F-Droid Mirror Monitor

Mirror Monitor

Get the full history as JSON: report.json

Source code:https://gitlab.com/fdroid/repo-monitor

https://f-droid.org/repo

2a00:c6c0:0:155:1::1

VerificationException

JAR signature failed to verify: /tmp/tmp7egz4cmm The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686059

duration

2.2619380950927734

status

200

TLS

TLSv1.3

headers

Server	nginx/1.22.1
Date	Sun, 14 Dec 2025 04:20:59 GMT
Content-Type	application/java-archive
Content-Length	11140565
Connection	keep-alive
Strict-Transport-Security	max-age=63072000
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
ETag	"a9fdd5-645dab8d856cd"
Accept-Ranges	bytes

tlsping

host	f-droid.org
ip	2a00:c6c0:0:155:1::1
address	f-droid.org:443
connection	TLS
count	10
min	0.316282802
max	0.317150202
average	0.31665099710000005
stddev	0.0002589091878139728
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://fdroid.tetaneutral.net/fdroid/repo

2a03:7220:8080:2d00::1

VerificationException

JAR signature failed to verify: /tmp/tmpw29oxuzh The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685251

duration

2.5065739154815674

status

200

TLS

TLSv1.3

headers

Server	nginx/1.22.1
Date	Sun, 14 Dec 2025 04:07:32 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Accept-Ranges	bytes

tlsping

host	fdroid.tetaneutral.net
ip	2a03:7220:8080:2d00::1
address	fdroid.tetaneutral.net:443
connection	TLS
count	10
min	0.332815645
max	0.334071062
average	0.3335246088
stddev	0.00037211433027223854
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://ftp.agdsn.de/fdroid/repo

2a13:dd85:b00:12::1

VerificationException

JAR signature failed to verify: /tmp/tmpnd43gmmx The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685029

duration

2.8776040077209473

status

200

TLS

TLSv1.3

headers

Server	nginx/1.26.3
Date	Sun, 14 Dec 2025 04:03:50 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Accept-Ranges	bytes

tlsping

host	ftp.agdsn.de
ip	2a13:dd85:b00:12::1
address	ftp.agdsn.de:443
connection	TLS
count	10
min	0.395339458
max	0.396825888
average	0.3962297198
stddev	0.00038591700516686796
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	client

least strength

https://ftp.fau.de/fdroid/repo

2001:638:a000:1021:21::1

VerificationException

JAR signature failed to verify: /tmp/tmpbzuygxt_ The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685294

duration

2.6150641441345215

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:08:14 GMT
Server	Apache/2.4.58 (Ubuntu)
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
ETag	"a9fdd5-645dab8ce9f80"
Accept-Ranges	bytes
Content-Length	11140565
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

host	ftp.fau.de
ip	2001:638:a000:1021:21::1
address	ftp.fau.de:443
connection	TLS
count	10
min	0.510131398
max	0.517421367
average	0.5147797714
stddev	0.00234020886480435
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

least strength

https://ftp.gwdg.de/pub/android/fdroid/repo

2a06:93c7:f0::f79

VerificationException

JAR signature failed to verify: /tmp/tmptnn915mk The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685052

duration

3.0270049571990967

status

200

TLS

TLSv1.2

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:04:13 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload
X-Frame-Options	SAMEORIGIN
X-Content-Type-Options	nosniff
Accept-Ranges	bytes

tlsping

host	ftp.gwdg.de
ip	2a06:93c7:f0::f79
address	ftp.gwdg.de:443
connection	TLS
count	10
min	0.576069464
max	0.580463134
average	0.5788764903000001
stddev	0.0014197553054215346
error

ssl-enum-ciphers

TLSv1.0

ciphers	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp384r1) - A
compressors	NULL
cipher preference	indeterminate
cipher preference error	Too few ciphers supported

TLSv1.1

ciphers	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp384r1) - A
compressors	NULL
cipher preference	indeterminate
cipher preference error	Too few ciphers supported

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp384r1) - A
compressors	NULL
cipher preference	server

least strength

https://ftp.lysator.liu.se/pub/fdroid/repo

2001:6b0:17:f0a0::fb

VerificationException

JAR signature failed to verify: /tmp/tmpc1z7b1ig The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685064

duration

3.5535900592803955

status

200

TLS

TLSv1.3

headers

server	nginx
date	Sun, 14 Dec 2025 04:04:25 GMT
content-type	application/java-archive
content-length	11140565
last-modified	Sat, 13 Dec 2025 19:52:46 GMT
etag	"693dc40e-a9fdd5"
accept-ranges	bytes

tlsping

host	ftp.lysator.liu.se
ip	2001:6b0:17:f0a0::fb
address	ftp.lysator.liu.se:443
connection	TLS
count	10
min	0.441848531
max	0.442928567
average	0.44237149379999996
stddev	0.0003547840621278731
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://mirror.cyberbits.eu/fdroid/repo

2001:bc8:1201:54:ca1f:66ff:fec9:239

VerificationException

JAR signature failed to verify: /tmp/tmp0kofn9o8 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685276

duration

2.4065909385681152

status

200

TLS

TLSv1.3

headers

Accept-Ranges	bytes
Alt-Svc	h3=":443"; ma=2592000
Content-Length	11140565
Content-Type	application/java-archive
Etag	"dexcnt88mxog6ms45"
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Referrer-Policy	strict-origin-when-cross-origin
Server	Caddy
Vary	Accept-Encoding
X-Content-Type-Options	nosniff
X-Frame-Options	DENY
Date	Sun, 14 Dec 2025 04:07:56 GMT

tlsping

host	mirror.cyberbits.eu
ip	2001:bc8:1201:54:ca1f:66ff:fec9:239
address	mirror.cyberbits.eu:443
connection	TLS
count	10
min	0.388971901
max	0.389777866
average	0.389360704
stddev	0.0003107056517664229
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://mirror.eu.ossplanet.net/fdroid/repo

65.21.121.21

VerificationException

JAR signature failed to verify: /tmp/tmpvgo05lx7 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685095

duration

3.132927894592285

status

200

TLS

TLSv1.3

headers

Server	nginx/1.24.0 (Ubuntu)
Date	Sun, 14 Dec 2025 04:04:56 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Accept-Ranges	bytes

tlsping

host	mirror.eu.ossplanet.net
ip	65.21.121.21
address	mirror.eu.ossplanet.net:443
connection	TLS
count	10
min	0.454906853
max	0.455849317
average	0.4554122037999999
stddev	0.0002460990544982996
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://mirror.fcix.net/fdroid/repo

2620:13b:0:1000::16

VerificationException

JAR signature failed to verify: /tmp/tmp657iw9we The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685105

duration

0.8788061141967773

status

200

TLS

TLSv1.3

headers

Server	nginx/1.18.0
Date	Sun, 14 Dec 2025 04:05:06 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Expires	Sun, 14 Dec 2025 04:10:06 GMT
Cache-Control	max-age=300
Accept-Ranges	bytes

tlsping

host	mirror.fcix.net
ip	2620:13b:0:1000::16
address	mirror.fcix.net:443
connection	TLS
count	10
min	0.121188693
max	0.122101975
average	0.12164143620000001
stddev	0.00027197444772250184
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://mirror.kumi.systems/fdroid/repo

2a0d:f302:136:b1b6::1

VerificationException

JAR signature failed to verify: /tmp/tmpfm0ejqlq The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685108

duration

3.112694025039673

status

200

TLS

TLSv1.3

headers

Accept-Ranges	bytes
Alt-Svc	h3=":443"; ma=2592000
Content-Length	11140565
Content-Type	application/java-archive
Etag	"dexcnt88mxog6ms45"
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Server	Caddy
Vary	Accept-Encoding
Date	Sun, 14 Dec 2025 04:05:09 GMT

tlsping

host	mirror.kumi.systems
ip	2a0d:f302:136:b1b6::1
address	mirror.kumi.systems:443
connection	TLS
count	10
min	0.506893498
max	0.507665995
average	0.5072737459
stddev	0.00026225718612478296
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://mirror.level66.network/fdroid/repo

2a09:11c0:1200:210:ffff:ffff:8d62:8843

VerificationException

JAR signature failed to verify: /tmp/tmp05l0j_q3 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685120

duration

3.3928909301757812

status

200

TLS

TLSv1.3

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:05:22 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Strict-Transport-Security	max-age=31536000; includeSubDomains
Accept-Ranges	bytes

tlsping

host	mirror.level66.network
ip	2a09:11c0:1200:210:ffff:ffff:8d62:8843
address	mirror.level66.network:443
connection	TLS
count	10
min	0.382501657
max	0.383670719
average	0.3830709789
stddev	0.00036752447581717607
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 4096) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_CCM_8 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_CCM (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 4096) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://mirror.ossplanet.net/fdroid/repo

2001:e10:6840:17::70

VerificationException

JAR signature failed to verify: /tmp/tmpanmt0e3j The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685136

duration

2.714829921722412

status

200

TLS

TLSv1.3

headers

Server	nginx/1.18.0 (Ubuntu)
Date	Sun, 14 Dec 2025 04:05:37 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Accept-Ranges	bytes

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 4096) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_CCM_8 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_CCM (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 4096) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://mirrors.dotsrc.org/fdroid/repo

2001:878:346::116

VerificationException

JAR signature failed to verify: /tmp/tmpcgvh0_7z The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685160

duration

3.1839890480041504

status

200

TLS

TLSv1.3

headers

Server	nginx/1.28.0
Date	Sun, 14 Dec 2025 04:06:01 GMT
Content-Type	application/java-archive
Content-Length	11134998
Last-Modified	Sat, 13 Dec 2025 07:58:30 GMT
Connection	keep-alive
ETag	"693d1ca6-a9e816"
X-Frame-Options	SAMEORIGIN
Referrer-Policy	strict-origin
Accept-Ranges	bytes

tlsping

host	mirrors.dotsrc.org
ip	2001:878:346::116
address	mirrors.dotsrc.org:443
connection	TLS
count	10
min	0.382540982
max	0.384159235
average	0.38330584050000005
stddev	0.00045660589438973584
error

ssl-enum-ciphers

TLSv1.0

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.1

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://opencolo.mm.fcix.net/fdroid/repo

2607:f358:1a:15::50

VerificationException

JAR signature failed to verify: /tmp/tmpfmi9o_u7 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685181

duration

0.7690660953521729

status

200

TLS

TLSv1.3

headers

Server	nginx/1.20.1
Date	Sun, 14 Dec 2025 04:06:21 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Accept-Ranges	bytes

tlsping

host	opencolo.mm.fcix.net
ip	2607:f358:1a:15::50
address	opencolo.mm.fcix.net:443
connection	TLS
count	10
min	0.14289277
max	0.143946054
average	0.1434637765
stddev	0.0003032588442249444
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_CCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	client

least strength

https://plug-mirror.rcac.purdue.edu/fdroid/repo

2001:18e8:804:35::3:1337

VerificationException

JAR signature failed to verify: /tmp/tmpbjnf_em6 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685327

duration

1.2481341361999512

status

200

TLS

TLSv1.3

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:08:47 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Accept-Ranges	bytes

tlsping

host	plug-mirror.rcac.purdue.edu
ip	2001:18e8:804:35::3:1337
address	plug-mirror.rcac.purdue.edu:443
connection	TLS
count	10
min	0.198694236
max	0.199673114
average	0.1992211633
stddev	0.00031481869044421387
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	client

least strength

https://mirror.init7.net/fdroid/repo

2001:1620::1620

VerificationException

JAR signature failed to verify: /tmp/tmp9mjnmj83 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685187

duration

2.708057165145874

status

200

TLS

TLSv1.3

headers

Server	nginx/1.26.3
Date	Sun, 14 Dec 2025 04:06:27 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Accept-Ranges	bytes

tlsping

host	mirror.init7.net
ip	2001:1620::1620
address	mirror.init7.net:443
connection	TLS
count	10
min	0.416919695
max	0.417769745
average	0.4173309961999999
stddev	0.000320969495074472
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 4096) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_CCM (dh 4096) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 4096) - A TLS_DHE_RSA_WITH_AES_128_CCM (dh 4096) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 4096) - A TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 4096) - A TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 4096) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 4096) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 4096) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://mirror.freedif.org/fdroid/repo

66.96.199.63

VerificationException

JAR signature failed to verify: /tmp/tmprnhwu24t The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685225

duration

2.8303208351135254

status

200

TLS

TLSv1.3

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:07:05 GMT
Content-Type	application/java-archive
Content-Length	11140565
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
Connection	keep-alive
ETag	"693dc40e-a9fdd5"
Accept-Ranges	bytes

tlsping

host	mirror.freedif.org
ip	66.96.199.63
address	mirror.freedif.org:443
connection	TLS
count	10
min	0.467206667
max	0.468123823
average	0.4676990869
stddev	0.0003285347416659146
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	client

least strength

https://bubu1.eu/fdroid/repo

176.9.145.28

starttime

1765685284

duration

0.7326979637145996

status

404

TLS

TLSv1.3

headers

Server	nginx/1.29.3
Date	Sun, 14 Dec 2025 04:08:05 GMT
Content-Type	text/html; charset=utf-8
Transfer-Encoding	chunked
Connection	keep-alive
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload
Referrer-Policy	strict-origin
X-Content-Type-Options	nosniff
X-XSS-Protection	1; mode=block
Content-Encoding	gzip

tlsping

host	bubu1.eu
ip	176.9.145.28
address	bubu1.eu:443
connection	TLS
count	10
min	0.395923479
max	0.396675335
average	0.3962579011
stddev	0.0002494902911443464
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	client

least strength

https://fdroid.swedneck.xyz/fdroid/repo

ConnectionError

HTTPSConnectionPool(host='fdroid.swedneck.xyz', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fe70918ab10>: Failed to establish a new connection: [Errno -2] Name or service not known'))

starttime

1765685293

duration

0.2016298770904541

status

404

TLS

[Errno -2] Name or service not known

headers

Server	nginx/1.29.3
Date	Sun, 14 Dec 2025 04:08:05 GMT
Content-Type	text/html; charset=utf-8
Transfer-Encoding	chunked
Connection	keep-alive
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload
Referrer-Policy	strict-origin
X-Content-Type-Options	nosniff
X-XSS-Protection	1; mode=block
Content-Encoding	gzip

