DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=theape.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 08, 2026
Valid Until
December 07, 2026 42 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
64:49:B8:BB:5E:95:8E:3A:C4:92:94:7D:BA:1F:7E:E8:0B:5C:D4:44:C7:C1:0D:52:63:7B:5D:BD:0C:91:93:56
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
phoneshopping.it *.phoneshopping.it *.admin.phoneshopping.it *.api.phoneshopping.it *.app.phoneshopping.it *.dev.phoneshopping.it *.rwqcfbackend.phoneshopping.it *.staging.phoneshopping.it

Other domains in certificate

25937.cc *.25937.cc *.hostmaster.25937.cc
apiit.com *.apiit.com *.gateway.apiit.com *.hostmaster.apiit.com *.lms.apiit.com *.mail.apiit.com *.student.apiit.com *.students.apiit.com *.wwww.apiit.com
*.auth.chrismall.com chrismall.com *.chrismall.com *.mail6.chrismall.com *.random.chrismall.com *.staging.chrismall.com
cinema-ma.com *.cinema-ma.com *.flm.cinema-ma.com
food-stock.net *.food-stock.net *.ww17.food-stock.net *.ww25.food-stock.net
*.admin.goldcard-tv.live goldcard-tv.live *.goldcard-tv.live
*.hostmaster.incash.it incash.it *.incash.it *.random.incash.it
musicticket.co *.musicticket.co *.random.musicticket.co
*.apps.ppetw.com *.autoconfig.ppetw.com *.dbis.ppetw.com *.eposta.ppetw.com *.ex2013.ppetw.com *.exch.ppetw.com *.exch2016.ppetw.com *.mail-in.ppetw.com *.mail-out.ppetw.com *.mail03.ppetw.com *.mail07.ppetw.com *.mail08.ppetw.com *.mail3.ppetw.com *.mail8.ppetw.com *.msexch2k13.ppetw.com *.mx001.ppetw.com *.mywebmail.ppetw.com *.officevpn.ppetw.com *.portal.ppetw.com ppetw.com *.ppetw.com *.ra.ppetw.com *.rds1.ppetw.com *.remote.ppetw.com *.smail.ppetw.com *.smtp-qa.ppetw.com *.ssl.ppetw.com *.sslvpn2.ppetw.com *.vpn.ppetw.com *.vpn1.ppetw.com *.vpn2.ppetw.com *.vpngate.ppetw.com *.webmail.ppetw.com *.webmail2013.ppetw.com *.www.ppetw.com *.xapp.ppetw.com
theape.com *.theape.com *.ww17.theape.com
*.saxons.wcrowing.org wcrowing.org *.wcrowing.org
*.app.zerkalo-leonbets-r82f.lol zerkalo-leonbets-r82f.lol *.zerkalo-leonbets-r82f.lol