0
0
0
0


meta
twitter
4

0


0
0
0


meta
other
6

0


0
0
0


script

9

0
8
1
1
0
0
-1

style

13
262,516 Bytes
0
13
0
0
0
0

 

Details

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://theintercept.com/
192.0.66.199
a

/


3
ok















a

/about/


1
ok















a

/feeds/


1
ok















a

/podcasts


1
ok















a

/podcasts/


1
ok















a

/privacy-policy/


2
ok















a

/source/#securedrop


1
ok















a

/terms-use


1
ok















a

/videos/


1
ok















a

https://flipboard.com/@TheIntercept


1
ok















a

https://join.theintercept.com/donate/now/?source=web_intercept_20221129_footer_nov-campaign-launch


1
ok















a

https://join.theintercept.com/donate/now/?source=web_intercept_20230103_global-nav&referrer_url=https%3A%2F%2Ftheintercept.com%2F


2
ok















a

https://join.theintercept.com/donate/now/?source=web_intercept_block


1
ok















a

https://journa.host/@theintercept


1
ok















a

https://theintercept.com/


1
ok















a

https://theintercept.com/2023/10/25/cop28-uae-oil-climate-sultan-al-jaber/


1
ok















a

https://theintercept.com/2023/10/29/william-nordhaus-climate-economics/


1
ok















a

https://theintercept.com/2023/10/31/plastics-pollution-advanced-recycling/


1
ok















a

https://theintercept.com/2023/11/09/new-york-norlite-hazardous-waste-green-amendment/


1
ok















a

https://theintercept.com/2023/11/15/google-israel-gaza-nimbus-protest/


1
ok















a

https://theintercept.com/2023/11/16/lexisnexis-cbp-surveillance-border/


1
ok















a

https://theintercept.com/2023/11/17/congo-hrw-nyu-security-data/


1
ok















a

https://theintercept.com/2023/11/21/facebook-ad-israel-palestine-violence/


1
ok















a

https://theintercept.com/2023/11/21/harvard-law-review-gaza-israel/


1
ok















a

https://theintercept.com/2023/11/22/american-university-fbi-posters-israel-palestine/


1
ok















a

https://theintercept.com/2023/11/25/biden-israel-weapons-stockpile-arms-gaza/


1
ok















a

https://theintercept.com/2023/11/25/military-weapons-iraq-syria-theft/


1
ok















a

https://theintercept.com/2023/11/26/palestine-israel-prisoners/


1
ok















a

https://theintercept.com/2023/11/27/nypd-misconduct-pre-litigation-settlements/


1
ok















a

https://theintercept.com/2023/11/28/bernie-sanders-conditioning-aid-israel/


1
ok















a

https://theintercept.com/2023/11/28/israel-ceasefire-congress-gaza/


1
ok















a

https://theintercept.com/2023/11/28/israel-palestine-history-peace/


1
ok















a

https://theintercept.com/2023/11/28/kidnapped-posters-israel-latin-america/


1
ok















a

https://theintercept.com/2023/11/29/biden-ukraine-immigration/


1
ok















a

https://theintercept.com/2023/11/29/ceasefire-congress-israel-gaza/


1
ok















a

https://theintercept.com/2023/11/29/henry-kissinger-death/


1
ok















a

https://theintercept.com/2023/11/29/india-assassination-plot-us-citizen-nikhil-gupta/


1
ok















a

https://theintercept.com/2023/11/30/henry-kissinger-israel-egypt-soviet-union/


1
ok















a

https://theintercept.com/2023/11/30/henry-kissinger-likud-party-israel/


1
ok















a

https://theintercept.com/2023/11/30/nypd-domestic-violence-lawsuit/


1
ok















a

https://theintercept.com/2023/12/02/intercepted-gaza-war-israel-hamas/


1
ok















a

https://theintercept.com/2023/12/04/nebraska-senate-dan-osborn-deb-fisher/


1
ok















a

https://theintercept.com/2023/12/05/aoc-aipac-squad-book/


1
ok















a

https://theintercept.com/2023/12/05/deconstructed-squad-audio-bernie-sanders/


2
ok















a

https://theintercept.com/2023/12/05/fossil-fuel-industry-media-company-advertising/


1
ok















a

https://theintercept.com/2023/12/05/rand-paul-syria-war-troops/


1
ok















a

https://theintercept.com/2023/12/06/ceasefire-letter-democrats-joyce-beatty/


1
ok















a

https://theintercept.com/2023/12/06/jon-stewart-for-president/


1
ok















a

https://theintercept.com/2023/12/06/pentagon-military-failures-waste/


1
ok















a

https://theintercept.com/2023/12/06/ron-desantis-supreme-court-monique-worrell/


1
ok















a

https://theintercept.com/about/


2
ok















a

https://theintercept.com/documents/


1
ok















a

https://theintercept.com/environment/


3
ok















a

https://theintercept.com/justice/


3
ok















a

https://theintercept.com/national-security/


3
ok















a

https://theintercept.com/newsletter/?campaign=web_footer


1
ok















a

https://theintercept.com/newsletter/?campaign=web_hamburger


1
ok















a

https://theintercept.com/policies-and-reports/


2
ok















a

https://theintercept.com/politics/


3
ok















a

https://theintercept.com/privacy-policy/


2
ok















a

https://theintercept.com/source/


2
ok















a

https://theintercept.com/special-investigations/


1
ok















a

https://theintercept.com/technology/


3
ok















a

https://theintercept.com/terms-use/


2
ok















a

https://theintercept.com/voices/


2
ok















a

https://theintercept.com/world/


3
ok















a

https://twitter.com/theintercept


1
ok















a

https://www.facebook.com/theinterceptflm


1
ok















a

https://www.firstlookinstitute.org/terms-of-use


1
ok















a

https://www.instagram.com/theintercept


1
ok















a

https://www.linkedin.com/showcase/the-intercept/


1
ok















a

https://www.tiktok.com/@theintercept


1
ok















a

https://www.youtube.com/theinterceptflm


1
ok















form




1
ok















form
get
/search/
302
https://theintercept.com
1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





