HTTP request

Simple:


Advanced, helpfull:

Advanced, raw:

HTTPS request of 'badssl.com'

DNS resolve

DNS resolved in 93ms
badssl.com
A
104.154.89.105 (selected)

Connection

Connected to 104.154.89.105 in 96ms
  • Connected to host 104.154.89.105 (badssl.com), on port 443, in 30ms.
  • Connection is TLS 1.2-secured using certificat '*.badssl.com' in additional 66ms.
  • Certificat expires 13-08-2024.
  • Certificat is issued by 'Let's Encrypt'.
  • SSL-certifiat valdiated okay.
 

Request

Request transmitted in 5ms
GET / HTTP/1.1
Connection: Close
Host: badssl.com
Accept: */*
User-agent: iamroot.tech

Response headers

Status 200 returned. First bytes recieved in 24ms
HTTP/1.1 200 OK 
Server: nginx/1.10.3 (Ubuntu) 
Date: Tue, 21 May 2024 17:40:00 GMT 
Content-Type: text/html 
Content-Length: 11673 
Last-Modified: Fri, 17 May 2024 17:59:55 GMT 
Connection: close 
ETag: "66479b1b-2d99" 
Cache-Control: no-store 
Accept-Ranges: bytes 

Response content

 Pretty  Binary  Raw string
Recieved a total of 11.943 bytes in 24ms
1
<!doctype html>
2
<html>
3
<head>
4
  <meta charset="utf-8" />
5
  <title>badssl.com</title>
6
  <meta name="viewport" content="width=device-width, initial-scale=1.0">
7
  <link rel="shortcut icon" href="/icons/favicon-blue.ico"/>
8
  <link rel="apple-touch-icon" href="/icons/icon-blue.png"/>
9
  <link rel="stylesheet" href="index.css">
10
  <link rel="stylesheet" href="github-ribbon.css">
11
  <script src="index.js"></script>
12
13
  <!-- fUnKy -->
14
  <link rel="stylesheet" href="funky/funky.css">
15
  <script src="funky/funky.js"></script>
16
</head>
17
<body>
18
19
<div class="title-bar" title="badssl.com - a memorable site for HTTPS misconfiguration">
20
  badssl.com
21
</div>
22
23
<div id="links">
24
25
<div class="column">
26
  <div class="group">
27
    <h2 id="dashboard"><span class="emoji">????</span>Dashboard</h2>
28
    <a href="/dashboard/" target="_blank" class="bullet-list"><span class="icon"></span>Dashboard</a>
29
  </div>
30
  <div class="group">
31
    <h2 id="certificate"><span class="emoji">????</span>Certificate</h2>
32
    <a href="https://expired.badssl.com/" class="bad"><span class="icon"></span>expired</a>
33
    <a href="https://wrong.host.badssl.com/" class="bad"><span class="icon"></span>wrong.host</a>
34
    <a href="https://self-signed.badssl.com/" class="bad"><span class="icon"></span>self-signed</a>
35
    <a href="https://untrusted-root.badssl.com/" class="bad"><span class="icon"></span>untrusted-root</a>
36
    <a href="https://revoked.badssl.com/" class="bad"><span class="icon"></span>revoked</a>
37
    <a href="https://pinning-test.badssl.com/" class="bad"><span class="icon"></span>pinning-test</a>
38
    <hr>
39
    <a href="https://no-common-name.badssl.com/" class="dubious"><span class="icon"></span>no-common-name</a>
40
    <a href="https://no-subject.badssl.com/" class="dubious"><span class="icon"></span>no-subject</a>
41
    <a href="https://incomplete-chain.badssl.com/" class="dubious"><span class="icon"></span>incomplete-chain</a>
42
    <hr>
43
    <a href="https://sha256.badssl.com/" class="good"><span class="icon"></span>sha256</a>
44
    <a href="https://sha384.badssl.com/" class="good"><span class="icon"></span>sha384</a>
45
    <a href="https://sha512.badssl.com/" class="good"><span class="icon"></span>sha512</a>
46
    <hr>
47
    <a href="https://1000-sans.badssl.com/" class="good"><span class="icon"></span>1000-sans</a>
