DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=thiscover.org
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
May 29, 2026
Valid Until
August 27, 2026 69 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
28:99:E7:35:4B:FE:6C:88:1B:C3:50:5B:D5:13:69:EA:5F:40:73:F7:B6:4D:2A:FA:AD:6C:C0:C2:15:1C:95:CA
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
inquiete.com *.inquiete.com

Other domains in certificate

*.arquivos.bonywing.com bonywing.com *.bonywing.com *.random.bonywing.com
cilup.com *.cilup.com
greenfestival.it *.greenfestival.it
*.alpha-testnet.hallsofolympia.io *.api-vslice-v1.hallsofolympia.io *.app-vslice.hallsofolympia.io *.app.hallsofolympia.io *.game-alpha.hallsofolympia.io hallsofolympia.io *.hallsofolympia.io *.stream-net00.hallsofolympia.io *.stream-net01.hallsofolympia.io *.stream-net02.hallsofolympia.io *.test00.hallsofolympia.io *.ww25.hallsofolympia.io *.ww38.hallsofolympia.io
*.1ywtr3.hometechfix.com *.autoconfig.hometechfix.com *.backup.hometechfix.com *.dev.hometechfix.com hometechfix.com *.hometechfix.com *.hssjfxgvgfuat.hometechfix.com *.portal.hometechfix.com *.webdisk.hometechfix.com *.webmail.hometechfix.com *.xgvgfuat.hometechfix.com
*.blog.jinrifm.app jinrifm.app *.jinrifm.app *.news.jinrifm.app *.press.jinrifm.app *.rustore.jinrifm.app *.wjqnerustore.jinrifm.app
*.17.nanataipei.com nanataipei.com *.nanataipei.com *.w.nanataipei.com *.ww.nanataipei.com *.ww1.nanataipei.com
nodopinggame.com *.nodopinggame.com *.sxyn67.nodopinggame.com
soggiornotoscana.com *.soggiornotoscana.com
*.4r.thiscover.org *.andaccountancy.thiscover.org *.befopre2r.thiscover.org *.community.thiscover.org *.dev.thiscover.org *.mailer.thiscover.org *.marketing.thiscover.org *.obwyxmarketing.thiscover.org *.staging.thiscover.org thiscover.org *.thiscover.org *.uat.thiscover.org *.v1.thiscover.org
*.5be7cd68-a9d6-4318-af77-3bd9c34da7e4.winsib.com *.admin.winsib.com *.api.winsib.com *.app.winsib.com *.assets.winsib.com *.backup.winsib.com *.c92c35af-965f-4b80-b52f-d79b0296ac09.winsib.com *.demo.winsib.com *.dev.winsib.com *.mail.winsib.com *.shop.winsib.com *.staging.winsib.com *.test.winsib.com *.uat.winsib.com *.w9nnf6.winsib.com winsib.com *.winsib.com *.www.winsib.com *.xsqwmblog.winsib.com
*.cloud.xn--ehqv8s.com *.m.xn--ehqv8s.com *.wildcard.xn--ehqv8s.com *.www.xn--ehqv8s.com xn--ehqv8s.com *.xn--ehqv8s.com