20 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/10/GettyImages-1047733276-ft.jpg?resize=440%2C440
200

1
ok
alt: NEW HAVEN, CT - OCTOBER 08: Yale Professor William Nordhaus speaks during a press conference after winning the 2018 Nobel Prize in Economic Sciences at Yale University on October 8, 2018 in New Haven, Connecticut. Professor Nordhaus' research has been focused on the economics of climate change, economic growth and natural resources. (Photo by Eduardo Munoz Alvarez/Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 34225 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/10/GettyImages-1258540831-Sultan-Ahmed-Al-Jaber.jpg?resize=440%2C440
200

1
ok
alt: BONN, GERMANY - JUNE 8: Sultan Ahmed Al Jaber, President-Designate of the UNFCCC COP28 climate conference and CEO of the Abu Dhabi National Oil Company, speaks at a side event at the UNFCCC SB58 Bonn Climate Change Conference on June 8, 2023 in Bonn, Germany. The conference, which lays the groundwork for the adoption of decisions at the upcoming COP28 climate conference in Dubai in December, will run until June 15. (Photo by Sascha Schuermann/Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 37431 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/10/GettyImages-1475642641.jpg-1.jpg?resize=440%2C440
200

1
ok
alt: Seal Beach, CA - December 13: Plastic bottles and other trash is piled up along the bank of the San Gabriel River just a few hundred yards from the Pacific Ocean in Seal Beach on Tuesday morning, December 13, 2022. Recent heavy rains have sent trash flowing down the river from many miles inland. (Photo by Mark Rightmire/MediaNews Group/Orange County Register via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 82045 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/6778066.jpg?resize=440%2C440
200

1
ok
alt: Counter-ISIS Train and Equip Fund (CTEF) program divests 21 vehicles to BG Sherzad with the Ministry of Peshmerga valued at $5.3 million at Erbil Air Base, Iraq on August 11, 2021. The CTEF program supports Iraqi Counter Terrorism Headquarters with the equipment to enhance their fight against hostile forces. (U.S. Army photo by SFC Ernest Henderson)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 59495 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/AP17193571675443-cbp-facial-recognition.jpg?resize=440%2C440
200

1
ok
alt: U.S. Customs and Border Protection officer Julio Corro, right, helps a passenger navigate one of the new facial recognition kiosks at a United Airlines gate before boarding a flight to Tokyo, Wednesday, July 12, 2017, at George Bush Intercontinental Airport, in Houston. The Trump administration intends to require that American citizens boarding international flights submit to face scans, something Congress has not explicitly approved and privacy advocates consider an ill-advised step toward a surveillance state. (AP Photo/David J. Phillip)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 36610 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/AP22134498389604-nypd-lawsuit-mio-2023.jpg?resize=440%2C440
200

1
ok
alt: Police Officers from the 41st Precinct in the Bronx, NY investigate the scene where police shot and killed a suspect who fired at police on May 13, 2022. Plain clothes officers were investigating a separate case when they encountered a group in a dispute and an armed suspect fired at police officers, police returned fire striking the gunman fives times, the gunman died at a nearby hospital. (Photo by Steve Sanchez/Sipa USA)(Sipa via AP Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 39723 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/AP23052312606318-facebook-israel-palestine-post-moderation.jpg?fit=1024%2C512&resize=1024%2C512
200

1
ok
alt: A Facebook logo background behind a woman using her smartphone is seen on February 20, 2023 in L'Aquila, Italy. Meta CEO Mark Zuckerberg announced the launch of a paid subscription starting at $11.99 per month for users to authenticate their profiles on Meta platforms (Facebook, Instagram). (Photo by Lorenzo Di Cola/NurPhoto via AP)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 38243 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1185719137-kissinger.jpg?fit=1024%2C512&resize=1024%2C512
200

1
ok
alt: WASHINGTON, DC - NOVEMBER 05: Former U.S. Secretary of State Henry Kissinger speaks during a National Security Commission on Artificial Intelligence (NSCAI) conference November 5, 2019 in Washington, DC. The commission held a conference on "Strength Through Innovation: The Future of A.I. and U.S. National Security." (Photo by Alex Wong/Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 78119 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-141326726.jpg?fit=1024%2C512&resize=1024%2C512
200

1
ok
alt: NBC NEWS -- "Sadat's Visit to Israel: Henry Kissinger & Edwin Newman Discussion" -- Aired 1977 -- Pictured: (l-r) NBC News' Edwin Newman, former U.S. Secretary of State Henry Kissinger -- Photo by: NBC Newswireimage/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 112766 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1461805222.jpg?resize=440%2C440
200

1
ok
alt: NEW YORK, NEW YORK - FEBRUARY 02: Rep. Dan Goldman (D-NY) speaks during a press conference at the entrance of the migrant relief center at Brooklyn Cruise Terminal on February 02, 2023 in New York City. Dan Goldman (D-NY) spoke during a press conference after he and various elected officials took a tour of the temporary migrant relief center for adult men at the terminal. The center has been taking in migrants from the Watson Hotel after they were evicted from the premises in order to be relocated to the center. On Wednesday night, NYPD and DSNY cleared a group of migrants who refused relocatiing to the center citing inhumane conditions. (Photo by Michael M. Santiago/Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 28029 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1557581058.jpg?resize=440%2C440
200

1
ok
alt: The US Department of Justice (DOJ) headquarters in Washington, DC, US, on Thursday, July 27, 2023. Donald Trump's lawyers are expecting the former president to be indicted as soon as Thursday over attempts to overturn the result of the 2020 election, according to a person familiar with the matter. Photographer: Al Drago/Bloomberg via Getty Imagesimage/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 52063 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1673764568.jpg?resize=440%2C440
200

