Site report for https://www.startpage.com
Lookup another site?
| Site title | Startpage.com - The world's most private search engine |
|---|---|
| Site rank | 105 |
| Description | Startpage.com delivers online tools that help you to stay in control of your personal information and protect your online privacy. |
| Date first seen | May 1996 |
|---|---|
| Netcraft Risk Rating | 0/10 |
| Primary language | English |
| Site | https://www.startpage.com |
|---|---|
| Netblock Owner | RoutIT |
| Domain | startpage.com |
| Nameserver | dns1.p01.nsone.net |
| IP address | 145.131.132.78 (VirusTotal) |
| DNS admin | hostmaster@nsone.net |
| IPv6 address | Not Present |
| Reverse DNS | rt132bb131-145-78.routit.net |
| Domain registrar | networksolutions.com |
|---|---|
| Nameserver organisation | whois.name.com |
| Organisation | 5335 Gate Parkway care of Network Solutions PO Box 459, Jacksonville, 32256, US |
| Hosting company | RoutIT |
| Top Level Domain | Commercial entities (.com) |
| DNS Security Extensions | Enabled |
| Hosting country | NL |
| IP range | Country | Name | Description |
|---|---|---|---|
| 0.0.0.0-255.255.255.255 | N/A | IANA-BLK | The whole IPv4 address space |
| ↳ 145.0.0.0-145.255.255.255 | Netherlands | NET145 | RIPE Network Coordination Centre |
| ↳ 145.131.48.0-145.131.255.255 | Netherlands | KPN-20111114 | KPN B.V. |
| ↳ 145.131.128.0-145.131.159.255 | Netherlands | RoutIT | RoutIT |
| ↳ 145.131.132.78 | Netherlands | RoutIT | RoutIT |
| Assurance | Organisation validation |
|---|---|
| Common name | *.startpage.com |
| Organisation | Startpage BV |
| State | Not Present |
| Country | NL |
| Organisational unit | Not Present |
| Subject Alternative Name | *.startpage.com, startpage.com |
| Validity period | From Jun 6 2020 to Jun 9 2021 (12 months, 3 days) |
| Matches hostname | Yes |
| Server | Apache |
| Public key algorithm | rsaEncryption |
| Protocol version | TLSv1.2 |
| Public key length | 2048 |
| Certificate check | ok |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 0x067d6e753ada96488d17bcca5857c101 |
| Cipher | ECDHE-RSA-AES128-GCM-SHA256 |
| Version number | 0x02 |
| Perfect Forward Secrecy | Yes |
|---|---|
| Next Protocol Negotiation | Not Present |
| Supported TLS Extensions | RFC5746 renegotiation info, RFC4366 server name, RFC4492 EC point formats, RFC4366 status request, unknown |
| Issuing organisation | DigiCert Inc |
| Issuer common name | DigiCert SHA2 Secure Server CA |
| Issuer unit | Not Present |
| Issuer location | Not Present |
| Issuer country | US |
| Issuer state | Not Present |
| Certificate Revocation Lists |
http://crl3.digicert.com/ssca-sha2-g6.crl http://crl4.digicert.com/ssca-sha2-g6.crl |
| Certificate Hash | HmdygW4azyqiBjjtQSzkT6OVB+I |
| Public Key Hash | 33134fa3425d47be15731e31a6fe9f891ac97d975a06a5a5f8ab2670317099a4 |
| OCSP servers | http://ocsp.digicert.com - 100% uptime in the past 24 hours |
| OCSP stapling response | Certificate valid |
| OCSP data generated | Jul 15 14:26:58 2020 GMT |
| OCSP data expires | Jul 22 13:41:58 2020 GMT |
Signed Certificate Timestamps (SCTs)
| Source | Log | Timestamp | Signature Verification |
|---|---|---|---|
| Certificate | Google Argon 2021 9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOM= |
2020-06-06 07:02:02 | Success |
| Certificate | DigiCert Yeti 2021 XNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDso= |
2020-06-06 07:02:02 | Success |
SSLv3/POODLE
This site does not support the SSL version 3 protocol.
More information about SSL version 3 and the POODLE vulnerability.
Heartbleed
The site offered the Heartbeat TLS extension prior to the Heartbleed disclosure, but is using a new certificate and no longer offers Heartbeat.
This test does not exploit the Heartbleed vulnerability but uses information from conventional HTTPS requests. More information about Heartbleed detection.
