DNS Gurus
Cached · 2h ago
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=cipher.it
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 17, 2026
Valid Until
January 15, 2027 78 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
4F:E1:7A:CC:29:3B:BA:BB:B0:14:64:CB:54:24:6B:00:13:0F:C2:08:B9:51:D9:45:88:DF:30:46:E7:7D:BB:D2
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
fairar.com *.fairar.com *.rdweb.fairar.com

Other domains in certificate

*.admin.cipher.it *.analytics.cipher.it *.api.cipher.it *.app.cipher.it *.backend.cipher.it *.chart.cipher.it cipher.it *.cipher.it *.dashboard.cipher.it *.dev.cipher.it *.hostmaster.cipher.it *.mx.cipher.it *.staging.cipher.it *.www.cipher.it
df6688889.com *.df6688889.com *.www.df6688889.com
gnpcfoundation.org *.gnpcfoundation.org *.m.gnpcfoundation.org *.office.gnpcfoundation.org *.portal.gnpcfoundation.org *.remote.gnpcfoundation.org *.scholarship.gnpcfoundation.org
modishchoice.info *.modishchoice.info *.sitemaps.modishchoice.info
*.backend.musicland.cc *.bgptools-wildcard-confirmed.musicland.cc musicland.cc *.musicland.cc
*.admin.mutual.it *.api.mutual.it *.demo.mutual.it *.dev.mutual.it *.hostmaster.mutual.it mutual.it *.mutual.it *.penn.mutual.it *.remote.mutual.it *.staging.mutual.it
mycloud.me *.mycloud.me *.sitemaps.mycloud.me
*.dev.pearhot.live pearhot.live *.pearhot.live *.shop.pearhot.live *.test.pearhot.live *.wildcard.pearhot.live
*.api.racersites-cluster.com *.backup.racersites-cluster.com *.dashboard.racersites-cluster.com *.dashboards.racersites-cluster.com *.git.racersites-cluster.com *.laptrax02.racersites-cluster.com *.laptrax10.racersites-cluster.com *.metrics.racersites-cluster.com racersites-cluster.com *.racersites-cluster.com *.relay.racersites-cluster.com *.store.racersites-cluster.com
*.a29ouf.serverpaket.com *.adm.serverpaket.com *.app.serverpaket.com *.backend.serverpaket.com *.beta.serverpaket.com *.cms.serverpaket.com *.cpanel.serverpaket.com *.crm.serverpaket.com *.dashboard.serverpaket.com *.demo.serverpaket.com *.dev.serverpaket.com *.edu.serverpaket.com *.ftp.serverpaket.com *.hosting.serverpaket.com *.ipv6.serverpaket.com *.login.serverpaket.com *.mvv9gk.serverpaket.com *.my.serverpaket.com *.new.serverpaket.com serverpaket.com *.serverpaket.com
*.dev.tkwi.org *.news.tkwi.org tkwi.org *.tkwi.org