1
ok
alt: A masked witness leaves the military court in Goma, eastern Democratic Republic of Congo, during the trial against six soldiers accused of crimes against humanity and violating orders, on September 15, 2023. Six soldiers, including two officers of the elite Republican Guard, faced a military tribunal over the killing of nearly 50 people in a crackdown on an anti-UN protest in Goma. Congolese soldiers had on August 30, 2023 stopped a religious sect from holding a demonstration against United Nations peacekeepers in the city. (Photo by ALEXIS HUGUET / AFP) (Photo by ALEXIS HUGUET/AFP via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 46996 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1733431854-capitol.jpg?resize=440%2C440
200

1
ok
alt: WASHINGTON, DC - OCTOBER 13: The U.S. Capitol Building is secured in response to a call for a "Day of Rage" on October 13, 2023 in Washington, DC. Security has increased across the U.S. in response to last weekend's Hamas attacks on Israel. (Photo by Win McNamee/Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 27980 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1757644565.jpg?resize=440%2C440
200

1
ok
alt: WASHINGTON DC, UNITED STATES - NOVEMBER 01: Police take security measures as students of American University attend a campus protest against ongoing Israeli attacks on Gaza in Washington, D.C., United States on November 01, 2023. (Photo by Celal Gunes/Anadolu via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 58976 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1790168289.jpg?resize=440%2C440
200

1
ok
alt: NEW HAVEN, CT - NOVEMBER 18: Yale Bulldogs students protests for Palestine during the game as the Harvard Crimson take on the Yale Bulldogs on November 18, 2023 at the Yale Bowl, Class of 1954 Field in New Haven, CT (Photo by Williams Paul/Icon Sportswire via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 57923 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1793472720.jpg?resize=440%2C440
200

1
ok
alt: WASHINGTON, DC - NOVEMBER 14: Chairman U.S. Sen. Bernie Sanders (I-VT) arrives for a Senate Health, Education, Labor and Pensions Committee hearing on unions on November 14, 2023 in Washington, DC. Union leader testified before the Committee at a hearing titled, "Standing Up Against Corporate Greed: How Unions are Improving the Lives of Working Families." (Photo by Kevin Dietsch/Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 36768 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1794573033.jpg?resize=440%2C440
200

1
ok
alt: US President Joe Biden during a meeting to accelerate efforts to counter the flow of fentanyl into the United States in the Roosevelt Room of the White House in Washington, DC, US, on Tuesday, Nov. 21, 2023. The Biden administration's decision to remove a Chinese organization from a sanctions list as part of a deal to combat the fentanyl crisis marks an unusual concession to Beijing's complaints over US trade restrictions. Photographer: Shawn Thew/EPA/Bloomberg via Getty Imagesimage/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 42378 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1799477931.jpg?resize=440%2C440
200

1
ok
alt: WASHINGTON, DC - NOVEMBER 17: Pro-Palestinian activists hold a rally at Union Station on November 17, 2023 in Washington, DC. The group of activists attempted to shutdown Union Station as they called for a cease fire in the Israel-Hamas war. (Photo by Kevin Dietsch/Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 48966 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1802216654.jpg?resize=440%2C440
200

1
ok
alt: NEW YORK, NEW YORK - NOVEMBER 7: A kidnapped poster for hostages kidnapped on October 7 by Hamas in Israel is torn and covered with an anti_Israel sticker, November 7, 2023, in Greenwich Village, New York City, New York. (Photo by Andrew Lichtenstein/Corbis via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 72815 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1802700452_palestinian-prisoners_ft.jpg?resize=440%2C440
200

1
ok
alt: AL BIREH, WEST BANK - NOVEMBER 26: 39 Palestinians, brought by International Committee of the Red Cross vehicle, reunite with their relatives as they are released from Israeli Ofer prison as a part of Israel and Palestinian resistance group Hamas prisoner swap amid Humanitarian pause, according to Palestine Liberation Organization's prisoners in Al Bireh city of Ramallah, West Bank on November 26, 2023. Israeli authorities released 39 Palestinians, including 6 females, 33 minors as part of second batch of prisoner swap according to official Palestinian news agency WAFA. (Photo by Issam Rimawi/Anadolu via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 51874 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-1807268716-1.jpg?resize=440%2C440
200

1
ok
alt: GAZA CITY, GAZA - NOVEMBER 28: Gazans displaced due to Israeli attacks move towards the southern Gaza Strip through roads determined by the Israeli army as 'safe passage corridor' in Gaza City, Gaza on November 28, 2023. (Photo by Mustafa Hassona/Anadolu via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 68502 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/GettyImages-51223459.jpg?resize=440%2C440
200

1
ok
alt: JERUSALEM - SEPTEMBER 1: (NO U.S. TABLOID SALES) U.S. Secretary of State Henry Kissinger at the King David Hotel September 1, 1975 in Jerusalem, Israel. (Photo by David Hume Kennerly/Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 30980 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/google-surveillance.png?resize=440%2C440
200

1
ok
no alt-Attributeimage/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 225126 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/Norlite_TIPhotos_Edit1-1.jpg?fit=1024%2C628&resize=1024%2C628
200

1
ok
alt: The Norlite hazardous waste-burning plant in Cohoes, New York, seen on October 1st, 2023. (Photo: Rebecca Redelmeier)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 232358 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/11/trracy_mccarter_the_intercept.jpg?fit=1024%2C512&resize=1024%2C512
200

1
ok
no alt-Attributeimage/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 89169 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/AP23269802801855.jpg?resize=440%2C440
200

1
ok
alt: Sen. Rand Paul, R-Ky., arrives for votes as Congress returns to work in crisis mode with only a few days to go before a government shutdown, at the Capitol in Washington, Tuesday, Sept. 26, 2023. Sen. Paul has said he will not support funding for Ukraine in a continuing resolution to fund the government. (AP Photo/J. Scott Applewhite)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 32754 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/AP23281812238637-desantis.jpg?fit=1024%2C512&resize=1024%2C512
200