48
    <a href="https://10000-sans.badssl.com/" class="good"><span class="icon"></span>10000-sans</a>
49
    <hr>
50
    <a href="https://ecc256.badssl.com/" class="good"><span class="icon"></span>ecc256</a>
51
    <a href="https://ecc384.badssl.com/" class="good"><span class="icon"></span>ecc384</a>
52
    <hr>
53
    <a href="https://rsa2048.badssl.com/" class="good"><span class="icon"></span>rsa2048</a>
54
    <a href="https://rsa4096.badssl.com/" class="good"><span class="icon"></span>rsa4096</a>
55
    <a href="https://rsa8192.badssl.com/" class="dubious"><span class="icon"></span>rsa8192</a>
56
    <hr>
57
    <a href="https://extended-validation.badssl.com/" class="good"><span class="icon"></span>extended-validation</a>
58
  </div>
59
  <div class="group">
60
    <h2 id="client-certificate"><span class="emoji">????</span>Client Certificate</h2>
61
    <a href="/download/" target="_blank" class="bullet-list"><span class="icon"></span>Certificate Downloads</a>
62
    <a href="https://client.badssl.com/" class="good"><span class="icon"></span>client</a>
63
    <a href="https://client-cert-missing.badssl.com/" class="bad"><span class="icon"></span>client-cert-missing</a>
64
  </div>
65
  <div class="group">
66
    <h2 id="mixed-content"><span class="emoji">????</span>Mixed Content</h2>
67
    <a href="https://mixed-script.badssl.com/" class="bad"><span class="icon"></span>mixed-script</a>
68
    <a href="https://very.badssl.com/" class="bad"><span class="icon"></span>very</a>
69
    <hr>
70
    <a href="https://mixed.badssl.com/" class="dubious"><span class="icon"></span>mixed</a>
71
    <a href="https://mixed-favicon.badssl.com/" class="dubious"><span class="icon"></span>mixed-favicon</a>
72
    <a href="https://mixed-form.badssl.com/" class="dubious"><span class="icon"></span>mixed-form</a>
73
  </div>
74
  <div class="group">
75
    <h2 id="http"><span class="emoji">??????</span>HTTP</h2>
76
    <a href="http://http.badssl.com/" class="bad"><span class="icon"></span>http</a>
77
    <a href="http://http-textarea.badssl.com/" class="bad"><span class="icon"></span>http-textarea</a>
78
    <a href="http://http-password.badssl.com/" class="bad"><span class="icon"></span>http-password</a>
79
    <a href="http://http-login.badssl.com/" class="bad"><span class="icon"></span>http-login</a>
80
    <a href="http://http-dynamic-login.badssl.com/" class="bad"><span class="icon"></span>http-dynamic-login</a>
81
    <a href="http://http-credit-card.badssl.com/" class="bad"><span class="icon"></span>http-credit-card</a>
82
  </div>
83
  <div class="group">
84
    <h2 id="cipher-suite"><span class="emoji">????</span>Cipher Suite</h2>
85
    <a href="https://cbc.badssl.com/" class="dubious"><span class="icon"></span>cbc</a>
86
    <a href="https://rc4-md5.badssl.com/" class="bad"><span class="icon"></span>rc4-md5</a>
87
    <a href="https://rc4.badssl.com/" class="bad"><span class="icon"></span>rc4</a>
88
    <a href="https://3des.badssl.com/" class="bad"><span class="icon"></span>3des</a>
89
    <a href="https://null.badssl.com/" class="bad"><span class="icon"></span>null</a>
90
    <hr>
91
    <a href="https://mozilla-old.badssl.com/" class="bad"><span class="icon"></span>mozilla-old</a>
92
    <a href="https://mozilla-intermediate.badssl.com/" class="dubious"><span class="icon"></span>mozilla-intermediate</a>
93
    <a href="https://mozilla-modern.badssl.com/" class="good"><span class="icon"></span>mozilla-modern</a>
