Check DNS, Urls + Redirects, Certificates and Content of your Website

0 in Queue, 0 of max. 8 Checks (16:31:08)
Why should you only use Prefix - Cookies? |
Hall of Fame - A+ and A

 

Shortcuts: 1. IP-Addresses | 2. DNSSEC | 3. Name Servers | 4. SOA-Entries | 5. Screenshots | 6. Url-Checks | 7. Comments | 8. Connections | 9. Certificates | 10. CT-Logs | 11. Html-Content | 12. Html-Parsing | 13. NameServer-IPAddresses | 14. CAA | 15. TXT | 16. DomainServiceEntries | 17. Cipher Suites | 18. Portchecks |

 

N

 

No trusted Certificate

 

Checked:
12.03.2025 13:05:45

 

Older results

 

N - 12.03.2025 12:51:02

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
vibrant-beaver.185-221-172-230.plesk.page


yes
3
3
www.vibrant-beaver.185-221-172-230.plesk.page


yes
3
3
www.vibrant-beaver.185-221-172-230.plesk.page
A
185.221.172.230
Milan/Lombardy/Italy (IT) - Keliweb S.R.L
No Hostname found
no


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






• Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 26470, Flags 256






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.04.2025, 00:00:00 +, Signature-Inception: 12.03.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: page

page
1 DS RR in the parent zone found






DS with Algorithm 8, KeyTag 64712, DigestType 2 and Digest m+EwO4YYfff46+HFG8cMK/obwSq5g4OsKn0OGJFCkvU=






1 RRSIG RR to validate DS RR found






RRSIG-Owner page., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 25.03.2025, 05:00:00 +, Signature-Inception: 12.03.2025, 04:00:00 +, KeyTag 26470, Signer-Name: (root)






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 26470 used to validate the DS RRSet in the parent zone






2 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 6615, Flags 256






Public Key with Algorithm 8, KeyTag 64712, Flags 257 (SEP = Secure Entry Point)






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner page., Algorithm: 8, 1 Labels, original TTL: 300 sec, Signature-expiration: 01.04.2025, 00:23:30 +, Signature-Inception: 10.03.2025, 00:23:30 +, KeyTag 64712, Signer-Name: page






• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 64712 used to validate the DNSKEY RRSet






• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 64712, DigestType 2 and Digest "m+EwO4YYfff46+HFG8cMK/obwSq5g4OsKn0OGJFCkvU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: plesk.page

plesk.page
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "a86iv2sd204f3kbblbt9t7u7tqqnd692" between the hashed NSEC3-owner "a86iv2sd204f3kbblbt9t7u7tqqnd692" and the hashed NextOwner "a87gha729b5crj1lrrmkhdsq84ujot5n". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: No Bitmap? Validated: RRSIG-Owner a86iv2sd204f3kbblbt9t7u7tqqnd692.page., Algorithm: 8, 2 Labels, original TTL: 900 sec, Signature-expiration: 01.04.2025, 00:23:30 +, Signature-Inception: 10.03.2025, 00:23:30 +, KeyTag 6615, Signer-Name: page






0 DNSKEY RR found









Zone: 185-221-172-230.plesk.page

185-221-172-230.plesk.page
0 DS RR in the parent zone found



Zone: vibrant-beaver.185-221-172-230.plesk.page

vibrant-beaver.185-221-172-230.plesk.page
0 DS RR in the parent zone found



Zone: www.vibrant-beaver.185-221-172-230.plesk.page

www.vibrant-beaver.185-221-172-230.plesk.page
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
plesk.page
T  ns1.pdns.tech
52.16.254.198
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.

T 
54.246.175.138
Dublin/Leinster/Ireland (IE) - Amazon.com, Inc.

T  ns2.pdns.tech
44.224.42.162
Portland/Oregon/United States (US) - Amazon.com, Inc.

T 
52.24.135.200
Portland/Oregon/United States (US) - Amazon.com, Inc.

T  ns3.pdns.tech / ip-172-16-3-118
13.237.15.234
Sydney/New South Wales/Australia (AU) - Amazon Technologies Inc.