1
ok
alt: Republican presidential candidate and Florida Gov. Ron DeSantis speaks during a town hall at Refuge City Church, in northeast Cedar Rapids, Iowa, Sunday, Oct. 8, 2023. (Jim Slosiarek/The Gazette via AP)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 48115 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/AP23333744913860-AOC-FT.jpg?resize=440%2C440
200

1
ok
alt: House Natural Resources Subcommittee on Energy and Mineral Resources Ranking Member Alexandria Ocasio-Cortez (D-N.Y.) speaks during a hearing on Capitol Hill Nov. 29, 2023. (Francis Chung/POLITICO via AP Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 31561 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/deconstructed-squad-ft-1.jpg?resize=440%2C440
200

2
ok
alt: Sen. Bernie Sanders, I-Vt., speaks during a news conference on Capitol Hill in Washington, Wednesday, May 17, 2023, about Medicare for All. (AP Photo/Carolyn Kaster)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 18930 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/first-phase-gaza-war.jpg?resize=440%2C440
200

1
ok
no alt-Attributeimage/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 37668 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/GettyImages-1150560659-1.jpg?fit=1024%2C512&resize=1024%2C512
200

1
ok
alt: NEW YORK - JUNE 17: The Late Show with Stephen Colbert and guest Jon Stewart during Monday's June 17, 2019 show. (Photo by Scott Kowalchyk/CBS via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 77764 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/GettyImages-1246757600.jpg?fit=2686%2C1343
200

1
ok
alt: WASHINGTON, DC March 7, 2022: Rep. Joyce Beatty (D-OH) and Rep. Steven Horsford (D-NV) exit the West Wing following a meeting to discuss shared policy priorities at the White House on March 7, 2022. (Photo by Demetrius Freeman/The Washington Post via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 2151324 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/GettyImages-1572834836-US-senate.jpg?fit=1024%2C512&resize=1024%2C512
200

1
ok
alt: WASHINGTON, US - AUGUST 2: A view of the US Senate office as the US Capitol Police (USCP) clear office buildings after a report of an active shooter in Washington, US on August 2, 2023. (Photo by Celal Gunes/Anadolu Agency via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 143852 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/GettyImages-1601911930.jpg?fit=1024%2C512&resize=1024%2C512
200

1
ok
alt: WASHINGTON D.C., UNITED STATES - AUGUST 15 : Pentagon logo is seen ahead of a press conference at the Pentagon in Washington D.C., United States on August 15, 2023. (Photo by Celal Gunes/Anadolu Agency via Getty Images)image/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 91940 Bytes








img
src
https://theintercept.com/wp-content/uploads/2023/12/MediaGreenwashing_Banner-copy.jpg?resize=440%2C440
200

1
ok
no alt-Attributeimage/jpeg
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 71516 Bytes








link
alternate
https://theintercept.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ftheintercept.com%2F


1
ok















link
alternate
https://theintercept.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Ftheintercept.com%2F&format=xml


1
ok















link
apple-touch-icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/apple-touch-icon-114x114.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 560 Bytes








link
apple-touch-icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/apple-touch-icon-120x120.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 566 Bytes








link
apple-touch-icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/apple-touch-icon-144x144.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 650 Bytes








link
apple-touch-icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/apple-touch-icon-152x152.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 658 Bytes








link
apple-touch-icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/apple-touch-icon-180x180.png
206

1
ok
image/png
missing X-Content-Type-Options nosniff





770 Bytes








link
apple-touch-icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/apple-touch-icon-57x57.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 355 Bytes








link
apple-touch-icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/apple-touch-icon-60x60.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 381 Bytes








link
apple-touch-icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/apple-touch-icon-72x72.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 395 Bytes








link
apple-touch-icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/apple-touch-icon-76x76.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 416 Bytes








link
canonical
https://theintercept.com/


1
ok















link
dns-prefetch
//cdn.parsely.com


1
ok















link
dns-prefetch
//stats.wp.com


1
ok















link
icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/android-chrome-192x192.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 818 Bytes








link
icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/favicon-16x16.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 73 Bytes








link
icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/favicon-32x32.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 76 Bytes








link
icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/favicon-96x96.png
200

1
ok
image/png
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 83 Bytes








link
manifest
https://theintercept.com/wp-content/themes/intercept/assets/icons/manifest.json


1
ok















link
me
https://journa.host/@theintercept


1
ok















link
pingback
https://theintercept.com/xmlrpc.php


1
ok















link
preload
https://theintercept.com/wp-content/themes/intercept/assets/fonts/TIActuBetaBold.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 23312/23312 Bytes









link
preload
https://theintercept.com/wp-content/themes/intercept/assets/fonts/TIActuBetaHeavy.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 20404/20404 Bytes









link
preload
https://theintercept.com/wp-content/themes/intercept/assets/fonts/TIActuBetaMonoRegular.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 21604/21604 Bytes









link
preload
https://theintercept.com/wp-content/themes/intercept/assets/fonts/TI-Icons-2.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 7012/7012 Bytes









link
profile
http://gmpg.org/xfn/11


1
ok















link
shortcut icon
https://theintercept.com/wp-content/themes/intercept/assets/icons/favicon.ico
200

1
ok
image/x-icon
missing X-Content-Type-Options nosniff





No Cache-Control header
No Compression - 1988 Bytes








link
stylesheet
https://theintercept.com/wp-content/mu-plugins/jetpack-12.8/css/jetpack.css?ver=12.8.1
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 18716 Bytes






local SRI possible, possible hash-values:

 

sha256-J3+zDpGvGRYt4b2Y5jZO548GdyV8EY/UbQJVuD7q3VU=
sha384-u9vmkPz0m/itKMvCZRslTOQsq0fPxxLCH1Psc6F6wzJz5VG1ztrWWDcyfmf9p+t7
sha512-HhzgWwghVE7WIfrfrADYrNKzbdzIZCZd21cDb2mxWxpz6+ic6wuvfRGLH9xkqP2IvnRt74bSi42idgsTEjhhdA==

 

<link rel="stylesheet" href="https://theintercept.com/wp-content/mu-plugins/jetpack-12.8/css/jetpack.css?ver=12.8.1" crossorigin="anonymous" integrity="sha256-J3+zDpGvGRYt4b2Y5jZO548GdyV8EY/UbQJVuD7q3VU=" />


Content loaded via url("...")

