Check Detail
haste.it · DNS
Passed
Grade A
100.0%
Result Detail
DNS| Host | Type | Answer | TTL |
|---|---|---|---|
| 172.67.202.88 | — | ||
| 104.21.52.176 | — | ||
| 2606:4700:3035::ac43:ca58 | — | ||
| 2606:4700:3031::6815:34b0 | — |
Result Detail
HEADERAlerts
- Strict-Transport-Security: Strict-Transport-Security missing
- Permissions-Policy: Permissions-Policy missing
- Cross-Origin-Opener-Policy: Header missing
- Cross-Origin-Embedder-Policy: Header missing
- Cross-Origin-Resource-Policy: Header missing
- Cache-Control: Cache-Control missing restrictive directives
- Expect-CT: Expect-CT missing
- X-Permitted-Cross-Domain-Policies: Header missing
- Access-Control-Allow-Origin: Access-Control-Allow-Origin missing
- Server: Sensitive header exposed
- Origin-Agent-Cluster: Header missing
Normalized headers
| date | Fri, 13 Mar 2026 09:28:04 GMT |
|---|---|
| content-type | text/html |
| server | cloudflare |
| last-modified | Thu, 12 Mar 2026 23:09:53 GMT |
| vary | Accept-Encoding |
| report-to | {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GODO41hVrI5ldJd6OlNggpFVYiHKZEEMnVtvjbDdtTC1yYIa5dlYaKH9XIwra%2Fmttbvvqn%2Fxd%2Fg%2BA93pPo7yhTyThwSSXaRY"}]} |
| x-frame-options | SAMEORIGIN |
| x-xss-protection | 1; mode=block |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
| content-security-policy | default-src 'self'; script-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:; connect-src 'self' https://formspree.io; form-action 'self' https://formspree.io; worker-src blob:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; |
| nel | {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800} |
| cf-cache-status | DYNAMIC |
| speculation-rules | "/cdn-cgi/speculation" |
| cf-ray | 9dba01a41d291983-FRA |
| alt-svc | h3=":443"; ma=86400 |
Transport
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Strict-Transport-Security | ❌ Missing | max-age>=15768000; includeSubDomains; preload | Strict-Transport-Security missing | Critical | Strict-Transport-Security: max-age=63072000; includeSubDomains; preload | |
| Expect-CT | ❌ Missing | enforce; max-age>=86400 | Expect-CT missing | Medium | Expect-CT: enforce, max-age=86400, report-uri="https://report.example.com" |
Content Security
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Content-Security-Policy | ✅ Passed | default-src 'self'; script-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:; connect-src 'self' https://formspree.io; form-action 'self' https://formspree.io; worker-src blob:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests; | default-src 'self'; frame-ancestors 'none' | default-src 'self'; frame-ancestors 'none' | Critical | Content-Security-Policy: default-src 'self'; frame-ancestors 'none' |
MIME
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| X-Content-Type-Options | ✅ Passed | nosniff | nosniff | Value matches recommendation | High | X-Content-Type-Options: nosniff |
Framing
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| X-Frame-Options | ✅ Passed | SAMEORIGIN | DENY or SAMEORIGIN | Value accepted | High | X-Frame-Options: DENY |
Privacy
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Referrer-Policy | ✅ Passed | strict-origin-when-cross-origin | strict-origin-when-cross-origin / same-origin | strict-origin-when-cross-origin | Medium | Referrer-Policy: strict-origin-when-cross-origin |
Browser Features
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Permissions-Policy | ❌ Missing | camera=(); geolocation=(); microphone=() | Permissions-Policy missing | Medium | Permissions-Policy: camera=(), geolocation=(), microphone=() |
Cross-Origin
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Cross-Origin-Opener-Policy | ❌ Missing | same-origin | Header missing | High | Cross-Origin-Opener-Policy: same-origin | |
| Cross-Origin-Embedder-Policy | ❌ Missing | require-corp | Header missing | High | Cross-Origin-Embedder-Policy: require-corp | |
| Cross-Origin-Resource-Policy | ❌ Missing | same-origin | Header missing | Medium | Cross-Origin-Resource-Policy: same-origin | |
