DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=comaschi.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
November 10, 2026
Valid Until
February 08, 2027 85 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
EA:E7:20:3A:62:CE:0D:6C:37:47:E3:4A:11:90:58:4D:DC:E6:83:F0:C0:23:76:EB:29:0E:C4:3F:49:63:42:4C
Alternative Names
86 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

86 domains
comaschi.com *.comaschi.com *.admin.comaschi.com *.allex.comaschi.com *.api.comaschi.com *.app.comaschi.com *.campingwasch.comaschi.com *.demo.comaschi.com *.dev.comaschi.com *.hostmaster.comaschi.com *.rallomani.comaschi.com *.staging.comaschi.com

Other domains in certificate

57igao.com *.57igao.com *.docs.57igao.com *.status.57igao.com
alwaysmakenewmistakes.info *.alwaysmakenewmistakes.info *.docs.alwaysmakenewmistakes.info *.status.alwaysmakenewmistakes.info
*.64.bai611.top bai611.top *.bai611.top
*.attccms.carrello.com carrello.com *.carrello.com *.il.carrello.com *.mail.carrello.com *.mail2.carrello.com *.pubbli.carrello.com
*.discord.emojis.gg emojis.gg *.emojis.gg *.exclusive.emojis.gg
*.apps.fandanco.com *.email.fandanco.com fandanco.com *.fandanco.com *.shop.fandanco.com *.uat.fandanco.com *.umbp735edfkb8kd5.fandanco.com *.www.fandanco.com
hiredns.com *.hiredns.com *.hostmaster.hiredns.com *.ns1.hiredns.com *.ns2.hiredns.com *.vpn.hiredns.com *.www.hiredns.com
*.atradersheart.mrcm.info *.dashboard.mrcm.info *.foreverlive.mrcm.info *.marketing-bot.mrcm.info mrcm.info *.mrcm.info *.pftglobe.mrcm.info
*.1.mt130.mom *.3.mt130.mom mt130.mom *.mt130.mom
*.gta.playdropper.com *.naruto.playdropper.com playdropper.com *.playdropper.com
s4zquu.top *.s4zquu.top
*.reply.sagazjiujitsu.com sagazjiujitsu.com *.sagazjiujitsu.com
*.autodiscover.selfconception.com selfconception.com *.selfconception.com
*.bjj.skf8.fit *.cdn.skf8.fit skf8.fit *.skf8.fit
*.mail.skyliteagrochem.com skyliteagrochem.com *.skyliteagrochem.com
*.dev.transf0rm.com transf0rm.com *.transf0rm.com *.ww1.transf0rm.com
*.sitemap.xn--nyq318f5is.com xn--nyq318f5is.com *.xn--nyq318f5is.com