DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=headware.net
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 12, 2026
Valid Until
September 10, 2026 87 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E1:9A:B3:21:F3:FC:3B:6C:9E:D9:29:24:31:4F:F3:6F:74:FC:29:CF:68:FB:78:34:D0:90:39:CA:53:D1:E1:03
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
diyus.site *.diyus.site *.photographic.diyus.site

Other domains in certificate

africaneconomicoutlook.org *.africaneconomicoutlook.org *.apis.africaneconomicoutlook.org *.pay.africaneconomicoutlook.org
*.admin.cashtok.bio *.backend.cashtok.bio cashtok.bio *.cashtok.bio *.cron.cashtok.bio *.m.cashtok.bio *.service.cashtok.bio *.sitemap.cashtok.bio *.ww.cashtok.bio *.ww12.cashtok.bio *.www.cashtok.bio
cookcountytreasuerer.com *.cookcountytreasuerer.com *.forum.cookcountytreasuerer.com
*.cloud.debruno.it debruno.it *.debruno.it *.desktop.debruno.it *.rd.debruno.it *.remote.debruno.it *.webpioniere.debruno.it
down.bet *.down.bet *.fb.down.bet *.going.down.bet *.me.down.bet *.poc.down.bet *.toolshed.down.bet
euphorics.com.au *.euphorics.com.au
*.dev.filmsenzalimiti.io filmsenzalimiti.io *.filmsenzalimiti.io *.m.filmsenzalimiti.io *.stag.filmsenzalimiti.io *.www.filmsenzalimiti.io
frigus27.xyz *.frigus27.xyz
*.app.gainhub-trade.co gainhub-trade.co *.gainhub-trade.co
gymshorts.com.au *.gymshorts.com.au *.random.gymshorts.com.au
headware.net *.headware.net *.hostmaster.headware.net *.random.headware.net *.ww25.headware.net *.ww38.headware.net *.www.headware.net
*.aqzmk.hilo444.xyz *.cxie3.hilo444.xyz hilo444.xyz *.hilo444.xyz *.kwid9.hilo444.xyz *.pp4gk.hilo444.xyz
*.hostmaster.ladysaints.com ladysaints.com *.ladysaints.com
placebo.live *.placebo.live
*.6g5zbr.sevgibulutu.info *.alfabank.sevgibulutu.info *.arca.sevgibulutu.info *.ardshinbank.sevgibulutu.info *.blogs.sevgibulutu.info *.cian.sevgibulutu.info *.demo.sevgibulutu.info *.dtidrcian.sevgibulutu.info *.moerfqdsfeevents.sevgibulutu.info sevgibulutu.info *.sevgibulutu.info
tchatvisiocam.com *.tchatvisiocam.com
*.random.trampoline-superstore.com trampoline-superstore.com *.trampoline-superstore.com *.ww17.trampoline-superstore.com *.www.trampoline-superstore.com
*.demo.trythis.one trythis.one *.trythis.one