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	client

least strength

https://mirror.jarsilio.com/fdroid/repo

ConnectionError

HTTPSConnectionPool(host='mirror.jarsilio.com', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fe70918a290>: Failed to establish a new connection: [Errno -2] Name or service not known'))

starttime

1765685306

duration

0.5649850368499756

status

200

TLS

[Errno -2] Name or service not known

headers

Date	Sun, 14 Dec 2025 04:08:14 GMT
Server	Apache/2.4.58 (Ubuntu)
Last-Modified	Sat, 13 Dec 2025 19:52:46 GMT
ETag	"a9fdd5-645dab8ce9f80"
Accept-Ranges	bytes
Content-Length	11140565
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

least strength

https://ftp.osuosl.org/pub/fdroid/repo

2600:3402:200:227::2

starttime

1765685308

duration

0.26018691062927246

status

404

TLS

TLSv1.2

headers

Date	Sun, 14 Dec 2025 04:08:28 GMT
Server	Apache
Content-Length	261
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	text/html; charset=iso-8859-1

tlsping

host	ftp.osuosl.org
ip	2600:3402:200:227::2
address	ftp.osuosl.org:443
connection	TLS
count	10
min	0.210568039
max	0.213679718
average	0.21254141310000002
stddev	0.0009170046747778791
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

least strength

https://mirror.scd31.com/fdroid/repo

205.209.125.10

starttime

1765685315

duration

0.40962696075439453

status

404

TLS

TLSv1.2

headers

Server	nginx/1.22.1
Date	Sun, 14 Dec 2025 04:08:35 GMT
Content-Type	text/html
Transfer-Encoding	chunked
Connection	keep-alive
Content-Encoding	gzip

tlsping

host	mirror.scd31.com
ip	205.209.125.10
address	mirror.scd31.com:443
connection	TLS
count	10
min	0.264730779
max	0.267042069
average	0.26590160269999996
stddev	0.000674006049157725
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

least strength

https://fdroid.fi-do.io/fdroid/repo

ConnectionError

HTTPSConnectionPool(host='fdroid.fi-do.io', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fe709189e10>: Failed to establish a new connection: [Errno -2] Name or service not known'))

starttime

1765685326

duration

0.5528359413146973

status

404

TLS

[Errno -2] Name or service not known

headers

Server	nginx/1.22.1
Date	Sun, 14 Dec 2025 04:08:35 GMT
Content-Type	text/html
Transfer-Encoding	chunked
Connection	keep-alive
Content-Encoding	gzip

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

least strength

https://android.izzysoft.de/repo

144.76.109.58

VerificationException

JAR signature failed to verify: /tmp/tmp8xfnsxl_ jarsigner: java.util.zip.ZipException: zip END header not found

starttime

1765685331

duration

0.8046820163726807

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:08:51 GMT
Server	Apache
Referrer-Policy	strict-origin-when-cross-origin
X-Content-Type-Options	nosniff
X-XSS-Protection	1; mode=block
X-Frame-Options	SAMEORIGIN
Permissions-Policy	interest-cohort=()
Content-Security-Policy	base-uri 'self'; font-src 'self' data:; media-src 'self'; connect-src 'self'; object-src 'self'; form-action 'self' .izzysoft.de .qumran.org; frame-ancestors 'self' .izzysoft.de .qumran.org; block-all-mixed-content; script-src 'self';
Strict-Transport-Security	max-age=15552000; includeSubDomains
Cache-Control	max-age=2592000
Expires	Tue, 13 Jan 2026 04:08:51 GMT
Vary	Accept-Encoding
Content-Encoding	gzip
Content-Length	1964
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	text/html; charset=UTF-8

tlsping

host	android.izzysoft.de
ip	144.76.109.58
address	android.izzysoft.de:443
connection	TLS
count	10
min	0.388111894
max	0.38924295
average	0.3886989283
stddev	0.0003173602909098806
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://anonymousmessenger.ly/fdroid/repo

185.176.41.167

VerificationException

JAR signature failed to verify: /tmp/tmpit_lropp The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685339

duration

1.0419418811798096

status

200

TLS

TLSv1.3

headers

Server	nginx/1.27.0
Date	Sun, 14 Dec 2025 04:09:00 GMT
Content-Type	application/java-archive
Content-Length	5581
Last-Modified	Thu, 21 Jul 2022 14:06:02 GMT
Connection	keep-alive
ETag	"62d95d4a-15cd"
Accept-Ranges	bytes

tlsping

host	anonymousmessenger.ly
ip	185.176.41.167
address	anonymousmessenger.ly:443
connection	TLS
count	10
min	0.451143409
max	0.452239016
average	0.4516382172
stddev	0.00032142780869514047
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://app.futo.org/fdroid/repo

159.65.228.96

VerificationException

JAR signature failed to verify: /tmp/tmp3s_4qr4_ The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685353

duration

0.5632510185241699

status

200

TLS

TLSv1.3

headers

Server	nginx/1.22.1
Date	Sun, 14 Dec 2025 04:09:13 GMT
Content-Type	application/java-archive
Content-Length	5087
Last-Modified	Thu, 04 Dec 2025 06:58:39 GMT
Connection	keep-alive
ETag	"6931311f-13df"
Accept-Ranges	bytes

tlsping

host	app.futo.org
ip	159.65.228.96
address	app.futo.org:443
connection	TLS
count	10
min	0.234046469
max	0.235168713
average	0.23470120020000002
stddev	0.00033366884768008993
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://app.usb0.net/repo

2606:4700:3031::6815:61c

starttime

1765685360

duration

0.148453950881958

status

404

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:09:20 GMT
Content-Type	text/html
Transfer-Encoding	chunked
Connection	keep-alive
Server	cloudflare
Cache-Control	max-age=14400
cf-cache-status	EXPIRED
Nel	{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary	accept-encoding
Report-To	{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=xA1QxSdh3Xq%2BWJxmI1HlqbaJd61FlEsgp9iK%2BmFOLRkRk95b7jMokjjmcDpzkExb6Mr0RnexzoVnZP3%2FRM8H4n0uieKf02cj4n6n%2B%2FjpCaRFEn%2B9ndA%3D"}]}
Content-Encoding	br
CF-RAY	9adad8612daaefd6-PDX
alt-svc	h3=":443"; ma=86400

tlsping

host	app.usb0.net
ip	2606:4700:3031::6815:61c
address	app.usb0.net:443
connection	TLS
count	10
min	0.127333841
max	0.130906538
average	0.1293895426
stddev	0.001098595349816772
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://apt.izzysoft.de/fdroid/repo

144.76.109.58

VerificationException

JAR signature failed to verify: /tmp/tmppowsj3yi The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685361

duration

2.295875072479248

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:09:22 GMT
Server	Apache
Referrer-Policy	strict-origin-when-cross-origin
X-Content-Type-Options	nosniff
X-XSS-Protection	1; mode=block
X-Frame-Options	SAMEORIGIN
Permissions-Policy	interest-cohort=()
Content-Security-Policy	base-uri 'self'; font-src 'self' data:; media-src 'self'; connect-src 'self'; object-src 'self'; form-action 'self' .izzysoft.de .qumran.org; frame-ancestors 'self' .izzysoft.de .qumran.org; block-all-mixed-content; script-src 'self';
Strict-Transport-Security	max-age=15552000; includeSubDomains
Last-Modified	Sat, 13 Dec 2025 18:49:02 GMT
ETag	"2f5527-645d9d4e96f15"
Accept-Ranges	bytes
Content-Length	3101991
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

host	apt.izzysoft.de
ip	144.76.109.58
address	apt.izzysoft.de:443
connection	TLS
count	10
min	0.387617179
max	0.388529754
average	0.38816880119999997
stddev	0.0002530254913022871
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://archive.newpipe.net/fdroid/repo

2a01:4f8:231:1ec7::60:1

VerificationException

JAR signature failed to verify: /tmp/tmpqk3v91di The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685371

duration

1.3451550006866455

status

200

TLS

TLSv1.3

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:09:32 GMT
Content-Type	application/java-archive
Content-Length	28256
Last-Modified	Thu, 31 Jul 2025 22:14:40 GMT
Connection	keep-alive
ETag	"688bead0-6e60"
X-Frame-Options	SAMEORIGIN
Strict-Transport-Security	max-age=31536000; includeSubDomains
X-Content-Type-Options	nosniff
X-XSS-Protection	1; mode=block
Referrer-Policy	strict-origin
Permissions-Policy	interest-cohort=()
Content-Security-Policy	default-src 'self'; object-src 'none'; block-all-mixed-content
Accept-Ranges	bytes

tlsping

host	archive.newpipe.net
ip	2a01:4f8:231:1ec7::60:1
address	archive.newpipe.net:443
connection	TLS
count	10
min	0.39738311
max	0.397922536
average	0.39769557170000003
stddev	0.0001777987315989885
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CCM_8 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CCM (dh 2048) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CCM_8 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CCM (dh 2048) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM (rsa 2048) - A TLS_RSA_WITH_ARIA_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://brave-browser-apk-nightly.s3.brave.com/fdroid/repo

3.163.24.121

VerificationException

The repository's fingerprint does not match.

starttime

1765685410

duration

0.7967560291290283

status

200

TLS

TLSv1.3

headers

Content-Type	application/java-archive
Content-Length	138890
Connection	keep-alive
Date	Sun, 14 Dec 2025 04:10:11 GMT
Last-Modified	Thu, 11 Dec 2025 15:53:17 GMT
ETag	"ede401308d9aaf4904152ac68e81a70d"
x-amz-server-side-encryption	AES256
x-amz-version-id	rc7jTzMPlAzLES34yGgM0X48hZAGGakY
Accept-Ranges	bytes
Server	AmazonS3
X-Cache	Miss from cloudfront
Via	1.1 049ca50de603d43d8c9d0f7716efb414.cloudfront.net (CloudFront)
X-Amz-Cf-Pop	HIO52-P2
Alt-Svc	h3=":443"; ma=86400
X-Amz-Cf-Id	udrtrSH_XJJaPmLxkMGrgdHWAabJ0s0EHfmuNgHaUHSLWZXqZOJSKg==

tlsping

host	brave-browser-apk-nightly.s3.brave.com
ip	3.163.24.121
address	brave-browser-apk-nightly.s3.brave.com:443
connection	TLS
count	10
min	0.070301192
max	0.779108832
average	0.1494173847
stddev	0.21118288855422238
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://brave-browser-apk-release.s3.brave.com/fdroid/repo

108.157.142.34

VerificationException

The repository's fingerprint does not match.

starttime

1765685414

duration

1.0497479438781738

status

200

TLS

TLSv1.3

headers

Content-Type	application/java-archive
Content-Length	39017
Connection	keep-alive
Date	Sun, 14 Dec 2025 04:10:15 GMT
Last-Modified	Thu, 11 Dec 2025 20:11:57 GMT
ETag	"2620e55ecf85c97a8b19590759cb96fe"
x-amz-server-side-encryption	AES256
x-amz-version-id	umUH14_GQhPwlh8xofyrCy04Nm7um55l
Accept-Ranges	bytes
Server	AmazonS3
X-Cache	Miss from cloudfront
Via	1.1 bfbe7bdc48654fe20a464e560b6ba3f8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop	MCI50-P1
Alt-Svc	h3=":443"; ma=86400
X-Amz-Cf-Id	-VI-kEpejMGoAbAT_9r2djslxx6ZizIzCfoI5Y1S75pPhzmXbEtTiA==

tlsping

host	brave-browser-apk-release.s3.brave.com
ip	3.175.34.62
address	brave-browser-apk-release.s3.brave.com:443
connection	TLS
count	10
min	0.075507684
max	0.147335967
average	0.08347901990000002
stddev	0.021292299901931606
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://breezy-weather.github.io/fdroid-repo/fdroid/repo

2606:50c0:8001::153

VerificationException

JAR signature failed to verify: /tmp/tmpyz48x87i The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685416

duration

0.5538830757141113

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	18962
Server	GitHub.com
Content-Type	application/java-archive
Last-Modified	Sun, 14 Dec 2025 02:03:46 GMT
Access-Control-Allow-Origin	*
Strict-Transport-Security	max-age=31556952
ETag	"693e1b02-4a12"
expires	Sun, 14 Dec 2025 04:20:17 GMT
Cache-Control	max-age=600
x-proxy-cache	MISS
X-GitHub-Request-Id	1B24:3A2B3:9CDB24:A28F85:693E38A7
Accept-Ranges	bytes
Age	0
Date	Sun, 14 Dec 2025 04:10:17 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12329-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765685417.010919,VS0,VE82
Vary	Accept-Encoding
X-Fastly-Request-ID	1b8298c475704142f4128247a5c72124f89677f0

tlsping

host	breezy-weather.github.io
ip	2606:50c0:8003::153
address	breezy-weather.github.io:443
connection	TLS
count	10
min	0.092595625
max	0.09744079
average	0.09522799140000002
stddev	0.0017286759266789248
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://briarproject.org/fdroid/repo

157.90.23.135

VerificationException

JAR signature failed to verify: /tmp/tmpzg4skur1 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685418

duration

1.0116219520568848

status

200

TLS

TLSv1.3

headers

Server	nginx/1.22.1
Date	Sun, 14 Dec 2025 04:09:06 GMT
Content-Type	application/java-archive
Content-Length	4274
Last-Modified	Thu, 11 Dec 2025 10:35:57 GMT
Connection	keep-alive
ETag	"693a9e8d-10b2"
Strict-Transport-Security	max-age=31536000; includeSubDomains
Accept-Ranges	bytes

tlsping

host	briarproject.org
ip	157.90.23.135
address	briarproject.org:443
connection	TLS
count	10
min	0.394838038
max	0.395592742
average	0.39535139150000004
stddev	0.0002498842275423719
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://bubu1.eu/fdroidclassic/fdroid/repo