94
  </div>
95
</div><!-- class="column" -->
96
97
<div class="column">
98
  <div class="group">
99
    <h2 id="key-exchange"><span class="emoji">????</span>Key Exchange</h2>
100
    <a href="https://dh480.badssl.com/" class="bad"><span class="icon"></span>dh480</a>
101
    <a href="https://dh512.badssl.com/" class="bad"><span class="icon"></span>dh512</a>
102
    <a href="https://dh1024.badssl.com/" class="bad"><span class="icon"></span>dh1024</a>
103
    <a href="https://dh2048.badssl.com/" class="dubious"><span class="icon"></span>dh2048</a>
104
    <hr>
105
    <a href="https://dh-small-subgroup.badssl.com/" class="bad"><span class="icon"></span>dh-small-subgroup</a>
106
    <a href="https://dh-composite.badssl.com/" class="bad"><span class="icon"></span>dh-composite</a>
107
    <hr>
108
    <a href="https://static-rsa.badssl.com/" class="dubious"><span class="icon"></span>static-rsa</a>
109
  </div>
110
  <div class="group">
111
    <h2 id="protocol"><span class="emoji">??????</span>Protocol</h2>
112
    <a href="https://tls-v1-0.badssl.com:1010/" class="dubious"><span class="icon"></span>tls-v1-0</a>
113
    <a href="https://tls-v1-1.badssl.com:1011/" class="dubious"><span class="icon"></span>tls-v1-1</a>
114
    <a href="https://tls-v1-2.badssl.com:1012/" class="good"><span class="icon"></span>tls-v1-2</a>
115
  </div>
116
  <div class="group">
117
    <h2 id="certificate-transparency"><span class="emoji">????</span>Certificate Transparency</h2>
118
    <a href="https://no-sct.badssl.com/" class="bad"><span class="icon"></span>no-sct</a>
119
  </div>
120
  <div class="group">
121
    <h2 id="upgrade"><span class="emoji">??????</span>Upgrade</h2>
122
    <a href="https://hsts.badssl.com/" class="good"><span class="icon"></span>hsts</a>
123
    <a href="https://upgrade.badssl.com/" class="good"><span class="icon"></span>upgrade</a>
124
    <hr>
125
    <a href="https://preloaded-hsts.badssl.com/" class="good"><span class="icon"></span>preloaded-hsts</a>
126
    <a href="https://subdomain.preloaded-hsts.badssl.com/" class="bad"><span class="icon"></span>subdomain.preloaded-hsts</a>
127
    <hr>
128
    <a href="https://https-everywhere.badssl.com/" class="good"><span class="icon"></span>https-everywhere</a>
129
  </div>
130
  <div class="group">
131
    <h2 id="ui"><span class="emoji">????</span>UI</h2>
132
    <a href="https://spoofed-favicon.badssl.com/" class="dubious"><span class="icon"></span>spoofed-favicon</a>
133
    <a href="https://lock-title.badssl.com/" class="dubious"><span class="icon"></span>lock-title</a>
134
    <hr>
135
    <a href="https://long-extended-subdomain-name-containing-many-letters-and-dashes.badssl.com/" class="good"><span class="icon"></span>long-extended-subdomain-name-containing-many-letters-and-dashes</a>
136
    <a href="https://longextendedsubdomainnamewithoutdashesinordertotestwordwrapping.badssl.com/" class="good"><span class="icon"></span>longextendedsubdomainnamewithoutdashesinordertotestwordwrapping</a>
137
  </div>
138
  <div class="group">
139
    <h2 id="known-bad"><span class="emoji">???</span>Known Bad</h2>
140
    <a href="https://superfish.badssl.com/" class="bad"><span class="icon"></span>(Lenovo) Superfish</a>
141
    <a href="https://edellroot.badssl.com/" class="bad"><span class="icon"></span>(Dell) eDellRoot</a>
142
    <a href="https://dsdtestprovider.badssl.com/" class="bad"><span class="icon"></span>(Dell) DSD Test Provider</a>