T 
52.62.161.7
Sydney/New South Wales/Australia (AU) - Amazon.com, Inc.
page
•  ns-tld1.charlestonroadregistry.com
•

•  ns-tld2.charlestonroadregistry.com
•

•  ns-tld3.charlestonroadregistry.com
•

•  ns-tld4.charlestonroadregistry.com
•

•  ns-tld5.charlestonroadregistry.com
•

 

4. SOA-Entries


Domain:page
Zone-Name:page
Primary:ns-tld1.charlestonroadregistry.com
Mail:cloud-dns-hostmaster.google.com
Serial:1
Refresh:21600
Retry:3600
Expire:259200
TTL:900
num Entries:5


Domain:plesk.page
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:6


5. Screenshots

Startaddress: https://www.vibrant-beaver.185-221-172-230.plesk.page/, address used: https://www.vibrant-beaver.185-221-172-230.plesk.page/, Screenshot created 2025-03-12 13:15:15 +00:0 url is insecure, certificate invalid

 

Mobil (412px x 732px)

 

1032 milliseconds

 

Screenshot mobile - https://www.vibrant-beaver.185-221-172-230.plesk.page/
Mobil + Landscape (732px x 412px)

 

1036 milliseconds

 

Screenshot mobile landscape - https://www.vibrant-beaver.185-221-172-230.plesk.page/
Screen (1280px x 1680px)

 

1142 milliseconds

 

Screenshot Desktop - https://www.vibrant-beaver.185-221-172-230.plesk.page/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport412732
content Size412732

 

Good: No horizontal scrollbar. Content-size width = visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://www.vibrant-beaver.185-221-172-230.plesk.page/
185.221.172.230
428

Html is minified: 437.45 %
0.080
M
Precondition Required
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Date: Wed, 12 Mar 2025 12:13:27 GMT
Server: LiteSpeed
X-Powered-By: PleskLin
Content-Type: text/html
Content-Length: 3434

• https://www.vibrant-beaver.185-221-172-230.plesk.page/
185.221.172.230
428

Html is minified: 437.45 %
7.970
N
Precondition Required
Certificate error: RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Date: Wed, 12 Mar 2025 12:13:27 GMT
Server: LiteSpeed
X-Powered-By: PleskLin
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000
Content-Type: text/html
Content-Length: 3434

• http://www.vibrant-beaver.185-221-172-230.plesk.page/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
185.221.172.230
Inline-JavaScript (∑/total): 1/747 Inline-CSS (∑/total): 1/1864		428

Html is minified: 437.45 %
Other inline scripts (∑/total): 0/0		0.090
M
Precondition Required
Visible Content:
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Date: Wed, 12 Mar 2025 12:13:36 GMT
Server: LiteSpeed
X-Powered-By: PleskLin
Content-Type: text/html
Content-Length: 3434

• https://185.221.172.230/
185.221.172.230
303
https://185.221.172.230/login.php

2.553
N
Certificate error: RemoteCertificateNameMismatch
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Cache-Control: no-store, must-revalidate, no-cache, post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Location: https://185.221.172.230/login.php
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked
Date: Wed, 12 Mar 2025 12:13:37 GMT
Server: LiteSpeed
X-Powered-By: PleskLin
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000
Content-Type: text/html; charset=UTF-8
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Wed, 12 Mar 2025 12:13:37 GMT
Content-Length: 0

• https://185.221.172.230/login.php

303
https://185.221.172.230/login_up.php

2.380
B
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Cache-Control: no-store, must-revalidate, no-cache, post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Location: https://185.221.172.230/login_up.php
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked
Date: Wed, 12 Mar 2025 12:13:41 GMT
Server: LiteSpeed
X-Powered-By: PleskLin
Content-Type: text/html; charset=utf-8
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Wed, 12 Mar 2025 12:13:41 GMT
Content-Length: 0

• https://185.221.172.230/login_up.php
gzip used - 10024 / 28489 - 64.81 %
Inline-JavaScript (∑/total): 3/25919 Inline-CSS (∑/total): 0/0		200

Html is minified: 1279.83 %
Other inline scripts (∑/total): 0/0		2.584
B
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Cache-Control: no-store, must-revalidate, no-cache, post-check=0, pre-check=0
Pragma: no-cache
P3P: CP="NON COR CURa ADMa OUR NOR UNI COM NAV STA"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Transfer-Encoding: chunked
Vary: Accept-Encoding
Date: Wed, 12 Mar 2025 12:13:43 GMT
Server: LiteSpeed
X-Powered-By: PleskLin
Content-Type: text/html; charset=utf-8
Expires: Fri, 28 May 1999 00:00:00 GMT
Last-Modified: Wed, 12 Mar 2025 12:13:43 GMT
Content-Encoding: gzip
Content-Length: 10024

 