176.9.145.28

VerificationException

The repository's fingerprint does not match.

starttime

1765685426

duration

1.1522278785705566

status

200

TLS

TLSv1.3

headers

Server	nginx/1.29.3
Date	Sun, 14 Dec 2025 04:10:27 GMT
Content-Type	application/java-archive
Content-Length	9793
Last-Modified	Wed, 08 Mar 2023 23:22:24 GMT
Connection	keep-alive
ETag	"640918b0-2641"
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload
Referrer-Policy	strict-origin
X-Content-Type-Options	nosniff
X-XSS-Protection	1; mode=block
Accept-Ranges	bytes

tlsping

host	bubu1.eu
ip	176.9.145.28
address	bubu1.eu:443
connection	TLS
count	10
min	0.408749263
max	0.409720973
average	0.40922384979999993
stddev	0.00032242636901586865
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	client

least strength

https://calyxos.gitlab.io/calyx-fdroid-repo/fdroid/repo

2600:1901:0:7b8a::

VerificationException

JAR signature failed to verify: /tmp/tmpx3o39yl1 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685435

duration

0.4957010746002197

status

200

TLS

TLSv1.3

headers

Cache-Control	max-age=600
Content-Length	6886
Content-Type	application/java-archive
Etag	"ba1847cc605e906caccc7fed4fc80cbbdd17455b285b546a822186a6faa4f499"
Expires	Sun, 14 Dec 2025 04:20:35 UTC
Last-Modified	Sun, 14 Dec 2025 04:04:07 GMT
Permissions-Policy	interest-cohort=()
Vary	Origin
X-Request-Id	01KCDGV7EDM969QBPB9JP77WT1
Date	Sun, 14 Dec 2025 04:10:35 GMT

tlsping

host	calyxos.gitlab.io
ip	2600:1901:0:7b8a::
address	calyxos.gitlab.io:443
connection	TLS
count	10
min	0.146445109
max	0.148322146
average	0.1473795936
stddev	0.000700268346358619
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://cdn.kde.org/android/fdroid/repo

2a02:6ea0:d800::6

VerificationException

JAR signature failed to verify: /tmp/tmpm7su6nxz The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685439

duration

1.0219149589538574

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:10:39 GMT
Content-Type	application/java-archive
Content-Length	167169
Connection	keep-alive
Last-Modified	Sat, 13 Dec 2025 00:29:28 GMT
Cache-Control	max-age=0
Expires	Sun, 14 Dec 2025 04:10:39 GMT
Strict-Transport-Security	max-age=15768000
Referrer-Policy	strict-origin-when-cross-origin
X-XSS-Protection	1; mode=block
X-Content-Type-Options	nosniff
X-Frame-Options	sameorigin
Permissions-Policy	interest-cohort=()
X-77-NZT	k6HTf+GOt+qMqlVlRpXAFU+g3ERfUzDFIcWb578GjQjJr2hu0R4KJaY
X-77-NZT-Ray	c4d6692f56a93a40bf383e6937247c11
X-77-Cache	MISS
Server	CDN77-Turbo
X-77-POP	seattleUSWA
Accept-Ranges	bytes

tlsping

host	cdn.kde.org
ip	2a02:6ea0:d800::6
address	cdn.kde.org:443
connection	TLS
count	10
min	0.105989678
max	0.106739534
average	0.10637486119999999
stddev	0.0002133938815668341
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://cdn.kde.org/android/stable-releases/fdroid/repo

2a02:6ea0:c600::26

VerificationException

JAR signature failed to verify: /tmp/tmpepd00rb9 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685441

duration

1.055246114730835

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:10:42 GMT
Content-Type	application/java-archive
Content-Length	79119
Connection	keep-alive
Last-Modified	Wed, 10 Dec 2025 16:50:39 GMT
Cache-Control	max-age=0
Expires	Sun, 14 Dec 2025 04:10:41 GMT
Strict-Transport-Security	max-age=15768000
Referrer-Policy	strict-origin-when-cross-origin
X-XSS-Protection	1; mode=block
X-Content-Type-Options	nosniff
X-Frame-Options	sameorigin
Permissions-Policy	interest-cohort=()
X-77-NZT	k3lUwEOB01+NuOVthVZtkDmBbysUjwSwQwbV4fBcadQrqWZz7Mo02dU
X-77-NZT-Ray	60da0222382e0488e6383e69eff8142d
X-77-Cache	MISS
Server	CDN77-Turbo
X-77-POP	chicagoUSIL
Accept-Ranges	bytes

tlsping

host	cdn.kde.org
ip	2a02:6ea0:d800::6
address	cdn.kde.org:443
connection	TLS
count	10
min	0.104392515
max	0.104853905
average	0.10466250800000002
stddev	0.0001438780088276163
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://codeberg.org/florian-obernberger/fdroid-repo/raw/branch/main/repo

2a0a:4580:103f:c0de::1

VerificationException

JAR signature failed to verify: /tmp/tmp8_knalx1 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765685443

duration

0.8473770618438721

status

200

TLS

TLSv1.3

headers

Access-Control-Expose-Headers	Content-Disposition
Alt-Svc	h3=":443"; ma=2592000,h3=":443"; ma=2592000
Cache-Control	private, max-age=300
Content-Disposition	inline; filename="index-v1.jar"; filename*=UTF-8''index-v1.jar
Content-Length	6625
Content-Type	application/octet-stream
Date	Sun, 14 Dec 2025 04:10:44 GMT
Etag	"ab1dd48e83fa124702d9c8f6801ee6a9ec2060cb"
Last-Modified	Sun, 20 Oct 2024 13:08:07 GMT
No-Gzip-Compression	1
Permissions-Policy	interest-cohort=()
Set-Cookie	cb_sessionid=87ed34cc78ba1916; Path=/; HttpOnly; Secure; SameSite=Lax, _csrf=jFRMbPtUozNZEfb33mu-pB1Ooj86MTc2NTY4NTQ0NDI3MTUzNDk4Mg; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload
Via	1.1 Caddy
X-Content-Type-Options	nosniff
X-Frame-Options	SAMEORIGIN

tlsping

host	codeberg.org
ip	2a0a:4580:103f:c0de::1
address	codeberg.org:443
connection	TLS
count	10
min	0.434512551
max	0.435559631
average	0.4349922127
stddev	0.00030907681381172697
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://eutopia.cz/experimental/fdroid/repo

SSLError

HTTPSConnectionPool(host='eutopia.cz', port=443): Max retries exceeded with url: /experimental/fdroid/repo/index-v1.jar (Caused by SSLError(CertificateError("hostname 'eutopia.cz' doesn't match either of 'kupelnesk.sk', 'services.kupelnesk.sk', 'www.kupelnesk.sk'")))

starttime

1765685451

duration

60.534003019332886

status

200

TLS

[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'eutopia.cz'. (_ssl.c:992)

headers

Access-Control-Expose-Headers	Content-Disposition
Alt-Svc	h3=":443"; ma=2592000,h3=":443"; ma=2592000
Cache-Control	private, max-age=300
Content-Disposition	inline; filename="index-v1.jar"; filename*=UTF-8''index-v1.jar
Content-Length	6625
Content-Type	application/octet-stream
Date	Sun, 14 Dec 2025 04:10:44 GMT
Etag	"ab1dd48e83fa124702d9c8f6801ee6a9ec2060cb"
Last-Modified	Sun, 20 Oct 2024 13:08:07 GMT
No-Gzip-Compression	1
Permissions-Policy	interest-cohort=()
Set-Cookie	cb_sessionid=87ed34cc78ba1916; Path=/; HttpOnly; Secure; SameSite=Lax, _csrf=jFRMbPtUozNZEfb33mu-pB1Ooj86MTc2NTY4NTQ0NDI3MTUzNDk4Mg; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload
Via	1.1 Caddy
X-Content-Type-Options	nosniff
X-Frame-Options	SAMEORIGIN

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://eutopia.cz/fdroid/repo

SSLError

HTTPSConnectionPool(host='eutopia.cz', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by SSLError(CertificateError("hostname 'eutopia.cz' doesn't match either of 'kupelnesk.sk', 'services.kupelnesk.sk', 'www.kupelnesk.sk'")))

starttime

1765685652

duration

60.59950113296509

status

200

TLS

[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: Hostname mismatch, certificate is not valid for 'eutopia.cz'. (_ssl.c:992)

headers

Access-Control-Expose-Headers	Content-Disposition
Alt-Svc	h3=":443"; ma=2592000,h3=":443"; ma=2592000
Cache-Control	private, max-age=300
Content-Disposition	inline; filename="index-v1.jar"; filename*=UTF-8''index-v1.jar
Content-Length	6625
Content-Type	application/octet-stream
Date	Sun, 14 Dec 2025 04:10:44 GMT
Etag	"ab1dd48e83fa124702d9c8f6801ee6a9ec2060cb"
Last-Modified	Sun, 20 Oct 2024 13:08:07 GMT
No-Gzip-Compression	1
Permissions-Policy	interest-cohort=()
Set-Cookie	cb_sessionid=87ed34cc78ba1916; Path=/; HttpOnly; Secure; SameSite=Lax, _csrf=jFRMbPtUozNZEfb33mu-pB1Ooj86MTc2NTY4NTQ0NDI3MTUzNDk4Mg; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload
Via	1.1 Caddy
X-Content-Type-Options	nosniff
X-Frame-Options	SAMEORIGIN

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://f-droid.i2p.io/repo

ConnectTimeout

HTTPSConnectionPool(host='f-droid.i2p.io', port=443): Max retries exceeded with url: /repo/index-v1.jar (Caused by ConnectTimeoutError(<urllib3.connection.HTTPSConnection object at 0x7fe7091cd610>, 'Connection to f-droid.i2p.io timed out. (connect timeout=60)'))

starttime

1765685853

duration

60.251863956451416

status

200

TLS

[Errno 110] Connection timed out

headers

Access-Control-Expose-Headers	Content-Disposition
Alt-Svc	h3=":443"; ma=2592000,h3=":443"; ma=2592000
Cache-Control	private, max-age=300
Content-Disposition	inline; filename="index-v1.jar"; filename*=UTF-8''index-v1.jar
Content-Length	6625
Content-Type	application/octet-stream
Date	Sun, 14 Dec 2025 04:10:44 GMT
Etag	"ab1dd48e83fa124702d9c8f6801ee6a9ec2060cb"
Last-Modified	Sun, 20 Oct 2024 13:08:07 GMT
No-Gzip-Compression	1
Permissions-Policy	interest-cohort=()
Set-Cookie	cb_sessionid=87ed34cc78ba1916; Path=/; HttpOnly; Secure; SameSite=Lax, _csrf=jFRMbPtUozNZEfb33mu-pB1Ooj86MTc2NTY4NTQ0NDI3MTUzNDk4Mg; Path=/; Max-Age=86400; HttpOnly; Secure; SameSite=Lax
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload
Via	1.1 Caddy
X-Content-Type-Options	nosniff
X-Frame-Options	SAMEORIGIN

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://f-droid.monerujo.io/fdroid/repo

2600:1901:0:7b8a::

VerificationException

JAR signature failed to verify: /tmp/tmpkr1fjl_q The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686055

duration

0.6613898277282715

status

200

TLS

TLSv1.3

headers

Cache-Control	max-age=600
Content-Length	7600
Content-Type	application/java-archive
Etag	"affdb5c6a9b95f4decc4c67a141ea146e5e87e303f64dbea67d8404c48779732"
Expires	Sun, 14 Dec 2025 04:30:55 UTC
Last-Modified	Tue, 17 Jun 2025 17:27:43 GMT
Permissions-Policy	interest-cohort=()
Vary	Origin
X-Request-Id	01KCDHE4JT21Z6QPMAV40TAVV6
Date	Sun, 14 Dec 2025 04:20:55 GMT

tlsping

host	f-droid.monerujo.io
ip	2600:1901:0:7b8a::
address	f-droid.monerujo.io:443
connection	TLS
count	10
min	0.149085472
max	0.151843675
average	0.14996468400000001
stddev	0.0007236810687481095
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://fdroid.a3.pm/seabear/repo

2606:4700:3031::6815:4e6b

starttime

1765686074

duration

6.239166975021362

status

523

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:21:21 GMT
Content-Type	text/html; charset=UTF-8
Content-Length	7184
Connection	keep-alive
Cache-Control	private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires	Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy	same-origin
X-Frame-Options	SAMEORIGIN
Server	cloudflare
CF-RAY	9adae9d11b685ee6-PDX
alt-svc	h3=":443"; ma=86400

tlsping

host	fdroid.a3.pm
ip	2606:4700:3031::6815:4e6b
address	fdroid.a3.pm:443
connection	TLS
count	10
min	0.128269826
max	0.132228986
average	0.13018924530000003
stddev	0.001295120442183353
error

ssl-enum-ciphers

TLSv1.1

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.beocode.eu/fdroid/repo

ConnectionError

HTTPSConnectionPool(host='fdroid.beocode.eu', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fe7091deb90>: Failed to establish a new connection: [Errno -2] Name or service not known'))

starttime

1765686082

duration

0.07486391067504883

status

523

TLS

[Errno -2] Name or service not known

headers

Date	Sun, 14 Dec 2025 04:21:21 GMT
Content-Type	text/html; charset=UTF-8
Content-Length	7184
Connection	keep-alive
Cache-Control	private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires	Thu, 01 Jan 1970 00:00:01 GMT
Referrer-Policy	same-origin
X-Frame-Options	SAMEORIGIN
Server	cloudflare
CF-RAY	9adae9d11b685ee6-PDX
alt-svc	h3=":443"; ma=86400

tlsping

None

ssl-enum-ciphers

TLSv1.1

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.bromite.org/fdroid/repo

2001:4b98:dc0:43:216:3eff:fe76:45d2

VerificationException

JAR signature failed to verify: /tmp/tmp47hu3e4k The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686083

duration

0.9337878227233887

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:21:23 GMT
Content-Type	application/java-archive
Content-Length	14302
Last-Modified	Mon, 19 Dec 2022 21:09:36 GMT
Connection	keep-alive
ETag	"63a0d310-37de"
Server	Apache/2.4.9 (Unix)
Accept-Ranges	bytes

tlsping

host	fdroid.bromite.org
ip	2001:4b98:dc0:43:216:3eff:fe76:45d2
address	fdroid.bromite.org:443
connection	TLS
count	10
min	0.343345499
max	0.392282356
average	0.3527219431
stddev	0.01577845281265514
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.cgeo.org/fdroid/repo

