DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=toasttab.co
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 13, 2026
Valid Until
December 12, 2026 48 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
80:05:4B:08:C3:17:D2:C6:83:68:D3:59:E6:F7:75:63:AB:D4:C9:E0:76:55:28:65:BA:89:49:C1:5C:1F:7C:DD
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
sawyer.it *.sawyer.it *.admin.sawyer.it *.ahelptothe.sawyer.it *.alfrede.sawyer.it *.analytic.sawyer.it *.analytics.sawyer.it *.andahelptothe.sawyer.it *.chart.sawyer.it *.dashboard.sawyer.it *.helptothe.sawyer.it *.integration.sawyer.it *.metrics.sawyer.it *.ofalfrede.sawyer.it *.ontest.sawyer.it *.the.sawyer.it *.visualizations.sawyer.it

Other domains in certificate

ac19.live *.ac19.live *.app.ac19.live
*.admin.aiwen.net aiwen.net *.aiwen.net *.api.aiwen.net *.art.aiwen.net *.dev.aiwen.net *.hostmaster.aiwen.net *.m.aiwen.net *.nil.aiwen.net *.staging.aiwen.net *.test.aiwen.net *.wildcard.aiwen.net *.ww01.aiwen.net *.ww1.aiwen.net *.ww16.aiwen.net *.ww17.aiwen.net *.ww25.aiwen.net *.ww38.aiwen.net
*.1mnwt.ecoe.cc *.23u32.ecoe.cc *.29373.ecoe.cc *.ecco.ecoe.cc ecoe.cc *.ecoe.cc *.www1.ecoe.cc
*.beta.fzmovies.to *.ci.fzmovies.to fzmovies.to *.fzmovies.to *.hostmaster.fzmovies.to *.ww25.fzmovies.to
*.360.ihuo.com *.fecom.ihuo.com *.fewww.ihuo.com *.hostmaster.ihuo.com *.http180lt.ihuo.com ihuo.com *.ihuo.com *.my.ihuo.com *.shouji.ihuo.com *.sitemap.ihuo.com *.vipt.ihuo.com
kissbetter.com *.kissbetter.com *.random.kissbetter.com
orionstars777.pro *.orionstars777.pro
sce1e.cc *.sce1e.cc
*.boa.tlmaxx.com *.login.tlmaxx.com *.random.tlmaxx.com *.superset.tlmaxx.com tlmaxx.com *.tlmaxx.com *.ww17.tlmaxx.com *.ww25.tlmaxx.com
*.autodiscover.toasttab.co *.eng.toasttab.co *.flowise.toasttab.co *.payroll.toasttab.co *.pos.toasttab.co toasttab.co *.toasttab.co
*.69.urt.org *.chinaco.urt.org *.klagenf.urt.org *.ug.urt.org urt.org *.urt.org