| Origin-Agent-Cluster | ❌ Missing | ?1 | Header missing | Low | Origin-Agent-Cluster: ?1 |
Caching
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Cache-Control | ❌ Missing | no-store, private, max-age=0 | Cache-Control missing restrictive directives | High | Cache-Control: no-store, private, max-age=0 |
Legacy
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| X-Permitted-Cross-Domain-Policies | ❌ Missing | none | Header missing | Low | X-Permitted-Cross-Domain-Policies: none |
CORS
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Access-Control-Allow-Origin | ❌ Missing | Scoped origin (no wildcard) | Access-Control-Allow-Origin missing | Medium | Access-Control-Allow-Origin: https://app.example.com |
Information Disclosure
| Check name | Status | Actual | Expected | Detail | Severity | Recommendation |
|---|---|---|---|---|---|---|
| Server | ❌ Missing | cloudflare | Header removed or generic | Sensitive header exposed | High | Remove Server header or set to a generic token |
| X-Powered-By | ✅ Passed | Header removed | Header not exposed | High | Remove X-Powered-By header | |
| X-AspNet-Version | ✅ Passed | Header removed | Header not exposed | Medium | Remove framework version headers |
Raw headers
HTTP/2 200
date: Fri, 13 Mar 2026 09:28:04 GMT
content-type: text/html
server: cloudflare
last-modified: Thu, 12 Mar 2026 23:09:53 GMT
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=GODO41hVrI5ldJd6OlNggpFVYiHKZEEMnVtvjbDdtTC1yYIa5dlYaKH9XIwra%2Fmttbvvqn%2Fxd%2Fg%2BA93pPo7yhTyThwSSXaRY"}]}
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: strict-origin-when-cross-origin
content-security-policy: default-src 'self'; script-src 'self' blob:; style-src 'self' 'unsafe-inline'; font-src 'self' data:; img-src 'self' data:; connect-src 'self' https://formspree.io; form-action 'self' https://formspree.io; worker-src blob:; object-src 'none'; base-uri 'self'; upgrade-insecure-requests;
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
cf-cache-status: DYNAMIC
speculation-rules: "/cdn-cgi/speculation"
cf-ray: 9dba01a41d291983-FRA
alt-svc: h3=":443"; ma=86400
Result Detail
SSL| Check name | Status | Value |
|---|---|---|
| certificate chain is complete | ✅ Passed | 3 |
| root CA is trusted | ✅ Passed | Trusted |
| cert valid for | ✅ Passed | 85 |
| chain certs are valid until | ✅ Passed | 06.06.2026 |
| CN matches Domainname | ✅ Passed | haste.it |
| certificate subject | ✅ Passed | CN=haste.it |
| certificate issuer | ✅ Passed | C=US, O=Let's Encrypt, CN=E7 |
| signature algorithm | ✅ Passed | ecdsa-with-SHA384 |
| TLS protocol | ✅ Passed | TLSv1.3 TLS_AES_256_GCM_SHA384 |
| Subject Alternative Names | ✅ Passed | *.haste.it, haste.it |
| Public Key | ✅ Passed | EC 256 |
Certificate chain
| # | Common name | Issuer | Valid until | CA |
|---|---|---|---|---|
| 0 | haste.it | C=US, O=Let's Encrypt, CN=E7 | 06.06.2026 18:09:17 | No |
| 1 | haste.it | C=US, O=Let's Encrypt, CN=E7 | 06.06.2026 18:09:17 | No |
| 2 | E7 | C=US, O=Internet Security Research Group, CN=ISRG Root X1 | 13.03.2027 00:59:59 | Yes |
TLS details
| Negotiated protocol | TLSv1.3 |
|---|---|
| Cipher suite | TLS_AES_256_GCM_SHA384 (256 bit) |
| Cipher version | TLSv1.3 |
| Perfect Forward Secrecy | Attention |
| Earliest chain expiry | 06.06.2026 18:09 |
Fingerprints
| SHA-256 | D4:55:1D:95:B3:0B:87:C2:3A:64:77:F3:D9:74:04:C3:DB:52:C2:BD:E8:4F:03:DD:DC:19:12:77:AE:8D:23:4C |
|---|---|
| SHA-1 | 6E:C4:C3:B5:C3:57:8E:28:F3:B5:78:AF:D6:3F:E6:11:9A:56:98:D4 |
Revocation
OCSP URLs
—
CRL URLs
Full Name:
URI:http://e7.c.lencr.org/96.crl
Issuer URLs (AIA)
http://e7.i.lencr.org/
OCSP Must-Staple
No
Trust evaluation
Attempted: Yes
Trusted: Yes
OpenSSL diagnostic command
openssl s_client -connect haste.it:443 -servername haste.it
Result Detail
WAFSign up to use!
Ownership verification required
Real WAF results become available after signing up. Until then we show you a small teaser from the imagination department.
- Shield level Mythisch
- Watchers Gremlins im Standby
- Last attack Story folgt nach Registrierung