2a01:4f8:c012:6483::1

VerificationException

JAR signature failed to verify: /tmp/tmpk_mhv8u0 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686090

duration

1.4063618183135986

status

200

TLS

TLSv1.3

headers

accept-ranges	bytes
content-type	application/java-archive
date	Sun, 14 Dec 2025 04:21:31 GMT
etag	"692dde72-1801"
last-modified	Mon, 01 Dec 2025 18:29:06 GMT
server	nginx/1.27.5
content-length	6145

tlsping

host	fdroid.cgeo.org
ip	2a01:4f8:c012:6483::1
address	fdroid.cgeo.org:443
connection	TLS
count	10
min	0.394535963
max	0.399569231
average	0.39548132750000003
stddev	0.0013844195012669637
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	server
warnings	Key exchange (ecdh_x25519) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://fdroid.cgeo.org/repo

2a01:4f8:c012:6483::1

VerificationException

JAR signature failed to verify: /tmp/tmpj3gnp6jx The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686100

duration

0.9868171215057373

status

200

TLS

TLSv1.3

headers

accept-ranges	bytes
content-type	application/java-archive
date	Sun, 14 Dec 2025 04:21:40 GMT
etag	"692dde72-1801"
last-modified	Mon, 01 Dec 2025 18:29:06 GMT
server	nginx/1.27.5
content-length	6145

tlsping

host	fdroid.cgeo.org
ip	2a01:4f8:c012:6483::1
address	fdroid.cgeo.org:443
connection	TLS
count	10
min	0.392194724
max	0.409357031
average	0.39582917489999997
stddev	0.005403359132674714
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	server
warnings	Key exchange (ecdh_x25519) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://fdroid.fedilab.app/repo

2001:41d0:403:1f0f::1

VerificationException

JAR signature failed to verify: /tmp/tmp2_dsuq9p The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686108

duration

1.3327031135559082

status

200

TLS

TLSv1.3

headers

date	Sun, 14 Dec 2025 04:21:49 GMT
content-type	application/java-archive
content-length	41020
last-modified	Tue, 30 Sep 2025 18:41:32 GMT
etag	"68dc245c-a03c"
accept-ranges	bytes
permissions-policy	microphone=(), camera=(), geolocation=(), interest-cohort=()
x-frame-options	deny
x-content-type-options	nosniff

tlsping

host	fdroid.fedilab.app
ip	2001:41d0:403:1f0f::1
address	fdroid.fedilab.app:443
connection	TLS
count	10
min	0.401930996
max	0.402678071
average	0.4023319457
stddev	0.000204429187898922
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.frostnerd.com/fdroid/repo

2a0a:4cc0:80:23a4:643f:2dff:fe65:f9ef

starttime

1765686117

duration

0.7633168697357178

status

404

TLS

TLSv1.3

headers

Alt-Svc	h3=":443"; ma=2592000
Expect-Ct	max-age=86400, enforce
Feature-Policy	microphone 'none'; camera 'none'
Permissions-Policy	camera=(), geolocation=(), microphone=(), interest-cohort=()
Referrer-Policy	same-origin
Server	Caddy
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
X-Frame-Options	sameorigin
X-Xss-Protection	0
Date	Sun, 14 Dec 2025 04:21:58 GMT
Content-Length	0

tlsping

host	fdroid.frostnerd.com
ip	2a0a:4cc0:80:23a4:643f:2dff:fe65:f9ef
address	fdroid.frostnerd.com:443
connection	TLS
count	10
min	0.430773622
max	0.431860055
average	0.43138933260000006
stddev	0.0003318307729488642
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://fdroid.koyu.space/fdroid/repo

SSLError

HTTPSConnectionPool(host='fdroid.koyu.space', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by SSLError(SSLError(1, '[SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:992)')))

starttime

1765686125

duration

60.452512979507446

status

404

TLS

[SSL: TLSV1_ALERT_INTERNAL_ERROR] tlsv1 alert internal error (_ssl.c:992)

headers

Alt-Svc	h3=":443"; ma=2592000
Expect-Ct	max-age=86400, enforce
Feature-Policy	microphone 'none'; camera 'none'
Permissions-Policy	camera=(), geolocation=(), microphone=(), interest-cohort=()
Referrer-Policy	same-origin
Server	Caddy
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
X-Frame-Options	sameorigin
X-Xss-Protection	0
Date	Sun, 14 Dec 2025 04:21:58 GMT
Content-Length	0

tlsping

None

ssl-enum-ciphers

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://fdroid.krombel.de/riot-dev-fdroid/fdroid/repo

2a02:c207:3004:2744::1

VerificationException

JAR signature failed to verify: /tmp/tmp_fea6vq5 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686322

duration

1.080538034439087

status

200

TLS

TLSv1.3

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:25:22 GMT
Content-Type	application/java-archive
Content-Length	4315
Last-Modified	Thu, 01 Aug 2019 17:05:29 GMT
Connection	keep-alive
Vary	Accept-Encoding
ETag	"5d431bd9-10db"
Accept-Ranges	bytes

tlsping

host	fdroid.krombel.de
ip	2a02:c207:3004:2744::1
address	fdroid.krombel.de:443
connection	TLS
count	10
min	0.37143313
max	0.372357167
average	0.371992303
stddev	0.0002711681234953664
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.krombel.de/riot-stable/fdroid/repo

2a02:c207:3004:2744::1

VerificationException

JAR signature failed to verify: /tmp/tmp5qhbn7bf jarsigner: java.util.zip.ZipException: zip END header not found

starttime

1765686330

duration

1.0306799411773682

status

200

TLS

TLSv1.3

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:25:30 GMT
Content-Type	text/html
Content-Length	45
Last-Modified	Wed, 17 Apr 2019 21:22:15 GMT
Connection	keep-alive
Vary	Accept-Encoding
ETag	"5cb79907-2d"
Accept-Ranges	bytes

tlsping

host	fdroid.krombel.de
ip	2a02:c207:3004:2744::1
address	fdroid.krombel.de:443
connection	TLS
count	10
min	0.361545623
max	0.36227846
average	0.36197444700000003
stddev	0.00019549171005339792
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.libretro.com/repo

5.9.202.202

VerificationException

JAR signature failed to verify: /tmp/tmph6ueg_1z The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686339

duration

0.9933788776397705

status

200

TLS

TLSv1.2

headers

Content-Type	application/java-archive
Accept-Ranges	bytes
ETag	"1711916461"
Last-Modified	Wed, 18 Nov 2020 10:48:50 GMT
Content-Length	5595
Date	Sun, 14 Dec 2025 04:25:40 GMT
Server	lighttpd/1.4.35

tlsping

host	fdroid.libretro.com
ip	5.9.202.202
address	fdroid.libretro.com:443
connection	TLS
count	10
min	0.588550614
max	0.610587662
average	0.5922733392
stddev	0.00616958684138007
error

ssl-enum-ciphers

TLSv1.0

ciphers	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 1024) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 1024) - A TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256r1) - C TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (dh 1024) - D TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 1024) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 1024) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server
warnings	64-bit block cipher 3DES vulnerable to SWEET32 attack Key exchange (dh 1024) of lower strength than certificate key

TLSv1.1

ciphers	TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 1024) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 1024) - A TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256r1) - C TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (dh 1024) - D TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 1024) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 1024) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server
warnings	64-bit block cipher 3DES vulnerable to SWEET32 attack Key exchange (dh 1024) of lower strength than certificate key

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 1024) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 1024) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 1024) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 1024) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 1024) - A TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256r1) - C TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA (dh 1024) - D TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 1024) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 1024) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 1024) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server
warnings	64-bit block cipher 3DES vulnerable to SWEET32 attack Key exchange (dh 1024) of lower strength than certificate key

least strength

https://fdroid.metatransapps.com/fdroid/repo

49.12.195.92

VerificationException

JAR signature failed to verify: /tmp/tmpxc5yw4zi The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686366

duration

1.685410976409912

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:26:07 GMT
Server	Apache/2.4.48 (Debian)
Permissions-Policy	interest-cohort=()
X-XSS-Protection	1; mode=block
X-Frame-Options	SAMEORIGIN
X-Content-Type-Options	nosniff
Referrer-Policy	strict-origin-when-cross-origin
Content-Security-Policy	base-uri 'self'; default-src 'none'; font-src 'self'; media-src 'self'; img-src 'self' metatransapps.com; style-src 'self' 'unsafe-inline' metatransapps.com; script-src 'self'; connect-src 'self'; object-src 'self'; form-action 'self' metatransapps.com; frame-ancestors 'self' metatransapps.com; block-all-mixed-content;
Strict-Transport-Security	max-age=15552000
Last-Modified	Fri, 12 Sep 2025 00:41:19 GMT
ETag	"d3aa-63e8fe98d2964"
Accept-Ranges	bytes
Content-Length	54186
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

host	fdroid.metatransapps.com
ip	49.12.195.92
address	fdroid.metatransapps.com:443
connection	TLS
count	10
min	0.408890162
max	0.409582353
average	0.4093023702
stddev	0.00023586248820735083
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CCM (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CCM_8 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CCM (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CCM_8 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.nordgedanken.dev/repos/CeqjCgrW_4yY_px59cntLkkAov3QRlwQ/repo

ConnectionError

HTTPSConnectionPool(host='fdroid.nordgedanken.dev', port=443): Max retries exceeded with url: /repos/CeqjCgrW_4yY_px59cntLkkAov3QRlwQ/repo/index-v1.jar (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fe7091bcd10>: Failed to establish a new connection: [Errno -5] No address associated with hostname'))

starttime

1765686380

duration

0.4731128215789795

status

200

TLS

[Errno -5] No address associated with hostname

headers

Date	Sun, 14 Dec 2025 04:26:07 GMT
Server	Apache/2.4.48 (Debian)
Permissions-Policy	interest-cohort=()
X-XSS-Protection	1; mode=block
X-Frame-Options	SAMEORIGIN
X-Content-Type-Options	nosniff
Referrer-Policy	strict-origin-when-cross-origin
Content-Security-Policy	base-uri 'self'; default-src 'none'; font-src 'self'; media-src 'self'; img-src 'self' metatransapps.com; style-src 'self' 'unsafe-inline' metatransapps.com; script-src 'self'; connect-src 'self'; object-src 'self'; form-action 'self' metatransapps.com; frame-ancestors 'self' metatransapps.com; block-all-mixed-content;
Strict-Transport-Security	max-age=15552000
Last-Modified	Fri, 12 Sep 2025 00:41:19 GMT
ETag	"d3aa-63e8fe98d2964"
Accept-Ranges	bytes
Content-Length	54186
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CCM (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CCM_8 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CCM (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CCM_8 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.partidopirata.com.ar/fdroid/repo

151.236.30.90

VerificationException

JAR signature failed to verify: /tmp/tmpao6zo5kr The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686382

duration

0.9730839729309082

status

200

TLS

TLSv1.3

headers

Server	nginx/1.26.1
Date	Sun, 14 Dec 2025 04:26:22 GMT
Content-Type	application/java-archive
Content-Length	5211
Last-Modified	Tue, 07 Jun 2022 01:05:55 GMT
Connection	keep-alive
ETag	"629ea473-145b"
Cache-Control	no-cache
Access-Control-Allow-Origin	*.partidopirata.com.ar
Strict-Transport-Security	max-age=15552000; includeSubDomains; preload
Accept-Ranges	bytes

tlsping

host	fdroid.partidopirata.com.ar
ip	151.236.30.90
address	fdroid.partidopirata.com.ar:443
connection	TLS
count	10
min	0.445920532
max	0.446915624
average	0.4461215199
stddev	0.0002788715918861096
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_ARIA_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_ARIA_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.pixelfed.net/fdroid/repo

165.227.195.166

VerificationException

JAR signature failed to verify: /tmp/tmplqdu2g70 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686399

duration

0.8209550380706787

status

200

TLS

TLSv1.3

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:26:39 GMT
Content-Type	application/java-archive
Content-Length	3920
Last-Modified	Wed, 03 Sep 2025 11:12:20 GMT
Connection	keep-alive
ETag	"68b82294-f50"
X-Frame-Options	SAMEORIGIN
X-XSS-Protection	1; mode=block
X-Content-Type-Options	nosniff
Accept-Ranges	bytes

tlsping

host	fdroid.pixelfed.net
ip	165.227.195.166
address	fdroid.pixelfed.net:443
connection	TLS
count	10
min	0.296002472
max	0.308883757
average	0.30360784319999995
stddev	0.003411513996283689
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

least strength

https://fdroid.rakshazi.me/repo

ConnectionError

HTTPSConnectionPool(host='fdroid.rakshazi.me', port=443): Max retries exceeded with url: /repo/index-v1.jar (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fe7091ce390>: Failed to establish a new connection: [Errno -5] No address associated with hostname'))

starttime

1765686403

duration

0.07851004600524902

status

200

TLS

[Errno -5] No address associated with hostname

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:26:39 GMT
Content-Type	application/java-archive
Content-Length	3920
Last-Modified	Wed, 03 Sep 2025 11:12:20 GMT
Connection	keep-alive
ETag	"68b82294-f50"
X-Frame-Options	SAMEORIGIN
X-XSS-Protection	1; mode=block
X-Content-Type-Options	nosniff
Accept-Ranges	bytes