| Common name | DigiCert Global Root CA |
|---|---|
| Organisational unit | www.digicert.com |
| Organisation | DigiCert Inc |
| Validity period | From 2006-11-10 to 2031-11-10 |
| Common name | DigiCert SHA2 Secure Server CA |
|---|---|
| Organisational unit | Not Present |
| Organisation | DigiCert Inc |
| Validity period | From 2013-03-08 to 2023-03-08 |
| Netblock owner | IP address | OS | Web server | Last seen |
|---|---|---|---|---|
| ROUTIT | 37.0.87.19 | Linux | nginx | 6-Jul-2020 |
| RoutIT EDE GLD | 145.131.132.76 | Linux | nginx | 26-Jun-2020 |
| RoutIT EDE GLD | 145.131.132.68 | Linux | nginx | 17-Jun-2020 |
| Colo locations RoutIT | 89.146.4.147 | Linux | nginx | 9-Jun-2020 |
| RoutIT EDE GLD | 145.131.132.79 | Linux | nginx | 6-Jun-2020 |
| RoutIT EDE GLD | 145.131.132.94 | Linux | nginx | 1-Jun-2020 |
| RoutIT EDE GLD | 145.131.132.86 | Linux | nginx | 20-May-2020 |
| Colo locations RoutIT | 89.146.4.147 | Linux | nginx | 12-May-2020 |
| RoutIT EDE GLD | 145.131.132.92 | Linux | nginx | 5-May-2020 |
| RoutIT EDE GLD | 145.131.132.86 | Linux | nginx | 27-Apr-2020 |
A host's Sender Policy Framework (SPF) describes who can send mail on its behalf. This is done by publishing an SPF record containing a series of rules. Each rule consists of a qualifier followed by a specification of which domains to apply this qualifier to. For more information please see open-spf.org.
| Qualifier | Mechanism | Argument |
|---|---|---|
| + (Pass) | mx | |
| + (Pass) | ip4 | 64.71.175.11/32 |
| + (Pass) | ip4 | 37.0.89.56/32 |
| + (Pass) | ip4 | 54.152.12.68 |
| + (Pass) | include | spf.dynect.net |
| ~ (SoftFail) | all |
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a mechanism for domain owners to indicate how mail purporting to originate from their domain should be authenticated. It builds on SPF and DKIM, providing a method to set policy and to give reporting of failures. For more information please see dmarc.org.
This host does not have a DMARC record. There may be a DMARC record on the site report for startpage.com: Check the site report.
Web Trackers are third-party resources loaded onto a webpage. Trackable resources include social sharing widgets, javascript files, and images. These trackers can be used to monitor individual user behaviour across the web. Data derived from these trackers are primarily used for advertising or analytics purposes.
No known trackers were identified.
-
Includes all the main technologies that run on the browser (such as JavaScript and Adobe Flash).
Technology Description Popular sites using this technology JavaScript Widely-supported programming language commonly used to power client-side dynamic content on websites medium.com -
Frameworks or libraries allow for easier development of applications by providing an Application Program Interface (API) or a methodology to follow whilst developing.
Technology Description Popular sites using this technology AJAX No description www.paypal.com, www.amazon.fr, www.microsoft.com Google Hosted Libraries Google API to retrieve JavaScript libraries www.liveomg.com, www.bankofamerica.com, www.w3schools.com -
A web search engine is a software that is designed to search for information on the World Wide Web or on a specific site.
Technology Description Popular sites using this technology Custom Search Engine Google Custom Search Engine www.slideshare.net, www.booking.com, www.researchgate.net -
A character encoding system consists of a code that pairs each character from a given repertoire with something else such as a bit pattern, sequence of natural numbers, octets, or electrical pulses in order to facilitate the transmission of data (generally numbers or text) through telecommunication networks or for data storage.
-
HTTP compression is a capability that can be built into web servers and web clients to make better use of available bandwidth, and provide greater transmission speeds between both.
Technology Description Popular sites using this technology Gzip Content Encoding Gzip HTTP Compression protocol www.tsetmc.com, www.idealo.de, www.kinopoisk.ru -
Web browser targeting enables software applications to make use of specific functions of the browser as well as optimizing the application for specific browser versions.
Technology Description Popular sites using this technology Strict Transport Security Web security policy mechanism whereby a web server declares that complying user agents are to interact with it using only secure HTTP connections www.linkedin.com, www.amazon.com, t.co Strict-Transport-Security (preload) No description www.amazon.co.uk, www.foxnews.com, www.imdb.com X-Frame-Options Same Origin Do not allow this site to be rendered within an iframe www.google.com, accounts.google.com, vars.hotjar.com Referrer Policy Restrict referrer information included in subsequent requests www.repubblica.it, www.upwork.com, www.tumblr.com Strict-Transport-Security (including subdomains) No description www.amazon.de, disqus.com, login.salesforce.com Content Security Policy Report Detect, mitigate and report attacks in the browser www.bol.com, www.icloud.com, www.seznam.cz Content Security Policy Detect and mitigate attacks in the browser www.mozilla.org, www.pinterest.com, teams.microsoft.com -
A Document Type Declaration, or DOCTYPE, is an instruction that associates a particular SGML or XML document (for example, a webpage) with a Document Type Definition (DTD).
Technology Description Popular sites using this technology HTML5 Latest revision of the HTML standard, the main markup language on the web www.googleadservices.com HTML The main markup language used for displaying web pages within browsers www.chase.com, aax-us-east.amazon-adsystem.com, dra.amazon-adsystem.com -
HTML5 is a markup language for structuring and presenting content for the World Wide Web and a core technology of the Internet. It is the fifth revision of the HTML standard.
Technology Description Popular sites using this technology Viewport meta tag HTML5 tag usually used for mobile optimization