DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=yaosz.xyz
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 09, 2026
Valid Until
January 07, 2027 85 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
55:5E:CE:04:B5:36:79:A3:50:1B:3F:9C:97:ED:C3:3E:44:97:6E:E0:C2:24:7C:77:F4:D6:91:16:BC:1A:00:35
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
billycocks.com *.billycocks.com *.dev.billycocks.com *.embed.billycocks.com *.ftp.billycocks.com *.m.billycocks.com *.mail.billycocks.com *.rustore.billycocks.com *.seo.billycocks.com *.tensorflow.billycocks.com *.v8.billycocks.com *.vpn.billycocks.com

Other domains in certificate

bishopuniversity.com *.bishopuniversity.com *.support.bishopuniversity.com
*.admin.clasicfootballshirts.co.uk *.api.clasicfootballshirts.co.uk *.app.clasicfootballshirts.co.uk *.beta.clasicfootballshirts.co.uk clasicfootballshirts.co.uk *.clasicfootballshirts.co.uk *.demo.clasicfootballshirts.co.uk *.dev.clasicfootballshirts.co.uk *.notexistsvpn.clasicfootballshirts.co.uk *.production.clasicfootballshirts.co.uk *.www.clasicfootballshirts.co.uk
*.beloamigo.ltda.me *.bluepictures.ltda.me *.caballerovideo.ltda.me *.colossalentertainment.ltda.me *.constr.ltda.me *.dnstecnologia.ltda.me *.evilangel.ltda.me *.fer.ltda.me *.groobyproductions.ltda.me *.hostmaster.ltda.me *.latinoguysporn.ltda.me ltda.me *.ltda.me *.processeaqui.ltda.me *.sandiegoboyproductions.ltda.me *.simples.ltda.me *.urbanlatino.ltda.me
*.admin.xn--95q087dpze.com *.backend.xn--95q087dpze.com *.chqloadmin.xn--95q087dpze.com *.dev.xn--95q087dpze.com *.email.xn--95q087dpze.com *.rd.xn--95q087dpze.com xn--95q087dpze.com *.xn--95q087dpze.com
*.a.yaosz.xyz *.a6l.yaosz.xyz *.a8l.yaosz.xyz *.aaux.yaosz.xyz *.aerfa.yaosz.xyz *.aidi.yaosz.xyz *.app.yaosz.xyz *.banma.yaosz.xyz *.benchi.yaosz.xyz *.benti.yaosz.xyz *.bwm.yaosz.xyz *.crva.yaosz.xyz *.dashboard.yaosz.xyz *.dazho.yaosz.xyz *.dev.yaosz.xyz *.dihao.yaosz.xyz *.e450.yaosz.xyz *.huiteng.yaosz.xyz *.jiebao.yaosz.xyz *.jili.yaosz.xyz *.lsls.yaosz.xyz *.mazida.yaosz.xyz *.oiau.yaosz.xyz *.oqlkaa.yaosz.xyz *.portal.yaosz.xyz *.qirui.yaosz.xyz *.staging.yaosz.xyz *.suteng.yaosz.xyz *.test.yaosz.xyz *.vvux.yaosz.xyz *.xcux.yaosz.xyz *.xiandai.yaosz.xyz *.xingge.yaosz.xyz *.xingtu.yaosz.xyz *.xingyue.yaosz.xyz *.xsux.yaosz.xyz *.xxux.yaosz.xyz yaosz.xyz *.yaosz.xyz