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

least strength

https://fdroid.rami.io/fdroid/repo

ConnectionError

HTTPSConnectionPool(host='fdroid.rami.io', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fe7091ce8d0>: Failed to establish a new connection: [Errno -2] Name or service not known'))

starttime

1765686404

duration

0.13278508186340332

status

200

TLS

[Errno -2] Name or service not known

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:26:39 GMT
Content-Type	application/java-archive
Content-Length	3920
Last-Modified	Wed, 03 Sep 2025 11:12:20 GMT
Connection	keep-alive
ETag	"68b82294-f50"
X-Frame-Options	SAMEORIGIN
X-XSS-Protection	1; mode=block
X-Content-Type-Options	nosniff
Accept-Ranges	bytes

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

least strength

https://fdroid.tagesschau.de/repo

34.160.251.4

VerificationException

JAR signature failed to verify: /tmp/tmpxey32b3d The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686405

duration

0.9740679264068604

status

200

TLS

TLSv1.3

headers

Content-Type	application/octet-stream
X-GUploader-UploadID	AHVrFxMe6t9BNTGIQ4zLSBmgC7KPGmrkzIOSzOOPdyoVWd6DYLIK84oJ2Hx-X41cv9agQ-Wn
Expires	Sun, 14 Dec 2025 05:26:45 GMT
Date	Sun, 14 Dec 2025 04:26:45 GMT
Cache-Control	public, max-age=3600
Last-Modified	Tue, 29 Jul 2025 14:28:42 GMT
ETag	"6e8e93985b653a7241be47a7257e3501"
x-goog-generation	1753799322237430
x-goog-metageneration	1
x-goog-stored-content-encoding	identity
x-goog-stored-content-length	5415
x-goog-meta-goog-reserved-file-mtime	1753799290
x-goog-hash	crc32c=jP+mJA==, md5=bo6TmFtlOnJBvkenJX41AQ==
x-goog-storage-class	STANDARD
Accept-Ranges	bytes
Content-Length	5415
Server	UploadServer
Alt-Svc	h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

tlsping

host	fdroid.tagesschau.de
ip	34.160.251.4
address	fdroid.tagesschau.de:443
connection	TLS
count	10
min	0.122915026
max	0.125194738
average	0.12396811640000001
stddev	0.0008085386145898311
error

ssl-enum-ciphers

TLSv1.0

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C
compressors	NULL
cipher preference	server
warnings	64-bit block cipher 3DES vulnerable to SWEET32 attack

TLSv1.1

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C
compressors	NULL
cipher preference	server
warnings	64-bit block cipher 3DES vulnerable to SWEET32 attack

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_3DES_EDE_CBC_SHA (rsa 2048) - C TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A
compressors	NULL
cipher preference	client
warnings	64-bit block cipher 3DES vulnerable to SWEET32 attack

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://fdroid.videlibri.de/repo

95.143.172.218

VerificationException

JAR signature failed to verify: /tmp/tmpbok28v9d The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686407

duration

61.70043611526489

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:27:48 GMT
Content-Type	application/x-java-archive
Content-Length	6633
Connection	keep-alive
Server	nginx
Last-Modified	Sat, 29 Nov 2025 17:10:00 GMT
ETag	"19e9-644bed0f37273"
Accept-Ranges	bytes
X-Xss-Protection	1; mode=block
X-Frame-Options	SAMEORIGIN
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
Referrer-Policy	strict-origin-when-cross-origin

tlsping

host	fdroid.videlibri.de
ip	95.143.172.218
address	fdroid.videlibri.de:443
connection	TLS
count	10
min	0.693945486
max	0.762985866
average	0.7119844963
stddev	0.02452443410851134
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp384r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A
cipher preference	client

least strength

https://fdroidfamily.codeberg.page/repo

2a0a:4580:103f:c0de::2

starttime

1765686612

duration

1.1986689567565918

status

404

TLS

TLSv1.3

headers

Allow	GET, HEAD, OPTIONS
Alt-Svc	h3=":443"; ma=2592000,h3=":443"; ma=2592000
Cache-Control	public, max-age=600
Content-Type	text/html; charset=utf-8
Date	Sun, 14 Dec 2025 04:30:13 GMT
Referrer-Policy	strict-origin-when-cross-origin
Server	git-pages (git-pages), pages-server
Strict-Transport-Security	max-age=63072000; includeSubdomains; preload
Via	1.1 Caddy
Transfer-Encoding	chunked

tlsping

host	fdroidfamily.codeberg.page
ip	2a0a:4580:103f:c0de::2
address	fdroidfamily.codeberg.page:443
connection	TLS
count	10
min	0.452043224
max	0.452834351
average	0.4524748884
stddev	0.0002610590128485186
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://freeyourgadget.codeberg.page/fdroid/repo

2a0a:4580:103f:c0de::2

VerificationException

JAR signature failed to verify: /tmp/tmp_9p1iabt The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686620

duration

1.0141520500183105

status

200

TLS

TLSv1.3

headers

Allow	GET, HEAD, OPTIONS
Alt-Svc	h3=":443"; ma=2592000,h3=":443"; ma=2592000
Cache-Control	public, max-age=600
Content-Length	5407
Content-Type	application/java-archive
Date	Sun, 14 Dec 2025 04:30:21 GMT
Etag	"26c62e165005916092b9331e2c849dd0921a3866"
Last-Modified	Sat, 13 Dec 2025 22:01:38 GMT
Referrer-Policy	strict-origin-when-cross-origin
Server	git-pages (git-pages), pages-server
Strict-Transport-Security	max-age=63072000; includeSubdomains; preload
Via	1.1 Caddy
X-Pages-Cache	true

tlsping

host	freeyourgadget.codeberg.page
ip	2a0a:4580:103f:c0de::2
address	freeyourgadget.codeberg.page:443
connection	TLS
count	10
min	0.430808471
max	0.432184411
average	0.43154934699999997
stddev	0.00041499868528947336
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://github.com/onionshare/onionshare-android-nightly/raw/master/fdroid/repo

2606:50c0:8001::154

VerificationException

JAR signature failed to verify: /tmp/tmpd33bb7nd The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686627

duration

0.7994711399078369

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	3658
Cache-Control	max-age=300
Content-Security-Policy	default-src 'none'; style-src 'unsafe-inline'; sandbox
Content-Type	application/octet-stream
ETag	W/"625338d4adeafd16c42bfe19d44f2e72c7513ebbd0a32f307c3182fcffdc650c"
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
X-Frame-Options	deny
X-XSS-Protection	1; mode=block
X-GitHub-Request-Id	B7E0:1376:3599FF:435F6D:693E3D64
Accept-Ranges	bytes
Date	Sun, 14 Dec 2025 04:30:28 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12332-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765686628.074443,VS0,VE97
Vary	Authorization,Accept-Encoding
Access-Control-Allow-Origin	*
Cross-Origin-Resource-Policy	cross-origin
X-Fastly-Request-ID	eb627170967561718d9151a100f8358910e00c27
Expires	Sun, 14 Dec 2025 04:35:28 GMT
Source-Age	0

tlsping

host	github.com
ip	140.82.116.4
address	github.com:443
connection	TLS
count	10
min	0.13156556
max	0.136409549
average	0.1336136719
stddev	0.00148307658095571
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 4096) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 4096) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 4096) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 4096) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 4096) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 4096) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (ecdh_x25519) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://gitlab.com/fdroid/fdroidclient-nightly/raw/master/fdroid/repo

2606:4700:90:0:f22e:fbec:5bed:a9b9

VerificationException

JAR signature failed to verify: /tmp/tmpj1nq9mod The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686629

duration

0.5924801826477051

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:30:29 GMT
Content-Type	application/octet-stream
Content-Length	6059
Connection	keep-alive
Server	cloudflare
CF-Ray	9adaf75aeb34150f-PDX
CF-Cache-Status	REVALIDATED
Accept-Ranges	bytes
Cache-Control	max-age=60, public, must-revalidate, stale-while-revalidate=60, stale-if-error=300, s-maxage=60
Content-Disposition	attachment
ETag	"3640121897279d02019518ad906f5c25"
Strict-Transport-Security	max-age=31536000
Vary	Accept-Encoding
content-security-policy	base-uri 'self'; child-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ 'self' blob: data: https://embed.figma.com https://www.figma.com https://www.youtube.com; connect-src 'self' https://gitlab.com wss://gitlab.com https://sentry.gitlab.net https://new-sentry.gitlab.net https://customers.gitlab.com https://snowplow.trx.gitlab.net https://sourcegraph.com https://collector.prd-278964.gl-product-analytics.com https://analytics.gitlab.com snowplowprd.trx.gitlab.net; default-src 'self'; font-src 'self'; form-action 'self' https: http:; frame-ancestors 'self'; frame-src https://www.google.com/recaptcha/ https://www.recaptcha.net/ https://www.googletagmanager.com/ns.html https://.zuora.com/apps/PublicHostedPageLite.do https://gitlab.com/admin/ https://gitlab.com/assets/ https://gitlab.com/-/speedscope/index.html https://gitlab.com/-/sandbox/ https://embed.figma.com https://www.figma.com https://www.youtube.com; img-src 'self' data: blob: http: https:; manifest-src 'self'; media-src 'self' data: blob: http: https:; object-src 'none'; report-uri https://new-sentry.gitlab.net/api/4/security/?sentry_key=f5573e26de8f4293b285e556c35dfd6e&sentry_environment=gprd; script-src 'strict-dynamic' 'self' 'unsafe-inline' 'unsafe-eval' https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.recaptcha.net/ https://apis.google.com https://*.zuora.com/apps/PublicHostedPageLite.do 'nonce-GrDEE2v2+CP0bQKtRF7CRw=='; style-src 'self' 'unsafe-inline'; worker-src 'self' https://gitlab.com/assets/ blob: data:
gitlab-lb	haproxy-main-14-lb-gprd
gitlab-sv	web-gke-us-east1-c
nel	{"max_age": 0}
permissions-policy	interest-cohort=()
ratelimit-limit	500
ratelimit-name	throttle_unauthenticated_web
ratelimit-observed	3
ratelimit-remaining	497
ratelimit-reset	1765380720
referrer-policy	strict-origin-when-cross-origin
x-content-type-options	nosniff
x-download-options	noopen
x-frame-options	SAMEORIGIN
x-gitlab-meta	{"correlation_id":"9abdca7716b5ca44-ATL","version":"1"}
x-permitted-cross-domain-policies	none
x-request-id	9abdca7716b5ca44-ATL
x-runtime	0.245978
x-ua-compatible	IE=edge
x-xss-protection	1; mode=block
Set-Cookie	__cf_bm=I0mt4jWgX3oEdXkQ4wAVlK3SskxxSTOQPPzYjGFIfSI-1765686629-1.0.1.1-SumA2wQmZ_vzUrCY_66jt2.Vij8VLbFWuEFk2eV3pYCVNAzjIFIsc002XKxirms973vsQEXpx4hNpIiGA6gqVv.hAsgTRzjlX0oKEjUKD_o; path=/; expires=Sun, 14-Dec-25 05:00:29 GMT; domain=.gitlab.com; HttpOnly; Secure; SameSite=None, _cfuvid=8z7uqzHjKuXcsixbQWLCYbkYh6UBhGRsKLRGT0_j5gI-1765686629814-0.0.1.1-604800000; path=/; domain=.gitlab.com; HttpOnly; Secure; SameSite=None

tlsping

host	gitlab.com
ip	2606:4700:90:0:f22e:fbec:5bed:a9b9
address	gitlab.com:443
connection	TLS
count	10
min	0.058454073
max	0.059469651
average	0.0588898633
stddev	0.0002878103405738053
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://grobox.de/fdroid/repo

2001:67c:1401:2051::1:10

VerificationException

JAR signature failed to verify: /tmp/tmpkjfh10v6 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686630

duration

0.8099350929260254

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:30:31 GMT
Server	Apache
Upgrade	h2,h2c
Connection	Upgrade, Keep-Alive
Last-Modified	Fri, 12 Dec 2025 12:46:08 GMT
ETag	"2965-645c0a543a8d3"
Accept-Ranges	bytes
Content-Length	10597
Keep-Alive	timeout=5, max=100
Content-Type	application/java-archive

tlsping

host	grobox.de
ip	2001:67c:1401:2051::1:10
address	grobox.de:443
connection	TLS
count	10
min	0.392805982
max	0.393876357
average	0.3931946634
stddev	0.0003218533989757446
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp384r1) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 3072) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 3072) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 3072) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 3072) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 3072) - A
compressors	NULL
cipher preference	server
warnings	Key exchange (dh 3072) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (secp384r1) - A
cipher preference	server

least strength

https://guardianproject-wind.s3.amazonaws.com/fdroid/repo

54.231.200.137

VerificationException

JAR signature failed to verify: /tmp/tmp9eksmxxx The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686648

duration

1.018644094467163

status

200

TLS

TLSv1.3

headers

x-amz-id-2	ITH4ozI7FSN0apafHayGZbjY2sab+gLGSAbq/y3BFkyACoiVVmySnf9MuVp54VXjDVe0u10XrGE=
x-amz-request-id	3W7D2BEVFBGBFJGH
Date	Sun, 14 Dec 2025 04:30:49 GMT
Last-Modified	Fri, 31 Jan 2025 07:13:53 GMT
ETag	"e3e79c0ad41eb80a8f3bd87727c953d5"
x-amz-server-side-encryption	AES256
x-amz-meta-s3cmd-attrs	atime:1738307518/ctime:1738307518/gid:1000/gname:geheimnis/md5:e3e79c0ad41eb80a8f3bd87727c953d5/mode:33188/mtime:1738307518/uid:1000/uname:geheimnis
Accept-Ranges	bytes
Content-Type	application/zip
Content-Length	507773
Server	AmazonS3

tlsping

host	guardianproject-wind.s3.amazonaws.com
ip	16.15.178.80
address	guardianproject-wind.s3.amazonaws.com:443
connection	TLS
count	10
min	0.189552867
max	0.190732444
average	0.1902557051
stddev	0.0003522339425510945
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://guardianproject.info/fdroid/repo

