DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=00hdy.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
March 19, 2026
Valid Until
June 17, 2026 43 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
84:EB:07:C6:04:C5:22:19:DD:E2:70:3E:B6:33:B7:83:45:4C:C4:A8:3B:E6:69:DD:D5:26:05:1E:53:03:EA:74
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
mandali.it *.mandali.it *.app.mandali.it *.notexistsbackend.mandali.it *.owa.mandali.it *.remote.mandali.it *.reporting.mandali.it *.staging.mandali.it *.superset.mandali.it

Other domains in certificate

00hdy.com *.00hdy.com *.ww16.00hdy.com *.www.00hdy.com
aarpp.com *.aarpp.com
alternativelogic.com *.alternativelogic.com *.ww38.alternativelogic.com
baiacg.com *.baiacg.com *.gsa.baiacg.com *.hl.baiacg.com *.hna.baiacg.com *.hnc.baiacg.com *.jlc.baiacg.com *.nmc.baiacg.com *.sna.baiacg.com *.usb.baiacg.com *.ww25.baiacg.com *.ww38.baiacg.com *.www.baiacg.com *.yne.baiacg.com
bp82.com *.bp82.com
elcervellsocial.net *.elcervellsocial.net
glasstanks.com *.glasstanks.com *.ww25.glasstanks.com
hajovna.com *.hajovna.com
*.katalog.kohlscoupons.com kohlscoupons.com *.kohlscoupons.com *.mail.kohlscoupons.com *.ww25.kohlscoupons.com *.ww38.kohlscoupons.com
lastimosa.com *.lastimosa.com
*.br.losit.com *.chat.losit.com *.helpdesk.losit.com *.i.losit.com *.job.losit.com losit.com *.losit.com *.mail.losit.com *.my.losit.com
*.academy.marshalfeedback.com *.builder.marshalfeedback.com marshalfeedback.com *.marshalfeedback.com
*.comune.oujv.com oujv.com *.oujv.com *.ww38.oujv.com
*.hostmaster.talbbots.com *.mx7.talbbots.com *.ns1.talbbots.com *.ns2.talbbots.com talbbots.com *.talbbots.com *.ww25.talbbots.com *.ww38.talbbots.com
thesneakertoe.com *.thesneakertoe.com *.ww25.thesneakertoe.com
thevenustourbus.com *.thevenustourbus.com
trihards.com *.trihards.com
uspsliteblue.org *.uspsliteblue.org
*.hostmaster.xn--0ry.com *.sitemaps.xn--0ry.com xn--0ry.com *.xn--0ry.com *.xn--3oq.xn--0ry.com
yechiel.com *.yechiel.com