 

../modules/shortcodes/images/collapse.png1
../modules/shortcodes/images/expand.png1
../modules/shortcodes/images/slide-nav.png1
../modules/shortcodes/img/slideshow-controls.png1
../modules/shortcodes/img/slideshow-controls-2x.png1
data:application/font-woff;charset=utf-8;base64, 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
data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 24 24'%3E%3Cpath fill='none' d='M0 0h24v24H0z'/%3E%3Cpath fill='%232EA2CC' d='m12 2 2.582 6.953L22 9.257l-5.822 4.602L18.18 21 12 16.89 5.82 21l2.002-7.14L2 9.256l7.418-.304'/%3E%3C/svg%3E1
https://secure.gravatar.com/images/grav-share-sprite.png1
https://secure.gravatar.com/images/grav-share-sprite-2x.png1

link
stylesheet
https://theintercept.com/wp-content/themes/intercept/blocks/category-showcase/category-showcase.css?ver=6.4.2
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
0 Bytes






local SRI possible, possible hash-values:

 

sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=
sha384-OLBgp1GsljhM2TJ+sbHjaiH9txEUvgdDTAzHv2P24donTt6/529l+9Ua0vFImLlb
sha512-z4PhNX7vuL3xVChQ1m2AB9Yg5AULVxXcg/SpIdNs6c5H0NE8XYXysP+DGNKHfuwvY7kxvUdBeoGlODJ6+SfaPg==

 

<link rel="stylesheet" href="https://theintercept.com/wp-content/themes/intercept/blocks/category-showcase/category-showcase.css?ver=6.4.2" crossorigin="anonymous" integrity="sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=" />



link
stylesheet
https://theintercept.com/wp-content/themes/intercept/blocks/podcast-showcase/podcast-showcase.css?ver=6.4.2
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
0 Bytes






local SRI possible, possible hash-values:

 

sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=
sha384-OLBgp1GsljhM2TJ+sbHjaiH9txEUvgdDTAzHv2P24donTt6/529l+9Ua0vFImLlb
sha512-z4PhNX7vuL3xVChQ1m2AB9Yg5AULVxXcg/SpIdNs6c5H0NE8XYXysP+DGNKHfuwvY7kxvUdBeoGlODJ6+SfaPg==

 

<link rel="stylesheet" href="https://theintercept.com/wp-content/themes/intercept/blocks/podcast-showcase/podcast-showcase.css?ver=6.4.2" crossorigin="anonymous" integrity="sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=" />



link
stylesheet
https://theintercept.com/wp-content/themes/intercept/blocks/top-stories/top-stories.css?ver=6.4.2
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
0 Bytes






local SRI possible, possible hash-values:

 

sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=
sha384-OLBgp1GsljhM2TJ+sbHjaiH9txEUvgdDTAzHv2P24donTt6/529l+9Ua0vFImLlb
sha512-z4PhNX7vuL3xVChQ1m2AB9Yg5AULVxXcg/SpIdNs6c5H0NE8XYXysP+DGNKHfuwvY7kxvUdBeoGlODJ6+SfaPg==

 

<link rel="stylesheet" href="https://theintercept.com/wp-content/themes/intercept/blocks/top-stories/top-stories.css?ver=6.4.2" crossorigin="anonymous" integrity="sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=" />



link
stylesheet
https://theintercept.com/wp-content/themes/intercept/css/app.css?ver=e2c2f7cd7bd87049e0e50a4ee6dfeea3
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 24113 Bytes






local SRI possible, possible hash-values:

 

sha256-O3+n9fOGZdrd9KtlO9TiRE0pguV4Lzxuucxu8VpJfyM=
sha384-95MwVF/gRfFR1gO8kvVtqS0wUVZ8b/TDWfkNh5qKMhfArKmyI8nBV20jWIekSbhp
sha512-uZ9Q3FORHrw3klcT9XwzPQfNCurnGEBHkzYqkLV+hAXfJPSOzlw1pV7gf8oUQat/wRDMzwdNbl+FPrI+dsRrFg==

 

<link rel="stylesheet" href="https://theintercept.com/wp-content/themes/intercept/css/app.css?ver=e2c2f7cd7bd87049e0e50a4ee6dfeea3" crossorigin="anonymous" integrity="sha256-O3+n9fOGZdrd9KtlO9TiRE0pguV4Lzxuucxu8VpJfyM=" />


Content loaded via url("...")

 

#bleed1
data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Ccircle cx='8' cy='8' r='3'/%3E%3C/svg%3E1
data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='%23fff' viewBox='0 0 16 16'%3E%3Cpath d='M12.207 4.793a1 1 0 0 1 0 1.414l-5 5a1 1 0 0 1-1.414 0l-2-2a1 1 0 0 1 1.414-1.414L6.5 9.086l4.293-4.293a1 1 0 0 1 1.414 0z'/%3E%3C/svg%3E1
data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 16 16'%3E%3Cpath stroke='%23fff' stroke-linecap='round' stroke-linejoin='round' stroke-width='2' d='M4 8h8'/%3E%3C/svg%3E1
data:image/svg+xml;charset=utf-8,%3Csvg xmlns='http://www.w3.org/2000/svg' fill='none' viewBox='0 0 20 20'%3E%3Cpath stroke='%236b7280' stroke-linecap='round' stroke-linejoin='round' stroke-width='1.5' d='m6 8 4 4 4-4'/%3E%3C/svg%3E1

link
stylesheet
https://theintercept.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.2
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 14909 Bytes






local SRI possible, possible hash-values:

 

sha256-aYuJwNo9MZdU1qg3tebU5qQtxALZ/9dVm4xMspxkQ0A=
sha384-xwz/C6+Xz3MkpWXUguEG7sTOkyjOEXXt4WvTrjkRltsn9pOhUmEs24uH0C0NxI1I
sha512-0Zky9krb2xKGth1HJSb+C+kuX82+z535ydxgfUbib4kSx0KUJW8aa1bQ+xSndGeUBxh+7QEfS1twCJgapS9t9g==

 

<link rel="stylesheet" href="https://theintercept.com/wp-includes/css/dist/block-library/style.min.css?ver=6.4.2" crossorigin="anonymous" integrity="sha256-aYuJwNo9MZdU1qg3tebU5qQtxALZ/9dVm4xMspxkQ0A=" />


Content loaded via url("...")