204.19.241.151

VerificationException

JAR signature failed to verify: /tmp/tmpkubn4m8m The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686656

duration

0.8733460903167725

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:30:56 GMT
Server	Apache/2.4.59 (Debian)
Permissions-Policy	interest-cohort=()
Feature-Policy	ambient-light-sensor 'none'; autoplay 'none'; accelerometer 'none'; camera 'none'; display-capture 'none'; document-domain 'none'; encrypted-media 'none'; fullscreen 'none'; geolocation 'none'; gyroscope 'none'; magnetometer 'none'; microphone 'none'; midi 'none'; payment 'none'; picture-in-picture 'none'; speaker 'none'; sync-xhr 'none'; usb 'none'; wake-lock 'none'; webauthn 'none'; vr 'none'; xr 'none';
Content-Security-Policy	default-src 'none'; base-uri 'self'; block-all-mixed-content; connect-src 'self'; font-src 'self'; form-action 'self'; frame-ancestors 'self'; img-src 'self' https://.static.flickr.com https://.staticflickr.com; media-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline';
Strict-Transport-Security	max-age=31536000
Referrer-Policy	strict-origin
X-Content-Type-Options	nosniff
X-Frame-Options	sameorigin
X-Xss-Protection	1; mode=block
Vary	User-Agent
Last-Modified	Sat, 13 Dec 2025 06:52:20 GMT
ETag	"30ac2-645cfd1cdc804"
Accept-Ranges	bytes
Content-Length	199362
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

host	guardianproject.info
ip	204.19.241.151
address	guardianproject.info:443
connection	TLS
count	10
min	0.194690062
max	0.195551881
average	0.19506436980000003
stddev	0.0002693168452324559
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM (rsa 2048) - A TLS_RSA_WITH_AES_128_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM (rsa 2048) - A TLS_RSA_WITH_AES_256_CCM_8 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_ARIA_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_ARIA_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://haagch.frickel.club/files/fdroid/repo

2a0a:4cc0:c1:b2a4::dead:beef

VerificationException

JAR signature failed to verify: /tmp/tmpf034ba7d The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686663

duration

0.8865749835968018

status

200

TLS

TLSv1.3

headers

Server	nginx/1.28.0
Date	Sun, 14 Dec 2025 04:31:03 GMT
Content-Type	application/java-archive
Content-Length	7603
Last-Modified	Thu, 06 Jan 2022 03:00:10 GMT
Connection	keep-alive
ETag	"61d65b3a-1db3"
Accept-Ranges	bytes

tlsping

host	haagch.frickel.club
ip	2a0a:4cc0:c1:b2a4::dead:beef
address	haagch.frickel.club:443
connection	TLS
count	10
min	0.379611064
max	0.380923916
average	0.3803282114
stddev	0.0004016467476313475
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://jak-linux.org/fdroid/repo

2a01:4f8:1c1c:9761::1

VerificationException

JAR signature failed to verify: /tmp/tmp2z3l_kbh The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686672

duration

0.8713750839233398

status

200

TLS

TLSv1.3

headers

Server	nginx/1.24.0 (Ubuntu)
Date	Sun, 14 Dec 2025 04:31:13 GMT
Content-Type	application/java-archive
Content-Length	4052
Last-Modified	Tue, 23 Mar 2021 17:51:53 GMT
Connection	keep-alive
ETag	"605a2ab9-fd4"
Strict-Transport-Security	max-age=15768000
X-Frame-Options	DENY
X-Content-Type-Options	nosniff
X-XSS-Protection	1; mode=block
Accept-Ranges	bytes

tlsping

host	jak-linux.org
ip	2a01:4f8:1c1c:9761::1
address	jak-linux.org:443
connection	TLS
count	10
min	0.405283825
max	0.406455852
average	0.4059922371
stddev	0.00030019625396412216
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://jhass.github.io/insporation/fdroid/repo

2606:50c0:8000::153

VerificationException

JAR signature failed to verify: /tmp/tmpwv36rpom The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686682

duration

0.43359923362731934

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	2948
Server	GitHub.com
Content-Type	application/java-archive
Last-Modified	Thu, 22 Feb 2024 04:10:47 GMT
Access-Control-Allow-Origin	*
ETag	"65d6c947-b84"
expires	Sun, 14 Dec 2025 04:41:23 GMT
Cache-Control	max-age=600
x-proxy-cache	MISS
X-GitHub-Request-Id	8414:401F8:991F7E:9EC920:693E3D9A
Accept-Ranges	bytes
Age	0
Date	Sun, 14 Dec 2025 04:31:23 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12333-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765686683.964116,VS0,VE78
Vary	Accept-Encoding
X-Fastly-Request-ID	f648b3df7814b2e3ed73511dd581e52697e60ed7

tlsping

host	jhass.github.io
ip	2606:50c0:8003::153
address	jhass.github.io:443
connection	TLS
count	10
min	0.057710836
max	0.058770431
average	0.058334967800000005
stddev	0.00038169773699795443
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://julianfairfax.gitlab.io/fdroid-repo/fdroid/repo

starttime

1765686684

duration

0.7940988540649414

status

403

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:31:25 GMT
Content-Type	text/html; charset=UTF-8
Transfer-Encoding	chunked
Connection	close
accept-ch	Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated	challenge
critical-ch	Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy	require-corp
cross-origin-resource-policy	same-origin
origin-agent-cluster	?1
permissions-policy	accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy	same-origin
server-timing	chlray;desc="9adaf8b56a7bef73"
x-content-type-options	nosniff
x-frame-options	SAMEORIGIN
Cache-Control	private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires	Thu, 01 Jan 1970 00:00:01 GMT
Report-To	{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZNqhQc5EotEu30pmlXBVD2qwl9uIuhGelS5eVDU5d8C1UtHCrp%2FJB8Ni8xkRYFjKDyeWihiIUZPn5Rbtfq8kaenj5lAa%2B3dw%2Buwl07yWYdYwIe9SVpcfhera1cxuly1Wrf%2Bsyn1bTaU%3D"}],"group":"cf-nel","max_age":604800}
NEL	{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary	Accept-Encoding
Strict-Transport-Security	max-age=31536000
Server	cloudflare
CF-RAY	9adaf8b56a7bef73-PDX
Content-Encoding	br

tlsping

host	julianfairfax.gitlab.io
ip	2600:1901:0:7b8a::
address	julianfairfax.gitlab.io:443
connection	TLS
count	10
min	0.136960804
max	0.153360295
average	0.13968792589999998
stddev	0.004865478842724251
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://kaffeemitkoffein.de/fdroid/repo

77.3.75.252

VerificationException

JAR signature failed to verify: /tmp/tmptja6zvrv The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686688

duration

1.4393301010131836

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:31:29 GMT
Server	Apache/2.4.65 (Raspbian)
Last-Modified	Sat, 15 Nov 2025 17:31:31 GMT
ETag	"21f9-643a57c290790"
Accept-Ranges	bytes
Content-Length	8697
Strict-Transport-Security	max-age=15768000
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

host	kaffeemitkoffein.de
ip	77.3.75.252
address	kaffeemitkoffein.de:443
connection	TLS
count	10
min	0.642334667
max	0.725383393
average	0.6770443948999999
stddev	0.031572304516764654
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 3072) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_AES_256_CCM_8 (dh 3072) - A TLS_DHE_RSA_WITH_AES_256_CCM (dh 3072) - A TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 (dh 3072) - A TLS_DHE_RSA_WITH_AES_128_CCM_8 (dh 3072) - A TLS_DHE_RSA_WITH_AES_128_CCM (dh 3072) - A TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (dh 3072) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 3072) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 3072) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 3072) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 3072) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 4096) - A TLS_RSA_WITH_AES_256_CCM_8 (rsa 4096) - A TLS_RSA_WITH_AES_256_CCM (rsa 4096) - A TLS_RSA_WITH_ARIA_256_GCM_SHA384 (rsa 4096) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 4096) - A TLS_RSA_WITH_AES_128_CCM_8 (rsa 4096) - A TLS_RSA_WITH_AES_128_CCM (rsa 4096) - A TLS_RSA_WITH_ARIA_128_GCM_SHA256 (rsa 4096) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 4096) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (rsa 4096) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 4096) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (rsa 4096) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 4096) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 4096) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 4096) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 4096) - A
compressors	NULL
cipher preference	server
warnings	Key exchange (dh 3072) of lower strength than certificate key Key exchange (ecdh_x25519) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://microg.org/fdroid/repo

2a05:bec0:25:11::99

VerificationException

JAR signature failed to verify: /tmp/tmpv3ovqtfa The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686745

duration

1.9735140800476074

status

200

TLS

TLSv1.3

headers

Accept-Ranges	bytes
Alt-Svc	h3=":443"; ma=2592000
Content-Length	7942
Content-Type	application/java-archive
Etag	"dex42v9yx1xo64m"
Last-Modified	Sat, 13 Dec 2025 13:09:15 GMT
Server	Caddy
Vary	Accept-Encoding
Date	Sun, 14 Dec 2025 04:32:25 GMT

tlsping

host	microg.org
ip	2a05:bec0:25:11::99
address	microg.org:443
connection	TLS
count	10
min	0.587042398
max	0.702010848
average	0.6356677995
stddev	0.039002890406684115
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://mobileapp.bitwarden.com/fdroid/repo

199.232.145.91

VerificationException

JAR signature failed to verify: /tmp/tmptfjwkif9 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686754

duration

1.056027889251709

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	6133
Server	GitHub.com
Content-Type	application/java-archive
Last-Modified	Mon, 08 Dec 2025 14:52:12 GMT
Access-Control-Allow-Origin	*
ETag	"6936e61c-17f5"
expires	Sun, 14 Dec 2025 04:42:34 GMT
x-proxy-cache	MISS
X-GitHub-Request-Id	2CCE:1B0543:9B0F31:A0C8D1:693E3DE1
Via	1.1 varnish, 1.1 varnish
X-Fastly-Request-ID	b0cb81304fc9365f1f9b2c5782b14b9e85e14c80
Fastly-Debug-States	DELIVER
Cache-Control	public, max-age=0, must-revalidate
Accept-Ranges	bytes
Age	0
Date	Sun, 14 Dec 2025 04:32:34 GMT
X-Served-By	cache-pdx12334-PDX, cache-pdx12329-PDX
X-Cache	MISS, MISS
X-Cache-Hits	0, 0
X-Timer	S1765686754.369967,VS0,VE90
Vary	Accept-Encoding
X-Content-Type-Options	nosniff
X-Service-Version	31
Strict-Transport-Security	max-age=31536000

tlsping

host	mobileapp.bitwarden.com
ip	199.232.145.91
address	mobileapp.bitwarden.com:443
connection	TLS
count	10
min	0.089628126
max	0.091547455
average	0.09039363279999998
stddev	0.0004748975999037687
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://molly.im/fdroid/repo

2606:50c0:8001::153

VerificationException

JAR signature failed to verify: /tmp/tmpjf_j7pum The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686756

duration

0.5524389743804932

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	5803
Server	GitHub.com
Content-Type	application/java-archive
Last-Modified	Wed, 03 Dec 2025 17:48:46 GMT
Access-Control-Allow-Origin	*
ETag	"693077fe-16ab"
expires	Sun, 14 Dec 2025 04:42:36 GMT
Cache-Control	max-age=600
x-proxy-cache	MISS
X-GitHub-Request-Id	0D42:C2206:9ACDD2:A07ABC:693E3DE3
Accept-Ranges	bytes
Age	0
Date	Sun, 14 Dec 2025 04:32:36 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12320-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765686756.460527,VS0,VE97
Vary	Accept-Encoding
X-Fastly-Request-ID	d869c8cd4a4a093a6ad4f5ca2b5cb89ac839b3e0

tlsping

host	molly.im
ip	2606:50c0:8002::153
address	molly.im:443
connection	TLS
count	10
min	0.073296165
max	0.07485991
average	0.07393182029999999
stddev	0.00046344412384278984
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://nanolx.org/fdroid/repo

87.118.120.112

VerificationException

JAR signature failed to verify: /tmp/tmpxqg_zxzd The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686757

duration

1.0404119491577148

status

200

TLS

TLSv1.3

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:32:38 GMT
Content-Type	application/java-archive
Content-Length	4978
Last-Modified	Fri, 21 May 2021 19:39:16 GMT
Connection	keep-alive
ETag	"60a80c64-1372"
Strict-Transport-Security	max-age=15768000; includeSubDomains
X-Powered-By	PleskLin
Accept-Ranges	bytes

tlsping

host	nanolx.org
ip	87.118.120.112
address	nanolx.org:443
connection	TLS
count	10
min	0.379926667
max	0.380784317
average	0.3804164767
stddev	0.0002487869169377866
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://onosendai.herokuapp.com/repo