7. Comments


1. General Results, most used to calculate the result

Aname "vibrant-beaver.185-221-172-230.plesk.page" is subdomain, public suffix is ".plesk.page", top-level-domain is ".page", top-level-domain-type is "generic", tld-manager is "Charleston Road Registry Inc.", num .page-domains preloaded: 3 (complete: 263653)
AGood: All ip addresses are public addresses
Ahttps://185.221.172.230/login.php
303
https://185.221.172.230/login_up.php
Correct redirect https to https
AGood: destination is https
AGood: No cookie sent via http.
AExcellent: Main Domain is in the Google-Preload-List
AExcellent: Main Domain is in the Mozilla/Firefox-Preload-List
AHSTS-Preload-Status: Preloaded. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Bhttps://www.vibrant-beaver.185-221-172-230.plesk.page/ 185.221.172.230
428

Missing HSTS-Header
Mhttp://www.vibrant-beaver.185-221-172-230.plesk.page/ 185.221.172.230
428

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://www.vibrant-beaver.185-221-172-230.plesk.page/ 185.221.172.230
428

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://www.vibrant-beaver.185-221-172-230.plesk.page/ 185.221.172.230
428

Error - Certificate isn't trusted, RemoteCertificateNameMismatch, RemoteCertificateChainErrors
Nhttps://185.221.172.230/ 185.221.172.230
303
https://185.221.172.230/login.php
Error - Certificate isn't trusted, RemoteCertificateNameMismatch
XFatal error: Nameserver doesn't support TCP connection: ns1.pdns.tech / 52.16.254.198: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns1.pdns.tech / 54.246.175.138: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns2.pdns.tech / 44.224.42.162: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns2.pdns.tech / 52.24.135.200: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns3.pdns.tech / 13.237.15.234: Timeout
XFatal error: Nameserver doesn't support TCP connection: ns3.pdns.tech / 52.62.161.7: Timeout
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.vibrant-beaver.185-221-172-230.plesk.page

2. Header-Checks

Fwww.vibrant-beaver.185-221-172-230.plesk.page 185.221.172.230
Content-Security-Policy
Critical: Missing Header:
Fwww.vibrant-beaver.185-221-172-230.plesk.page 185.221.172.230
X-Content-Type-Options
Critical: Missing Header:
Fwww.vibrant-beaver.185-221-172-230.plesk.page 185.221.172.230
Referrer-Policy
Critical: Missing Header:
Fwww.vibrant-beaver.185-221-172-230.plesk.page 185.221.172.230
Permissions-Policy
Critical: Missing Header:
Bwww.vibrant-beaver.185-221-172-230.plesk.page 185.221.172.230
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.vibrant-beaver.185-221-172-230.plesk.page 185.221.172.230
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.vibrant-beaver.185-221-172-230.plesk.page 185.221.172.230
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

A
A
AInfo:: 5 different Name Servers found: ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, 5 Name Servers included in Delegation: ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, 5 Name Servers included in 1 Zone definitions: ns-tld1.charlestonroadregistry.com, ns-tld2.charlestonroadregistry.com, ns-tld3.charlestonroadregistry.com, ns-tld4.charlestonroadregistry.com, ns-tld5.charlestonroadregistry.com, 1 Name Servers listed in SOA.Primary: ns-tld1.charlestonroadregistry.com.
AGood: Only one SOA.Primary Name Server found.: ns-tld1.charlestonroadregistry.com.
AGood: SOA.Primary Name Server included in the delegation set.: ns-tld1.charlestonroadregistry.com.
AGood: All Name Server Domain Names have a Public Suffix.
A
XNameserver Timeout checking Echo Capitalization: ns1.pdns.tech / 52.16.254.198
XNameserver Timeout checking Echo Capitalization: ns1.pdns.tech / 54.246.175.138
XNameserver Timeout checking Echo Capitalization: ns2.pdns.tech / 44.224.42.162
XNameserver Timeout checking Echo Capitalization: ns2.pdns.tech / 52.24.135.200
XNameserver Timeout checking Echo Capitalization: ns3.pdns.tech / 13.237.15.234
XNameserver Timeout checking Echo Capitalization: ns3.pdns.tech / 52.62.161.7
XNameserver Timeout checking EDNS512: ns1.pdns.tech / 52.16.254.198
XNameserver Timeout checking EDNS512: ns1.pdns.tech / 54.246.175.138
XNameserver Timeout checking EDNS512: ns2.pdns.tech / 44.224.42.162
XNameserver Timeout checking EDNS512: ns2.pdns.tech / 52.24.135.200
XNameserver Timeout checking EDNS512: ns3.pdns.tech / 13.237.15.234
XNameserver Timeout checking EDNS512: ns3.pdns.tech / 52.62.161.7
Nameserver doesn't pass all EDNS-Checks: ns1.pdns.tech / 52.16.254.198: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.pdns.tech / 54.246.175.138: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns2.pdns.tech / 44.224.42.162: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: fatal timeout. COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns2.pdns.tech / 52.24.135.200: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: ok (ip-172-16-2-87). COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns3.pdns.tech / 13.237.15.234: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: ok (ip-172-16-3-118). COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
Nameserver doesn't pass all EDNS-Checks: ns3.pdns.tech / 52.62.161.7: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: fatal timeout. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: ok (ip-172-16-3-13). COOKIE: fatal timeout. CLIENTSUBNET: fatal timeout.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

http://www.vibrant-beaver.185-221-172-230.plesk.page/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 185.221.172.230
428

