DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=demandfitness.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 12, 2026
Valid Until
December 11, 2026 43 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
64:A1:EF:A0:99:9F:C4:2B:29:19:A0:7B:7D:4A:B7:03:46:C8:EF:3B:19:78:B9:15:4D:3B:70:E7:C8:64:B4:B3
Alternative Names
85 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

85 domains
scomcast.net *.scomcast.net *.bot.scomcast.net *.guide.scomcast.net *.owncloud.scomcast.net *.static.scomcast.net *.ww38.scomcast.net

Other domains in certificate

borrowers.au *.borrowers.au
*.agent.charleneprickett.com charleneprickett.com *.charleneprickett.com *.citrix.charleneprickett.com *.hotfix.charleneprickett.com
cybersecuritydirectory.au *.cybersecuritydirectory.au
dealleaks.com *.dealleaks.com
*.ai.demandfitness.com *.corporate.demandfitness.com demandfitness.com *.demandfitness.com *.dev.demandfitness.com *.hra.demandfitness.com *.videos.demandfitness.com *.ww31.demandfitness.com *.ww45.demandfitness.com
diaholmia.org *.diaholmia.org *.random.diaholmia.org
doctorconsult.au *.doctorconsult.au
dossier.com.au *.dossier.com.au
drugcounselling.co.uk *.drugcounselling.co.uk
*.advolve.eyewonderlabs.com *.api.eyewonderlabs.com *.apps.eyewonderlabs.com *.bcm.eyewonderlabs.com *.cdn.eyewonderlabs.com eyewonderlabs.com *.eyewonderlabs.com *.www.eyewonderlabs.com
filipinos.au *.filipinos.au
glassbalustrading.com.au *.glassbalustrading.com.au *.sandbox.glassbalustrading.com.au
golfplayers.it *.golfplayers.it *.hostmaster.golfplayers.it *.www.golfplayers.it
insuraaace.com *.insuraaace.com
lesbianvilla.com *.lesbianvilla.com *.ww25.lesbianvilla.com
namechange.au *.namechange.au *.random.namechange.au *.ww25.namechange.au
outdora-shop.de *.outdora-shop.de
overtrack.dev *.overtrack.dev
*.bde-de.poo.de *.boo.poo.de poo.de *.poo.de
q-jumper.info *.q-jumper.info
serper.de *.serper.de
skinnydipnantucket.com *.skinnydipnantucket.com
swissbankingaccount.com *.swissbankingaccount.com
tvaustralia.com.au *.tvaustralia.com.au
vacuflo.za.net *.vacuflo.za.net
*.random.zhuman.com zhuman.com *.zhuman.com