 

data:image/svg+xml;utf8,<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"><circle cx="50" cy="50" r="50"/></svg>2

link
stylesheet
https://theintercept.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 2593 Bytes






local SRI possible, possible hash-values:

 

sha256-t5CKAVpWfsI2MBHfJHU2jb/zQ2Dp2j/f9QYE1jlftkY=
sha384-1c9SFD+1lW81lsH5QB5cvZ/D26GhBB8/qaqS14v6qOI026BwkaSmdn4dHoRHlCKA
sha512-/mTP+VCSG9+D7An+ecpc5S3kD1uHiGl+sdeygFXygXd4NH1dPIGjJIAcfscVGz7g7umbKILDw7EL12A0LTvz5w==

 

<link rel="stylesheet" href="https://theintercept.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17" crossorigin="anonymous" integrity="sha256-t5CKAVpWfsI2MBHfJHU2jb/zQ2Dp2j/f9QYE1jlftkY=" />


Content loaded via url("...")

 

mejs-controls.svg3

link
stylesheet
https://theintercept.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.4.2
200

1
ok
text/css
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 1161 Bytes






local SRI possible, possible hash-values:

 

sha256-LhDTU/8DjCytNJL8F4Aa8+bvJmnJ6XE723ix3LEExP4=
sha384-6noW8xmd4Z0DJ7Hymr6LrTimeh9+qJB5k7AEcUCA2uoLmIt/Z8TSy8GfMRQXeS+s
sha512-LUCh5xM1Xv+I+ju/VHG021rMSPorl4pVXANPLlx/Ex/K9I6EnV0EjfnV2uBoxLZGepex3emRFeazL1fpKFafwQ==

 

<link rel="stylesheet" href="https://theintercept.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.4.2" crossorigin="anonymous" integrity="sha256-LhDTU/8DjCytNJL8F4Aa8+bvJmnJ6XE723ix3LEExP4=" />



meta
charset
UTF-8


1
ok















meta
article:modified_time
2023-12-06T22:08:15+00:00


1
ok















meta
og:locale
en_US


1
ok















meta
og:site_name
The Intercept


1
ok















meta
og:title
Homepage


1
ok















meta
og:type
website


1
ok















meta
og:url
https://theintercept.com/
200

1
ok
text/html; charset=UTF-8
X-Content-Type-Options nosniff found





23831 Bytes








meta
generator
Site Kit by Google 1.106.0


1
ok















meta
robots
index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1


1
ok















meta
theme-color
#000000


1
ok















meta
twitter:card
summary_large_image


1
ok















meta
twitter:data1
The Intercept


1
ok















meta
twitter:label1
Written by


1
ok















meta
twitter:site
@theintercept


1
ok















meta
viewport
width=device-width


1
ok















script
src
https://cdn.parsely.com/keys/theintercept.com/p.js?ver=3.8.4
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





Compression required: 26489 Bytes






local SRI possible, possible hash-values:

 

sha256-UE47N5ovgI2+QZJhVd/X28bO9496T4WK0InLMiU2wCI=
sha384-EuyDLcZtIUIIAduqIedbyeB9QQJxCgVuEHB6aX5Stv5j5WWakSffas+dGyUy4iLu
sha512-gQLj9Df5ZcIJQuSRzGTCk+VSNqB1gSAXqZa1ehDyjhqcyKSpHD/EJx6xxBuFCkbBtJuhi00n+ErJbaGwdwf9zw==

 

<script src="https://cdn.parsely.com/keys/theintercept.com/p.js?ver=3.8.4" crossorigin="anonymous" integrity="sha256-UE47N5ovgI2+QZJhVd/X28bO9496T4WK0InLMiU2wCI=" />



script
src
https://stats.wp.com/e-202349.js
200

1
ok
defer attribute found application/javascript
missing X-Content-Type-Options nosniff





Cache-Control: max-age=31536000 - with long duration found.
Compression required: 2546 Bytes






Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-yndS+zPPOpjA8pvE7sVjESAl2kEJoNzGnav1+GF1Elg=
sha384-GSCMvd8jwgGUOX2fSBfd/Z3jl0jURmU+oCDUAukpIRpvebRMtn1v7TPbbzo89uh5
sha512-uZCV66ExFyA7mUSs4nS3Fev/HlMzerEN79/wkhuvI0u4jXFoJTNRehnYtlT1PDc3WIXNgVKJugI/+vy/UBMtjw==

 

<script src="https://stats.wp.com/e-202349.js" crossorigin="anonymous" integrity="sha256-yndS+zPPOpjA8pvE7sVjESAl2kEJoNzGnav1+GF1Elg=" />



script
src
https://theintercept.com/wp-content/client-mu-plugins/wp-parsely/build/loader.js?ver=1d54726e91ce976b3e82
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 1151 Bytes






local SRI possible, possible hash-values:

 

sha256-li6qPBohMM6GiRBbtG1kVJcpJ9dh2d8w3TV8k3MEC1Q=
sha384-43lnqAJ8BQy1qS8Fd/XOWIZNjHBcNvjwigBxpRyp9EVMUcRf7L3jDaw/T+IziRQf
sha512-N3MUfVhJRbHc6BXK+nDXfsaJLLYz1CenISm85NGQwih6tmB3RezedHi3Zr07qGXS8vF9O/94oYPWTUi4lALdYg==

 

<script src="https://theintercept.com/wp-content/client-mu-plugins/wp-parsely/build/loader.js?ver=1d54726e91ce976b3e82" crossorigin="anonymous" integrity="sha256-li6qPBohMM6GiRBbtG1kVJcpJ9dh2d8w3TV8k3MEC1Q=" />



script
src
https://theintercept.com/wp-content/mu-plugins/jetpack-12.8/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false&ver=132249e245926ae3e188
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





No Cache-Control - header
383 Bytes






local SRI possible, possible hash-values:

 

sha256-J92bB1zFnPXzwPbuB19L0RN4LYHOMKTxaqxmns/cT6I=
sha384-/2CiR+UpvrLWQlFbxAYEa7qnFOlqyv8AlZE1L8ZEjUXd5LlEOAwXqTrxT6+21eEg
sha512-aYJLI3ybIr8LNV7GhP9dt/sTCQQhqyG6ShZ/RTtZiyVQsE2VhqnfumGeA29tVyP6CIIUpcMIMcYiJOYabCYLXQ==

 

<script src="https://theintercept.com/wp-content/mu-plugins/jetpack-12.8/jetpack_vendor/automattic/jetpack-image-cdn/dist/image-cdn.js?minify=false&ver=132249e245926ae3e188" crossorigin="anonymous" integrity="sha256-J92bB1zFnPXzwPbuB19L0RN4LYHOMKTxaqxmns/cT6I=" />



script
src
https://theintercept.com/wp-content/themes/intercept/js/app.js?ver=8e3789088313edc1535e169afbd6e5c8
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 54935 Bytes






local SRI possible, possible hash-values:

 

sha256-KgDuUdOdY1KmsSKO8aN5OoSt8sqamV8rz6hysYsjVvg=
sha384-FL37VsPT0ABztS7JhbEsOikFjYK5SkkLqMAEztiW9AwMrWWVoW2GqKeKRdXiA/6F
sha512-X0C8ddo4jnprEmQq3EGg2oX240Mg4xPeFckpnQkPq768n+eQHrDEwHKT/EHDpUeBLLxFFnyosJ6xF3pwdnockQ==

 

<script src="https://theintercept.com/wp-content/themes/intercept/js/app.js?ver=8e3789088313edc1535e169afbd6e5c8" crossorigin="anonymous" integrity="sha256-KgDuUdOdY1KmsSKO8aN5OoSt8sqamV8rz6hysYsjVvg=" />



script
src
https://theintercept.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 1569 Bytes






local SRI possible, possible hash-values:

 

sha256-eGhGfJSlqgs/Ee9UL0UoeWf5Yns7Ws3Ibkf493oSZZY=
sha384-/8/7LbHlet9wZt7XxL4Mj5jqsI5FlDPtceX99d2JFVLg88Xayz9plapE0xoxFbiI
sha512-f+wwzEIjw52e48y7qMxmyQRnqZhyeTNL5DquTCUfbGGPazzPIjFHx5zmxGPInwzrDQ5ORxrZq2V0qzKvcopTXw==

 

<script src="https://theintercept.com/wp-includes/js/dist/hooks.min.js?ver=c6aec9a8d4e5a5d543a1" crossorigin="anonymous" integrity="sha256-eGhGfJSlqgs/Ee9UL0UoeWf5Yns7Ws3Ibkf493oSZZY=" />



script
src
https://theintercept.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 2504 Bytes






local SRI possible, possible hash-values:

 

sha256-HVLhrH07wlqLD/wlcVP53VAkn5b+mk314NdxJBppBiw=
sha384-jS/L14ElKxFgoKz/Z+uAUlgqxVINPJf3W3ACEv8ANQ+auInATFm8VqMeW3/qSBer
sha512-PENY+WBfHM4JfzZokJm4NkxDzDYMPU9cp3vlzuQ7uBjGViSW8mrVfORMNMR0/kzLbe7QGhTtJZ1Jj1vBf5Uyxw==

 

<script src="https://theintercept.com/wp-includes/js/dist/vendor/regenerator-runtime.min.js?ver=0.14.0" crossorigin="anonymous" integrity="sha256-HVLhrH07wlqLD/wlcVP53VAkn5b+mk314NdxJBppBiw=" />



script
src
https://theintercept.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 36402 Bytes






local SRI possible, possible hash-values:

 

sha256-2p7VcgtnTw0pf+YhrC2NUYxOYivvHpsNSuSJ3umqQ/g=
sha384-sRXgFnxefXPlMKhlzENqURD6ACQT8Za9fTqX3V8/ORWyxgz2RWiFU2OhPE5cX1Uu
sha512-3jv15ZXtQiWPzebZOtQMDZ3I5SP44B/Mk8pliFiPrQeibXEVxlg0hr4oamzX+jVyAJGHavsKqi3k3ljDcBUePQ==

 

<script src="https://theintercept.com/wp-includes/js/dist/vendor/wp-polyfill.min.js?ver=3.15.0" crossorigin="anonymous" integrity="sha256-2p7VcgtnTw0pf+YhrC2NUYxOYivvHpsNSuSJ3umqQ/g=" />



script
src
https://theintercept.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2
200

1
ok
Missing defer / async attribute. application/javascript
missing X-Content-Type-Options nosniff





No Cache-Control - header
Compression required: 2487 Bytes






local SRI possible, possible hash-values:

 

sha256-wamj4iO61jHf8S0ztUmesUXLCNhiHCDZ1zhw542Xr+Q=
sha384-4LziD8jNgFweZKF2qS41j7CKVH+n3+jDSEpWrqqgs/DQMEbErxBVh352wCwo6aWJ
sha512-Bcs2c0SKeaqBiHxgqCq6UfmoQ9wTq0/Dmz5tiufWMnMtmv769y/D0ZfCeVozZP39T4PJtihkTZjxyQF7/UNeYg==