143
    <a href="https://preact-cli.badssl.com/" class="bad"><span class="icon"></span>preact-cli</a>
144
    <a href="https://webpack-dev-server.badssl.com/" class="bad"><span class="icon"></span>webpack-dev-server</a>
145
  </div>
146
  <div class="group">
147
    <h2 id="chrome"><span class="emoji"><img class="chrome-icon" src="front-page-icons/chrome.svg"></span>Chrome Tests</h2>
148
    <a href="https://captive-portal.badssl.com/" class="bad"><span class="icon"></span>captive-portal</a>
149
    <a href="https://mitm-software.badssl.com/" class="bad"><span class="icon"></span>mitm-software</a>
150
  </div>
151
  <div class="group">
152
    <h2 id="defunct"><span class="emoji">??????</span>Defunct</h2>
153
    <a href="https://sha1-2016.badssl.com/" class="dubious"><span class="icon"></span>sha1-2016</a>
154
    <a href="https://sha1-2017.badssl.com/" class="bad"><span class="icon"></span>sha1-2017</a>
155
    <a href="https://sha1-intermediate.badssl.com/" class="bad"><span class="icon"></span>sha1-intermediate</a>
156
    <a href="https://invalid-expected-sct.badssl.com/" class="bad"><span class="icon"></span>invalid-expected-sct</a>
157
  </div>
158
  <div class="group">
159
    <h2 id="test-suites"><span class="emoji">????</span>Test Suites</h2>
160
    <a href="https://testsafebrowsing.appspot.com/" target="_blank" class="external"><span class="icon"></span>Safe Browsing Tests</a>
161
    <a href="https://www.ssllabs.com/ssltest/viewMyClient.html" target="_blank" class="external"><span class="icon"></span>SSL Labs Client Test</a>
162
  </div>
163
  <div id="preload" style="width: 0; height: 0;">
164
    <!-- <link rel=preload> results in warnings in Chrome: https://crbug.com/661055 -->
165
    <!-- Workaround: Load the images in bogus elements. -->
166
    <script>
167
      window.addEventListener("load", function() {
168
        var parent = document.querySelector("#preload");
169
        var names = ["bad-white","dubious-white","good-white","page-white","bullet-list-white","external-white"]
170
        for (var i = 0; i < names.length; i++) {
171
          var elem = document.createElement("span");
172
          elem.style.backgroundImage = "url(front-page-icons/" + names[i] + ".svg)";
173
          parent.appendChild(elem);
174
        }
175
      });
176
    </script>
177
  </div>
178
</div><!-- class="column" -->
179
180
</div><!-- id="links" -->
181
182
<h2 class="your-browser">Your Browser:
183
  <div id="browser-info">
184
    <span class="highlight">
185
      <span id="ua"></span><br>
186
      <span id="os"></span><br>
187
    </span>
188
    <span id="click-to-copy">???? Click to copy</span>
189
  </div>
190
</h2>
191
192
<!-- Start of GitHub ribbon. -->
193
<div class="github-fork-ribbon-wrapper right-top-bottom">
194
    <div class="github-fork-ribbon">
195
        <a href="https://github.com/chromium/badssl.com"><span class="icon"></span>On GitHub</a>
196
    </div>
197
</div>
198
<!-- End of GitHub ribbon. -->
199
200
</body>
201
</html>
202

Log

  • Resolving host 'badssl.com' to 'badssl.com' in 93ms.
  • Connected to '104.154.89.105' on port '443'
  • SSL connection established (TLS 1.2, using certificat '*.badssl.com', expirery 13-08-2024.)
  • Request sent to host
  • Waiting for response
  • First 1.024 bytes recieved in 24ms
  • A total of 11.943 bytes recieved in 24ms
  • Response parsed in 0ms