23.22.52.7

starttime

1765686766

duration

0.3757359981536865

status

404

TLS

TLSv1.2

headers

Content-Length	548
Cache-Control	no-cache, no-store
Content-Type	text/html; charset=utf-8
Date	2025-12-14 04:32:46.537908021 +0000 UTC
Server	heroku-router

tlsping

host	onosendai.herokuapp.com
ip	46.137.15.86
address	onosendai.herokuapp.com:443
connection	TLS
count	10
min	0.536471136
max	0.54523333
average	0.5411579387000001
stddev	0.002852533595506697
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

least strength

https://pili.qi0.de/fdroid/repo

89.244.196.202

VerificationException

JAR signature failed to verify: /tmp/tmpya9l0v4e The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686773

duration

2.060356855392456

status

200

TLS

TLSv1.3

headers

Server	nginx/1.28.0
Date	Sun, 14 Dec 2025 04:32:55 GMT
Content-Type	application/java-archive
Content-Length	24904
Last-Modified	Tue, 05 Aug 2025 08:01:40 GMT
Connection	keep-alive
ETag	"6891ba64-6148"
Strict-Transport-Security	max-age=31536000; includeSubDomains; preload
Accept-Ranges	bytes

tlsping

host	pili.qi0.de
ip	89.244.196.202
address	pili.qi0.de:443
connection	TLS
count	10
min	0.568957193
max	0.578527839
average	0.5715599504
stddev	0.003703783948213597
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp384r1) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp384r1) - A TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CCM (dh 2048) - A TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CCM (dh 2048) - A TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (secp384r1) - A
cipher preference	server

least strength

https://platschi.net/fdroid/repo

ConnectionError

HTTPSConnectionPool(host='platschi.net', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fe7090a42d0>: Failed to establish a new connection: [Errno -2] Name or service not known'))

starttime

1765686797

duration

0.05845499038696289

status

200

TLS

[Errno -2] Name or service not known

headers

Server	nginx/1.28.0
Date	Sun, 14 Dec 2025 04:32:55 GMT
Content-Type	application/java-archive
Content-Length	24904
Last-Modified	Tue, 05 Aug 2025 08:01:40 GMT
Connection	keep-alive
ETag	"6891ba64-6148"
Strict-Transport-Security	max-age=31536000; includeSubDomains; preload
Accept-Ranges	bytes

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp384r1) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp384r1) - A TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CCM (dh 2048) - A TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CCM (dh 2048) - A TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (secp384r1) - A
cipher preference	server

least strength

https://raw.githubusercontent.com/2br-2b/Fdroid-repo/master/fdroid/repo

2606:50c0:8000::154

VerificationException

JAR signature failed to verify: /tmp/tmpfxry3o9a The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686797

duration

0.41333794593811035

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	4999
Cache-Control	max-age=300
Content-Security-Policy	default-src 'none'; style-src 'unsafe-inline'; sandbox
Content-Type	application/octet-stream
ETag	W/"070addb24bc77e917a11a8ee6ea1f3c786744d1cb98cc339fb2c6b24d782c415"
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
X-Frame-Options	deny
X-XSS-Protection	1; mode=block
X-GitHub-Request-Id	B8D8:12F6AB:97EEC5:C12EB7:693E3E0C
Accept-Ranges	bytes
Date	Sun, 14 Dec 2025 04:33:17 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12332-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765686798.894662,VS0,VE95
Vary	Authorization,Accept-Encoding
Access-Control-Allow-Origin	*
Cross-Origin-Resource-Policy	cross-origin
X-Fastly-Request-ID	54fb2f4872d38be4c5d1968f1d2326b524870f1a
Expires	Sun, 14 Dec 2025 04:38:17 GMT
Source-Age	0

tlsping

host	raw.githubusercontent.com
ip	2606:50c0:8001::154
address	raw.githubusercontent.com:443
connection	TLS
count	10
min	0.059575222
max	0.060424416
average	0.0600519452
stddev	0.00032910870074727677
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://raw.githubusercontent.com/MM2-0/fdroid/main/fdroid/repo

2606:50c0:8001::154

starttime

1765686799

duration

0.17176318168640137

status

404

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	14
Content-Security-Policy	default-src 'none'; style-src 'unsafe-inline'; sandbox
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
X-Frame-Options	deny
X-XSS-Protection	1; mode=block
Content-Type	text/plain; charset=utf-8
X-GitHub-Request-Id	B8D8:12F6AB:97EFBD:C12FBD:693E3E0D
Accept-Ranges	bytes
Date	Sun, 14 Dec 2025 04:33:19 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12322-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765686799.113955,VS0,VE117
Vary	Authorization,Accept-Encoding
Access-Control-Allow-Origin	*
Cross-Origin-Resource-Policy	cross-origin
X-Fastly-Request-ID	b3e2f10ed68401d49157a3aff6a60a07717e492a
Expires	Sun, 14 Dec 2025 04:38:19 GMT
Source-Age	0

tlsping

host	raw.githubusercontent.com
ip	2606:50c0:8001::154
address	raw.githubusercontent.com:443
connection	TLS
count	10
min	0.056029644
max	0.05755721
average	0.057012515600000015
stddev	0.00048225252286498093
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://raw.githubusercontent.com/Tobi823/ffupdaterrepo/master/fdroid/repo

2606:50c0:8002::154

VerificationException

JAR signature failed to verify: /tmp/tmpukq2eqt5 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686799

duration

0.4757390022277832

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	8579
Cache-Control	max-age=300
Content-Security-Policy	default-src 'none'; style-src 'unsafe-inline'; sandbox
Content-Type	application/octet-stream
ETag	W/"5ab32ffb61def9d7b2934061c2f42990c676a8d3547333d9097258bbf37ca087"
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
X-Frame-Options	deny
X-XSS-Protection	1; mode=block
X-GitHub-Request-Id	AF21:C22AD:9BC282:C4F667:693E3E10
Accept-Ranges	bytes
Date	Sun, 14 Dec 2025 04:33:20 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12333-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765686800.004510,VS0,VE111
Vary	Authorization,Accept-Encoding
Access-Control-Allow-Origin	*
Cross-Origin-Resource-Policy	cross-origin
X-Fastly-Request-ID	4802df960e299396f1cc05c6e9f73f4703d5f08b
Expires	Sun, 14 Dec 2025 04:38:20 GMT
Source-Age	0

tlsping

host	raw.githubusercontent.com
ip	2606:50c0:8001::154
address	raw.githubusercontent.com:443
connection	TLS
count	10
min	0.061467567
max	0.062735055
average	0.062068481099999996
stddev	0.0003895522107275089
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://raw.githubusercontent.com/chrisgch/tca/master/fdroid/repo

2606:50c0:8000::154

VerificationException

JAR signature failed to verify: /tmp/tmp4l_wjnmc The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686801

duration

1.2383520603179932

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	12542
Cache-Control	max-age=300
Content-Security-Policy	default-src 'none'; style-src 'unsafe-inline'; sandbox
Content-Type	application/octet-stream
ETag	W/"5d7317e77f9fb1bf8527fc66bb7be2c45eaa62839311b92b239dd863b6931886"
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
X-Frame-Options	deny
X-XSS-Protection	1; mode=block
X-GitHub-Request-Id	9E9B:177CE7:9AFDA9:C43242:693E3E10
Accept-Ranges	bytes
Date	Sun, 14 Dec 2025 04:33:21 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12326-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765686801.235183,VS0,VE93
Vary	Authorization,Accept-Encoding
Access-Control-Allow-Origin	*
Cross-Origin-Resource-Policy	cross-origin
X-Fastly-Request-ID	7f937f9634c8d8d043a9cb280cde246815dc078b
Expires	Sun, 14 Dec 2025 04:38:21 GMT
Source-Age	0

tlsping

host	raw.githubusercontent.com
ip	2606:50c0:8001::154
address	raw.githubusercontent.com:443
connection	TLS
count	10
min	0.244948414
max	0.260467836
average	0.25251539479999996
stddev	0.006126371334087392
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://raw.githubusercontent.com/oxcl/fdroid-repo-tasker/refs/heads/main/direct-purchase/fdroid/repo

2606:50c0:8001::154

VerificationException

JAR signature failed to verify: /tmp/tmp58grmbmr The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686803

duration

0.8748869895935059

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	10071
Cache-Control	max-age=300
Content-Security-Policy	default-src 'none'; style-src 'unsafe-inline'; sandbox
Content-Type	application/octet-stream
ETag	W/"c2ce18d078d04d419e0f07bdfad06ba48a2ff977ecb0accd02ef756d25d37639"
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
X-Frame-Options	deny
X-XSS-Protection	1; mode=block
X-GitHub-Request-Id	B64C:18BDBC:98EC8B:C22EAE:693E3E13
Accept-Ranges	bytes
Date	Sun, 14 Dec 2025 04:33:24 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12321-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765686804.945312,VS0,VE98
Vary	Authorization,Accept-Encoding
Access-Control-Allow-Origin	*
Cross-Origin-Resource-Policy	cross-origin
X-Fastly-Request-ID	b70649179e341d2465fdb97357101be0fc722443
Expires	Sun, 14 Dec 2025 04:38:24 GMT
Source-Age	0

tlsping

host	raw.githubusercontent.com
ip	2606:50c0:8001::154
address	raw.githubusercontent.com:443
connection	TLS
count	10
min	0.104784471
max	0.109439607
average	0.10741589230000001
stddev	0.001513929299426893
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://raw.githubusercontent.com/xarantolus/fdroid/main/fdroid/repo

2606:50c0:8002::154

VerificationException

JAR signature failed to verify: /tmp/tmprwall352 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686805

duration

0.4943220615386963

status

200

TLS

TLSv1.3

headers

Connection	keep-alive
Content-Length	7506
Cache-Control	max-age=300
Content-Security-Policy	default-src 'none'; style-src 'unsafe-inline'; sandbox
Content-Type	application/octet-stream
ETag	W/"db5d713d59acf6a996ec63ff47dae81ba0c4de2d5bb95b6953dc21ee9a10cbe0"
Strict-Transport-Security	max-age=31536000
X-Content-Type-Options	nosniff
X-Frame-Options	deny
X-XSS-Protection	1; mode=block
X-GitHub-Request-Id	3ADC:228F43:9FE98B:C92B76:693E3E13
Accept-Ranges	bytes
Date	Sun, 14 Dec 2025 04:33:25 GMT
Via	1.1 varnish
X-Served-By	cache-pdx12329-PDX
X-Cache	MISS
X-Cache-Hits	0
X-Timer	S1765686806.800405,VS0,VE87
Vary	Authorization,Accept-Encoding
Access-Control-Allow-Origin	*
Cross-Origin-Resource-Policy	cross-origin
X-Fastly-Request-ID	3c883415363b231db9625b82fcb016937593aa48
Expires	Sun, 14 Dec 2025 04:38:25 GMT
Source-Age	0

tlsping

host	raw.githubusercontent.com
ip	2606:50c0:8001::154
address	raw.githubusercontent.com:443
connection	TLS
count	10
min	0.081918245
max	0.083540751
average	0.0827372404
stddev	0.00045711415412152804
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://releases.nailyk.fr/repo

144.76.164.24

VerificationException

JAR signature failed to verify: /tmp/tmpq9wijyk4 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686806

duration

1.0548019409179688

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:33:27 GMT
Server	Apache
Last-Modified	Sun, 14 Dec 2025 03:41:24 GMT
ETag	"192b-645e144ca8aeb"
Accept-Ranges	bytes
Content-Length	6443
Content-Type	application/java-archive
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive

tlsping

host	releases.nailyk.fr
ip	144.76.164.24
address	releases.nailyk.fr:443
connection	TLS
count	10
min	0.446698682
max	0.451035124
average	0.4489279291
stddev	0.0012289418882001262
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

least strength

https://releases.threema.ch/fdroid/repo

2a14:3e40:112:312::72

VerificationException

JAR signature failed to verify: /tmp/tmpbx74w3cv The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686814

duration

0.9066720008850098

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:33:35 GMT
Server	Apache
Access-Control-Allow-Origin	*
Last-Modified	Tue, 09 Dec 2025 13:40:21 GMT
ETag	"18e2-645850d9f51a5"
Accept-Ranges	bytes
Content-Length	6370
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/x-java-archive

tlsping

host	releases.threema.ch
ip	2a14:3e40:112:312::72
address	releases.threema.ch:443
connection	TLS
count	10
min	0.477808905
max	0.481844582
average	0.4796982118
stddev	0.0011210713244594994
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://repo.kuschku.de/repo

2a01:4f8:210:3186::1

VerificationException

JAR signature failed to verify: /tmp/tmp9xh9_z41 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686825

duration

1.1650030612945557

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:33:45 GMT
Content-Type	application/java-archive
Content-Length	7678
Connection	keep-alive
Last-Modified	Wed, 03 Sep 2025 15:16:34 GMT
ETag	"68b85bd2-1dfe"
Accept-Ranges	bytes
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload

tlsping

host	repo.kuschku.de
ip	2a01:4f8:210:3186::1
address	repo.kuschku.de:443
connection	TLS
count	10
min	0.582309419
max	0.58767181
average	0.5842349804
stddev	0.0015900006252546018
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp384r1) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (secp384r1) - A
cipher preference	server

least strength

https://repo.mobilsicher.de/fdroid/repo

ConnectionError

HTTPSConnectionPool(host='repo.mobilsicher.de', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7fe7090ada50>: Failed to establish a new connection: [Errno -2] Name or service not known'))

starttime

1765686834

duration

0.24258708953857422

status

200

TLS

[Errno -2] Name or service not known

headers

Date	Sun, 14 Dec 2025 04:33:45 GMT
Content-Type	application/java-archive
Content-Length	7678
Connection	keep-alive
Last-Modified	Wed, 03 Sep 2025 15:16:34 GMT
ETag	"68b85bd2-1dfe"
Accept-Ranges	bytes
Strict-Transport-Security	max-age=63072000; includeSubDomains; preload

tlsping

None

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp384r1) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (secp384r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp384r1) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (secp384r1) - A
cipher preference	server

least strength

https://repo.netsyms.com/fdroid/repo

2606:4700:3037::ac43:9479

VerificationException

JAR signature failed to verify: /tmp/tmph84ttgup The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686835