Fatal: Check of /.well-known/acme-challenge/random-filename has a http status between 400 and 499, but not 404 - Not Found. Creating a Letsencrypt certificate via http-01 challenge may not work. Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
https://185.221.172.230/login_up.php
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://185.221.172.230/login_up.php
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
https://185.221.172.230/login_up.php
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 7 script elements without defer/async.
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
ADuration: 576763 milliseconds, 576.763 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
www.vibrant-beaver.185-221-172-230.plesk.page
185.221.172.230
443
Certificate/chain invalid and wrong name
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
www.vibrant-beaver.185-221-172-230.plesk.page
185.221.172.230
443
Certificate/chain invalid and wrong name
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
 Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Self signed certificate

1CN=Plesk, O=Plesk, L=Schaffhausen, C=CH, emailAddress=info@plesk.com


185.221.172.230
185.221.172.230
443
ok
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

185.221.172.230
185.221.172.230
443
ok
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI 		Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI 		Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=server140011.serverkeliweb.it


2CN=R10, O=Let's Encrypt, C=US


185.221.172.230
185.221.172.230
443
name does not match
Tls12
ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok

185.221.172.230
185.221.172.230
443
name does not match
Tls12

ECDH Ephermal
255
Aes128
128
Sha256
not supported
ok
http/2 via ALPN supported 
Cert sent without SNI 		Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Cert sent without SNI 		Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=server140011.serverkeliweb.it


2CN=R10, O=Let's Encrypt, C=US

 

9. Certificates

1.
1.
E=info@plesk.com, CN=Plesk, O=Plesk, L=Schaffhausen, C=CH
11.11.2024
11.11.2025
expires in 232 days
1.
1.
E=info@plesk.com, CN=Plesk, O=Plesk, L=Schaffhausen, C=CH
11.11.2024

11.11.2025
expires in 232 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:67321EEA
Thumbprint:A9FBB70BE0885908C7412C3C53F3C02401750E2C
SHA256 / Certificate:i1lEPgjmEhBs7NJPwD98M3IxU78qFKCKDac9VqATleI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):78617bb6728962fdf3150f802d0f196af250f18213df44d0ed4ed60777bfc254
SHA256 hex / Subject Public Key Information (SPKI):78617bb6728962fdf3150f802d0f196af250f18213df44d0ed4ed60777bfc254 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)


UntrustedRoot: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.


2.
1.
CN=server140011.serverkeliweb.it
11.03.2025
09.06.2025
expires in 77 days		server140011.serverkeliweb.it - 1 entry
2.
1.
CN=server140011.serverkeliweb.it
11.03.2025

09.06.2025
expires in 77 days


server140011.serverkeliweb.it - 1 entry

KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:04998F856DAF73E7379A6C036B100B845546
Thumbprint:10CBBD93B74CBB1E89FDFC5C24106EFB432CF098
SHA256 / Certificate:xBGSB8zsnhbm6QHJuBTOhP4mjF//YD+jt/JfGY1x8jA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):021871a38030f2899aca544b03d06959874fb800bb66f96d962dd72f87936fe3
SHA256 hex / Subject Public Key Information (SPKI):021871a38030f2899aca544b03d06959874fb800bb66f96d962dd72f87936fe3 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://r10.o.lencr.org
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=R10, O=Let's Encrypt, C=US
13.03.2024
13.03.2027
expires in 719 days

2.
CN=R10, O=Let's Encrypt, C=US
13.03.2024

13.03.2027
expires in 719 days




KeyalgorithmRSA encryption (2048 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:4BA85293F79A2FA273064BA8048D75D0
Thumbprint:00ABEFD055F9A9C784FFDEABD1DCDD8FED741436
SHA256 / Certificate:nXw/GqatKy7A1c8eJG+NmubLyf0HVa03u5dLHy+2A/M=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):Error find_SubjectPublicKeyInfo_in_Certificate - no result found
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Clientauthentifizierung (1.3.6.1.5.5.7.3.2), Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015
04.06.2035
expires in 3724 days

