DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=handyway.it
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 12, 2026
Valid Until
December 11, 2026 43 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
CB:35:07:AB:AD:AF:14:57:F1:4E:28:34:56:98:B3:C1:E0:DA:BA:52:79:E1:CC:9B:1E:19:69:73:CF:AD:B2:AE
Alternative Names
84 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

84 domains
handyway.it *.handyway.it *.admin.handyway.it *.api.handyway.it *.app.handyway.it *.dev.handyway.it

Other domains in certificate

89540.xyz *.89540.xyz
89665.xyz *.89665.xyz
89678.xyz *.89678.xyz
89682.xyz *.89682.xyz
89691.xyz *.89691.xyz
89727.xyz *.89727.xyz
89740.xyz *.89740.xyz
89743.xyz *.89743.xyz
andrewcraig.me *.andrewcraig.me
awqwe.vip *.awqwe.vip
beautiesnova.com *.beautiesnova.com
bety7s.com *.bety7s.com
bigbooty.me *.bigbooty.me
bw388.xyz *.bw388.xyz
ccc11850.top *.ccc11850.top
dd882a4a5080048dfbecd54f5fd68ef2.xyz *.dd882a4a5080048dfbecd54f5fd68ef2.xyz
discoverwithartofmentoring.sbs *.discoverwithartofmentoring.sbs
eask.me *.eask.me
findwithartofmentoring.sbs *.findwithartofmentoring.sbs
gh7b35z.top *.gh7b35z.top
growexsquaredhq.one *.growexsquaredhq.one
helicoptertank.com *.helicoptertank.com
holidaypudding.com *.holidaypudding.com
idd.lol *.idd.lol
livetv369.me *.livetv369.me
nancyelizabethbarry.com *.nancyelizabethbarry.com
nngameslogin.org *.nngameslogin.org
northdakotashopslocal.com *.northdakotashopslocal.com
onlam.me *.onlam.me
p8f3.icu *.p8f3.icu
pabeihan.cn *.pabeihan.cn
preman69kelar.vip *.preman69kelar.vip
prontonmail.me *.prontonmail.me
qualitywebdesigning.com *.qualitywebdesigning.com
sdmingdejs.com *.sdmingdejs.com
thecryptoknightrecruitmentgtm.sbs *.thecryptoknightrecruitmentgtm.sbs
warehouse-automation-software28.click *.warehouse-automation-software28.click
wh6q63d.top *.wh6q63d.top
zoohealthapp.co *.zoohealthapp.co