duration

1.3374500274658203

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:33:56 GMT
Content-Type	application/java-archive
Content-Length	11099
Connection	keep-alive
Server	cloudflare
Vary	User-Agent, accept-encoding
cf-cache-status	REVALIDATED
Report-To	{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=HLcdcto5vK%2BF5pw904iX5qU%2BVWkQhus4pyYBuQvO2L7frvIrCFBN2LHHTO0U7QqxRuPJ7Kmp4sxduyBGfrPDI5PXRYDag14mHeoE5a1zydv%2BpShxiG%2FuT5wa"}]}
Last-Modified	Sat, 18 Nov 2023 06:40:11 GMT
etag	"2b5b-60a67864e3f1c"
Accept-Ranges	bytes
Nel	{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Permissions-Policy	interest-cohort=()
X-Content-Type-Options	nosniff
Cache-Control	max-age=14400
CF-RAY	9adafc6428acfef5-PDX
alt-svc	h3=":443"; ma=86400

tlsping

host	repo.netsyms.com
ip	2606:4700:3037::ac43:9479
address	repo.netsyms.com:443
connection	TLS
count	10
min	0.372044428
max	0.486409538
average	0.4331996032
stddev	0.04016143016997531
error

ssl-enum-ciphers

TLSv1.0

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.1

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://rfc2822.gitlab.io/fdroid-firefox/fdroid/repo

starttime

1765686838

duration

0.863116979598999

status

403

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:33:59 GMT
Content-Type	text/html; charset=UTF-8
Transfer-Encoding	chunked
Connection	close
accept-ch	Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated	challenge
critical-ch	Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy	require-corp
cross-origin-resource-policy	same-origin
origin-agent-cluster	?1
permissions-policy	accelerometer=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy	same-origin
server-timing	chlray;desc="9adafc7bea59b7b9"
x-content-type-options	nosniff
x-frame-options	SAMEORIGIN
Cache-Control	private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires	Thu, 01 Jan 1970 00:00:01 GMT
Report-To	{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PSBku%2FuXy6%2BOv6dxsVv0FcR6Z2o5TEwM7siIFHmpowAebXnCfeKHbv%2F5uww01zB9n%2BP0eLKrwrQaBTJBTBaXNs49qOuuPWnOKgWrGbgYlClTY1WSn3FtXSmfY2dtK%2Fa4zUlzjMN%2FXuA%3D"}],"group":"cf-nel","max_age":604800}
NEL	{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Vary	Accept-Encoding
Strict-Transport-Security	max-age=31536000
Server	cloudflare
CF-RAY	9adafc7bea59b7b9-PDX
Content-Encoding	br

tlsping

host	rfc2822.gitlab.io
ip	2600:1901:0:7b8a::
address	rfc2822.gitlab.io:443
connection	TLS
count	10
min	0.218514176
max	0.230657284
average	0.22388483119999997
stddev	0.00377759526136191
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://s2.spiritcroc.de/fdroid/repo

2a01:4f8:c2c:7b6b::1

VerificationException

JAR signature failed to verify: /tmp/tmp76c5nvw6 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686843

duration

1.9166271686553955

status

200

TLS

TLSv1.2

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:34:04 GMT
Content-Type	application/java-archive
Content-Length	11350
Last-Modified	Sat, 13 Dec 2025 08:07:57 GMT
Connection	keep-alive
ETag	"693d1edd-2c56"
Strict-Transport-Security	max-age=15768000; includeSubDomains; preload
Accept-Ranges	bytes

tlsping

host	s2.spiritcroc.de
ip	2a01:4f8:c2c:7b6b::1
address	s2.spiritcroc.de:443
connection	TLS
count	10
min	0.675126374
max	0.699365781
average	0.6822792928999999
stddev	0.008680851841375728
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	server
warnings	Key exchange (ecdh_x25519) of lower strength than certificate key

least strength

https://s3.amazonaws.com/storymaker/fdroid/repo

16.15.192.82

starttime

1765686855

duration

0.3362748622894287

status

403

TLS

TLSv1.3

headers

x-amz-request-id	C2E01KMFDMKACVPC
x-amz-id-2	j3qdGli8Db9AV9Zf9PqVx8/0zL6HFsS/kHZuub1DL/7ONH4mg4JjRqt0EqgYg7s/OCRPAL9WFhkqyrqKZZfQ1Aknvzqt/nHXX0KwOX6Ki94=
Content-Type	application/xml
Transfer-Encoding	chunked
Date	Sun, 14 Dec 2025 04:34:16 GMT
Server	AmazonS3

tlsping

host	s3.amazonaws.com
ip	16.15.194.109
address	s3.amazonaws.com:443
connection	TLS
count	10
min	0.261956805
max	0.269399814
average	0.26512669750000006
stddev	0.0025965779994550978
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
cipher preference	server

least strength

https://secfirst.org/fdroid/repo

SSLError

HTTPSConnectionPool(host='secfirst.org', port=443): Max retries exceeded with url: /fdroid/repo/index-v1.jar (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)')))

starttime

1765686863

duration

0.5786409378051758

status

403

TLS

[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: certificate has expired (_ssl.c:992)

headers

x-amz-request-id	C2E01KMFDMKACVPC
x-amz-id-2	j3qdGli8Db9AV9Zf9PqVx8/0zL6HFsS/kHZuub1DL/7ONH4mg4JjRqt0EqgYg7s/OCRPAL9WFhkqyrqKZZfQ1Aknvzqt/nHXX0KwOX6Ki94=
Content-Type	application/xml
Transfer-Encoding	chunked
Date	Sun, 14 Dec 2025 04:34:16 GMT
Server	AmazonS3

tlsping

None

ssl-enum-ciphers

TLSv1.0

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.1

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (rsa 2048) - A TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (dh 2048) - A TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

least strength

https://static.cryptomator.org/android/fdroid/repo

2606:4700:3034::ac43:84db

VerificationException

JAR signature failed to verify: /tmp/tmpocjnn600 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686884

duration

2.715366840362549

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:34:45 GMT
Content-Type	application/java-archive
Content-Length	6188
Connection	keep-alive
Accept-Ranges	bytes
etag	"342f5a8ebdf8a77587b0b8f9095c2075"
last-modified	Mon, 06 Oct 2025 16:58:07 GMT
x-amz-id-2	txg13aeeee5a6d34f388c80-00693e3e65
x-amz-request-id	txg13aeeee5a6d34f388c80-00693e3e65
Cache-Control	max-age=28800
cf-cache-status	MISS
Nel	{"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
Vary	accept-encoding
Report-To	{"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=%2F4bYSkJk9yyyrF2hdF1DSreIHIf6%2BDabh7sUFIkV3AzC41eUafiHPibOfQi%2Fah4ENxT2tM4ePMpyj87FSfe6LcA7IipoOzHzyOo3ykag6rvzSFgknHGqftPzxOobnN4N"}]}
Server	cloudflare
CF-RAY	9adafd926834ff0e-PDX
alt-svc	h3=":443"; ma=86400

tlsping

host	static.cryptomator.org
ip	2606:4700:3037::6815:520
address	static.cryptomator.org:443
connection	TLS
count	10
min	0.423147836
max	0.629388769
average	0.5594511595
stddev	0.06696968576029409
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://store.nethunter.com/repo

45.33.83.228

VerificationException

JAR signature failed to verify: /tmp/tmp5ciw58c_ The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686888

duration

1.489948034286499

status

200

TLS

TLSv1.2

headers

Server	nginx
Date	Sun, 14 Dec 2025 04:34:49 GMT
Content-Type	application/java-archive
Content-Length	45630
Last-Modified	Mon, 08 Dec 2025 12:59:11 GMT
Connection	keep-alive
ETag	"6936cb9f-b23e"
Accept-Ranges	bytes

tlsping

host	store.nethunter.com
ip	45.33.83.228
address	store.nethunter.com:443
connection	TLS
count	10
min	0.50664249
max	0.514891438
average	0.5081733061
stddev	0.0025090317244967596
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

least strength

https://submarine.strangled.net/fdroid/repo

178.68.58.166

VerificationException

JAR signature failed to verify: /tmp/tmpoul_1cit The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686894

duration

1.8048720359802246

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:34:55 GMT
Server	Apache/2.4.29 (Ubuntu)
Last-Modified	Sun, 01 Dec 2024 22:35:25 GMT
ETag	"1087-6283d0c58d7a9"
Accept-Ranges	bytes
Content-Length	4231
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

host	submarine.strangled.net
ip	178.68.58.166
address	submarine.strangled.net:443
connection	TLS
count	10
min	0.405011928
max	0.418082178
average	0.40984721220000003
stddev	0.004741859400534583
error

ssl-enum-ciphers

TLSv1.0

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.1

ciphers	TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 2048) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_128_CBC_SHA (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (dh 2048) - A TLS_DHE_RSA_WITH_AES_256_CBC_SHA (dh 2048) - A TLS_RSA_WITH_AES_128_GCM_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_GCM_SHA384 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA256 (rsa 2048) - A TLS_RSA_WITH_AES_128_CBC_SHA (rsa 2048) - A TLS_RSA_WITH_AES_256_CBC_SHA (rsa 2048) - A
compressors	NULL
cipher preference	server

TLSv1.3

ciphers	TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A
cipher preference	server

least strength

https://www.anonymousmessenger.ly/fdroid/repo

185.176.41.167

VerificationException

JAR signature failed to verify: /tmp/tmpi48896zp The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686920

duration

0.9152021408081055

status

200

TLS

TLSv1.3

headers

Server	nginx/1.27.0
Date	Sun, 14 Dec 2025 04:35:20 GMT
Content-Type	application/java-archive
Content-Length	5581
Last-Modified	Thu, 21 Jul 2022 14:06:02 GMT
Connection	keep-alive
ETag	"62d95d4a-15cd"
Accept-Ranges	bytes

tlsping

host	www.anonymousmessenger.ly
ip	185.176.41.167
address	www.anonymousmessenger.ly:443
connection	TLS
count	10
min	0.454822285
max	0.455565467
average	0.45516538870000006
stddev	0.00024783246036548604
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_ARIA_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_ARIA_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_128_CBC_SHA256 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CAMELLIA_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://www.collaboraoffice.com/downloads/fdroid/repo

2a01:4f8:1c1e:efee::1

VerificationException

JAR signature failed to verify: /tmp/tmpu88dvmq6 The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686932

duration

0.9337759017944336

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:35:33 GMT
Server	Apache/2.4.65 (Debian)
X-Content-Type-Options	nosniff
Strict-Transport-Security	max-age=31536000; includeSubdomains; preload
Referrer-Policy	strict-origin-when-cross-origin
Last-Modified	Sun, 14 Dec 2025 02:58:48 GMT
ETag	"1190-645e0ac77b5b6"
Accept-Ranges	bytes
Content-Length	4496
x-robots-tag	noindex
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

host	www.collaboraoffice.com
ip	2a01:4f8:1c1e:efee::1
address	www.collaboraoffice.com:443
connection	TLS
count	10
min	0.439214453
max	0.440512191
average	0.43996858860000004
stddev	0.0004554280689635152
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (dh 4096) - A TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (dh 4096) - A TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client
warnings	Key exchange (secp256r1) of lower strength than certificate key

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://www.cromite.org/fdroid/repo

89.46.108.70

starttime

1765686941

duration

5.9328529834747314

status

502

TLS

TLSv1.3

headers

Server	aruba-proxy
Date	Sun, 14 Dec 2025 04:35:46 GMT
Content-Type	text/html
Transfer-Encoding	chunked
Connection	keep-alive
ETag	W/"690dadc3-1bf25"
Alt-Svc	h3=":443"; ma=86400

tlsping

host	www.cromite.org
ip	89.46.108.70
address	www.cromite.org:443
connection	TLS
count	10
min	0.412207178
max	0.413639646
average	0.41287137679999997
stddev	0.000451478441524029
error

ssl-enum-ciphers

TLSv1.2

ciphers	TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (secp256r1) - A TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (secp256r1) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://www.droidware.info/fdroid/repo

2606:4700::6812:3ac

starttime

1765686954

duration

0.42269301414489746

status

403

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:35:54 GMT
Content-Type	text/html; charset=UTF-8
Transfer-Encoding	chunked
Connection	keep-alive
X-Frame-Options	SAMEORIGIN
Referrer-Policy	same-origin
Cache-Control	private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires	Thu, 01 Jan 1970 00:00:01 GMT
Vary	Accept-Encoding
Server	cloudflare
CF-RAY	9adaff4c2a00ff01-PDX
Content-Encoding	gzip

tlsping

host	www.droidware.info
ip	2606:4700:3034::ac43:9ddf
address	www.droidware.info:443
connection	TLS
count	10
min	0.144387489
max	0.15086046
average	0.1471811791
stddev	0.0020626352777921952
error

ssl-enum-ciphers

TLSv1.0

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.1

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength

https://www.ma-nic.de/fdroid/repo

109.250.137.88

VerificationException

JAR signature failed to verify: /tmp/tmps1sn5npc The jar will be treated as unsigned, because it is signed with a weak algorithm that is now disabled. Re-run jarsigner with the -verbose option for more details.

starttime

1765686955

duration

0.9935169219970703

status

200

TLS

TLSv1.3

headers

Date	Sun, 14 Dec 2025 04:35:56 GMT
Server	Apache/2.4.65 (Debian)
Last-Modified	Tue, 06 Jun 2023 16:06:08 GMT
ETag	"1094-5fd7832786fe5"
Accept-Ranges	bytes
Content-Length	4244
Keep-Alive	timeout=5, max=100
Connection	Keep-Alive
Content-Type	application/java-archive

tlsping

host	www.ma-nic.de
ip	109.250.137.88
address	www.ma-nic.de:443
connection	TLS
count	10
min	0.455079419
max	0.679015789
average	0.4796626282
stddev	0.06646209350098292
error

ssl-enum-ciphers

TLSv1.0

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.1

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A
compressors	NULL
cipher preference	server

TLSv1.2

ciphers	TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
compressors	NULL
cipher preference	client

TLSv1.3

ciphers	TLS_AKE_WITH_AES_128_GCM_SHA256 (ecdh_x25519) - A TLS_AKE_WITH_AES_256_GCM_SHA384 (ecdh_x25519) - A TLS_AKE_WITH_CHACHA20_POLY1305_SHA256 (ecdh_x25519) - A
cipher preference	client

least strength