3.
CN=ISRG Root X1, O=Internet Security Research Group, C=US
04.06.2015

04.06.2035
expires in 3724 days




KeyalgorithmRSA encryption (4096 bit)
Signatur:SHA256 With RSA-Encryption
Serial Number:008210CFB0D240E3594463E0BB63828B00
Thumbprint:CABD2A79A1076A31F21D253635CB039D4329A5E8
SHA256 / Certificate:lrzsBiZJdvN0YHeazyjFp8/oo8Cq4RqP/O4FwL3fCMY=
SHA256 hex / Cert (DANE * 0 1):96bcec06264976f37460779acf28c5a7cfe8a3c0aae11a8ffcee05c0bddf08c6
SHA256 hex / PublicKey (DANE * 1 1):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SHA256 hex / Subject Public Key Information (SPKI):0b9fa5a59eed715c26c1020c711b4f6ec42d58b0015e14337a39dad301c5afc3
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

No CertSpotter - CT-Log entries found

 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

No CRT - CT-Log entries found

 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://185.221.172.230/login_up.php
link
stylesheet
4

0


0
0
0


link
other
4

0


0
0
0


meta
other
11

0


0
0
0


script

7

0


0
0
0

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsg∑Status
https://185.221.172.230/login_up.php

link
apple-touch-icon
/images/apple-touch-icon.png?1739777502


1
ok















link
icon
/favicon.ico?1739777502


1
ok















link
icon
/images/favicon.svg?1739777502


1
ok















link
manifest
/manifest.webmanifest?1739777502


1
ok















link
stylesheet
/cp/theme/css/main.css?1739777502


1
ok















link
stylesheet
/modules/email-security/global.css?1738293625


1
ok















link
stylesheet
/modules/letsencrypt/global.css?1736913626


1
ok















link
stylesheet
/ui-library/plesk-ui-library.css?1739451204


1
ok















meta
charset
 utf-8


1
ok















meta
X-UA-Compatible
IE=edge,chrome=1


1
ok















meta
forgery_protection_token
24365ab01a231a9bd11e790d46b55e40


1
ok















meta
format-detection
telephone=no


1
ok















meta
plesk-build
1800250217.08


1
ok















meta
plesk-revision
c17d180dfad7a47fb316d12c918b2ec37bdcadf6


1
ok















meta
SKYPE_TOOLBAR
SKYPE_TOOLBAR_PARSER_COMPATIBLE


1
ok















meta
theme-color
#ffffff


1
ok















meta
theme-color-dark
#191919


1
ok















meta
theme-color-default
#ffffff


1
ok















meta
viewport
width=device-width, initial-scale=1.0, maximum-scale=1.0


1
ok















script
src
/cp/javascript/externals/prototype.js?1739777502


1
ok
Missing defer / async attribute.














script
src
/cp/javascript/externals/require.js?1739777502


1
ok
Missing defer / async attribute.














script
src
/cp/javascript/main.js?1739777502


1
ok
Missing defer / async attribute.














script
src
/cp/javascript/vendors.js?1739777502


1
ok
Missing defer / async attribute.














script
src
/modules/letsencrypt/global.js?1736913626


1
ok
Missing defer / async attribute.














script
src
/modules/notifier/global.js?1741665743


1
ok
Missing defer / async attribute.














script
src
/ui-library/plesk-ui-library.min.js?1739451204


1
ok
Missing defer / async attribute.













 

12. Html-Parsing via https://validator.w3.org/nu/


No https result http status 200 and Content-Type text/html or text/xml found, no Html-Parsing - Check

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers:

 

 

No NameServer - IP address - Informations found

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
plesk.page



3
3
page
0

no CAA entry found
1
0

 

15. TXT - Entries

No TXT entries found

 

16. DomainService - Entries

No DomainServiceEntries entries found

 

 

17. Cipher Suites

No results

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=44a802a5-2b8a-475e-a3eb-4c62c6ea8fa6

 

Last Result: https://check-your-website.server-daten.de/?q=vibrant-beaver.185-221-172-230.plesk.page - 2025-03-12 13:05:45

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=vibrant-beaver.185-221-172-230.plesk.page" target="_blank">Check this Site: vibrant-beaver.185-221-172-230.plesk.page</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=vibrant-beaver.185-221-172-230.plesk.page

 

 

Jürgen Auer • Friedenstr. 37 • 10249 Berlin • +49(0)30 420 200 60 • info@sql-und-xml.de • USt-IdNr.: DE221734518

 

Errors, ideas, questions? Use the Contact form • A project using Server-Daten - Web Database solutions