DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=discoverable.com
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 02, 2026
Valid Until
August 31, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0D:0E:28:6D:F3:1C:C3:AB:CF:E4:38:47:8B:09:07:82:CD:D5:24:40:A5:EB:E7:BC:1A:EE:5A:8E:B6:AC:88:6E
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
15xc.cc *.15xc.cc *.3f57a8b6-6d86-4901-9b21-04a8fee4133c.15xc.cc *.account.15xc.cc *.auth.15xc.cc *.backoffice.15xc.cc *.cabinet.15xc.cc *.client.15xc.cc *.e7745d55-877c-4264-a4f5-c9496194cb60.15xc.cc *.login.15xc.cc *.www.15xc.cc

Other domains in certificate

02838.loan *.02838.loan
73904.one *.73904.one
84820.one *.84820.one
*.a.askgerald.info *.admin.askgerald.info *.api.askgerald.info *.app.askgerald.info askgerald.info *.askgerald.info *.ba9a61bc-184b-452b-8d50-472c6fd3471c.askgerald.info *.demo.askgerald.info *.dev.askgerald.info *.m.askgerald.info *.mail.askgerald.info *.staging.askgerald.info *.test.askgerald.info
*.admin.devamajig.net *.app.devamajig.net devamajig.net *.devamajig.net
*.app.discoverable.com *.backend.discoverable.com *.blog.discoverable.com *.c.discoverable.com *.demo.discoverable.com discoverable.com *.discoverable.com *.notexistsww42.discoverable.com *.staging.discoverable.com
gogradientlabs.com *.gogradientlabs.com *.hw1ei4.gogradientlabs.com *.vpn.gogradientlabs.com
*.app.herk.xyz *.comune.herk.xyz *.d.herk.xyz herk.xyz *.herk.xyz *.ww38.herk.xyz
*.beta.istanbulcircuit.com *.blog.istanbulcircuit.com *.crm.istanbulcircuit.com *.demo.istanbulcircuit.com *.forum.istanbulcircuit.com *.forums.istanbulcircuit.com *.help.istanbulcircuit.com istanbulcircuit.com *.istanbulcircuit.com *.m.istanbulcircuit.com *.old.istanbulcircuit.com *.vpn.istanbulcircuit.com
*.admin.occhialidasoleprezzo.it occhialidasoleprezzo.it *.occhialidasoleprezzo.it
*.admin.winebrats.net *.api.winebrats.net *.app.winebrats.net *.cisco.winebrats.net *.dashboards.winebrats.net *.data.winebrats.net *.internal.winebrats.net *.m.winebrats.net *.members.winebrats.net *.notexistsapi.winebrats.net *.redash.winebrats.net *.report.winebrats.net *.webmail.winebrats.net winebrats.net *.winebrats.net *.ww38.winebrats.net *.www.winebrats.net
*.m.worlddentities.com *.members.worlddentities.com worlddentities.com *.worlddentities.com *.www.worlddentities.com