 

<script src="https://theintercept.com/wp-includes/js/dist/vendor/wp-polyfill-inert.min.js?ver=3.1.2" crossorigin="anonymous" integrity="sha256-wamj4iO61jHf8S0ztUmesUXLCNhiHCDZ1zhw542Xr+Q=" />



style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/SwiftNeueBlack.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 19760/19760 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/SwiftNeueBold.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 20748/20748 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/SwiftNeueBoldItalic.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 21264/21264 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/SwiftNeueRegular.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 20388/20388 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/SwiftNeueRegularItalic.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 21572/21572 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/SwiftNeueSemiBold.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 20848/20848 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/TIActuBetaBold.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 23312/23312 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/TIActuBetaHeavy.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 20404/20404 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/TIActuBetaLight.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 20792/20792 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/TIActuBetaMonoBold.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 21620/21620 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/TIActuBetaMonoRegular.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 21604/21604 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/TIActuBetaRegular.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 23192/23192 Bytes









style

https://theintercept.com/wp-content/themes/intercept/assets/fonts/TI-Icons-2.woff2
200

1
ok
application/font-woff2
missing X-Content-Type-Options nosniff


This Combination of MediaType "application" and MediaSubType "font-woff2" is deprecated. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination.


No Cache-Control header
Unknown Mime Type: application/font-woff2
Compression (): 7012/7012 Bytes








 

12. Html-Parsing via https://validator.nu/ / https://validator.w3.org/nu/ (started 2024-09-28, 09:00, alpha)

  Unfortunately, there are differences between the first used validator.nu and validator.w3.org/nu/ - switched to validator.w3.org/nu/. Looks like some error messages (link - fetchpriority attribute) of validator.nu are obsolete, not seen in the w3.org-version and not found in the current specification: link may have a fetchpriority attribute.

Small Code update, wait one minute

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: dora.ns.cloudflare.com, lamar.ns.cloudflare.com

 

QNr.DomainTypeNS used
1
com
NS
k.root-servers.net (2001:7fd::1)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
dora.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8
3
lamar.ns.cloudflare.com
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: ns3.cloudflare.com, ns4.cloudflare.com, ns5.cloudflare.com, ns6.cloudflare.com, ns7.cloudflare.com

Answer: ns3.cloudflare.com
162.159.0.33, 162.159.7.226, 2400:cb00:2049:1::a29f:21, 2400:cb00:2049:1::a29f:7e2

Answer: ns4.cloudflare.com
162.159.1.33, 162.159.8.55, 2400:cb00:2049:1::a29f:121, 2400:cb00:2049:1::a29f:837

Answer: ns5.cloudflare.com
162.159.2.9, 162.159.9.55, 2400:cb00:2049:1::a29f:209, 2400:cb00:2049:1::a29f:937

Answer: ns6.cloudflare.com
162.159.3.11, 162.159.5.6, 2400:cb00:2049:1::a29f:30b, 2400:cb00:2049:1::a29f:506

Answer: ns7.cloudflare.com
162.159.4.8
4
dora.ns.cloudflare.com: 108.162.192.108, 172.64.32.108, 173.245.58.108
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
5
dora.ns.cloudflare.com: 2606:4700:50::adf5:3a6c, 2803:f800:50::6ca2:c06c, 2a06:98c1:50::ac40:206c
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
6
lamar.ns.cloudflare.com: 108.162.195.142, 162.159.44.142, 172.64.35.142
A
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)
7
lamar.ns.cloudflare.com: 2606:4700:58::a29f:2c8e, 2803:f800:50::6ca2:c38e, 2a06:98c1:50::ac40:238e
AAAA
ns3.cloudflare.com (2400:cb00:2049:1::a29f:21)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.theintercept.com
0

no CAA entry found
1
0
theintercept.com
0

no CAA entry found
1
0
com
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
theintercept.com

ok
1
0
www.theintercept.com

ok
1
0
_acme-challenge.theintercept.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.theintercept.com

Name Error - The domain name does not exist
1
0
_acme-challenge.theintercept.com.theintercept.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.theintercept.com.theintercept.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.theintercept.com.www.theintercept.com

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

theintercept.com
10
mail.protonmail.ch
02ok

A


176.119.200.128
03ok

A


185.70.42.128
03ok

A


185.205.70.128
03ok

CNAME


00ok
MX

theintercept.com
20
mailsec.protonmail.ch
02ok

A


185.70.42.129
03ok

A


176.119.200.129
03ok

A


185.205.70.129
03ok

CNAME


00ok
_dmarc
TXT
_dmarc.theintercept.com

v=DMARC1; p=none
ok

 

 

17. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
theintercept.com
192.0.66.199
443
5 Ciphers40.75 sec
0 without, 5 FS
100.00 %
www.theintercept.com
192.0.66.199
443
5 Ciphers40.84 sec
0 without, 5 FS
100.00 %
Complete

2
10 Ciphers
5.00 Ciphers/Check
81.59 sec40.79 sec/Check
0 without, 10 FS
100.00 %

Details
DomainIPPortCipher (OpenSsl / IANA)
theintercept.com
192.0.66.199
443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
5 Ciphers, 40.75 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x0A
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x09
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1

www.theintercept.com
192.0.66.199
443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
5 Ciphers, 40.84 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x0A
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA

ECDH
ECDSA
AES(256)
SHA1




ECDHE-ECDSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x09
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA

ECDH
ECDSA
AES(128)
SHA1

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=70bc053e-815f-4683-9e8f-2d93be4e79a4

 

Last Result: https://check-your-website.server-daten.de/?q=theintercept.com - 2023-12-07 01:32:34

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=theintercept.com" target="_blank">Check this Site: theintercept.com</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=theintercept.com