DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=chomsky.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 19, 2026
Valid Until
May 20, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5E:BF:AE:32:C2:ED:7E:42:D6:F8:EA:CC:3F:49:F1:BA:D1:A2:BE:4E:AC:16:64:66:73:73:D3:58:37:46:0E:6F
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
jecb.org *.jecb.org *.cpcalendars.jecb.org *.ww38.jecb.org

Other domains in certificate

*.38.animeupdate.co *.49e525a4-e77b-471f-8996-5c49ec0f5998.animeupdate.co *.6192a1ce-e96b-456f-9c32-2c1e21d725c3.animeupdate.co animeupdate.co *.animeupdate.co *.egiypwildcard.animeupdate.co *.mtgofwildcard.animeupdate.co *.rmchmqxuypegiypwildcard.animeupdate.co *.wildcard.animeupdate.co *.ww25.animeupdate.co *.ww38.animeupdate.co *.www.animeupdate.co
beyim.com *.beyim.com *.hucreqrfspforum.beyim.com *.mail.beyim.com *.mvideo.beyim.com *.vwww.beyim.com *.wiki.beyim.com *.ww11.beyim.com *.ww25.beyim.com
*.admin.chomsky.it chomsky.it *.chomsky.it *.report.chomsky.it *.staging.chomsky.it *.superset.chomsky.it
*.bitcoin.corgi.party corgi.party *.corgi.party *.dddd.corgi.party
dysonrevive.com.au *.dysonrevive.com.au *.ww16.dysonrevive.com.au *.ww17.dysonrevive.com.au *.ww38.dysonrevive.com.au
eeslap.com *.eeslap.com *.random.eeslap.com *.wildcard.eeslap.com *.ww38.eeslap.com
exactamate.com *.exactamate.com
*.4x85a2s02554m15a.futbolboliviano.online futbolboliviano.online *.futbolboliviano.online *.ww25.futbolboliviano.online
iplayart.club *.iplayart.club
*.aff.masar.cc *.mail.masar.cc masar.cc *.masar.cc
*.bmail.secureprocess.click *.cfa53bb6-b1d5-4d0a-b41a-cd73af210b1d.secureprocess.click *.cpanel.secureprocess.click *.ftp.secureprocess.click *.hm.secureprocess.click *.mail.secureprocess.click *.pop.secureprocess.click secureprocess.click *.secureprocess.click *.smtp.secureprocess.click *.webmail.secureprocess.click *.whm.secureprocess.click
*.random.splashfinacial.com splashfinacial.com *.splashfinacial.com *.uat.splashfinacial.com *.wildcard.splashfinacial.com
*.aoserver.traidy.net *.cb.traidy.net *.cbapi.traidy.net *.host0name.traidy.net *.mbh.traidy.net *.mouskevitz.traidy.net *.mserver.traidy.net *.orcrist.traidy.net *.smtpa.traidy.net *.thething.traidy.net traidy.net *.traidy.net *.wbot.traidy.net
whatawonderfulworld.co *.whatawonderfulworld.co