DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=masik.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 18, 2026
Valid Until
May 19, 2026 86 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
78:42:00:8A:9C:5D:B1:9F:2B:5D:3F:BB:EB:52:26:80:2F:3E:86:86:69:DD:51:F7:6D:91:9F:A4:DD:F8:45:DE
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
flatway.com *.flatway.com *.api.flatway.com *.app.flatway.com *.m.flatway.com *.mail.flatway.com *.mailhost.flatway.com *.rustore.flatway.com *.test.flatway.com *.traefik.flatway.com *.ww17.flatway.com *.ww25.flatway.com

Other domains in certificate

agris-guesthouse.com *.agris-guesthouse.com
*.api.ardorsilveremblem.com ardorsilveremblem.com *.ardorsilveremblem.com
associazionegiovani.com *.associazionegiovani.com *.backend.associazionegiovani.com *.mx.associazionegiovani.com
*.analytic.avac.it avac.it *.avac.it
*.api.fazzolettini.com *.backend.fazzolettini.com *.dev.fazzolettini.com fazzolettini.com *.fazzolettini.com *.mail.fazzolettini.com
imagesbyrob.net *.imagesbyrob.net *.yandex-staff.imagesbyrob.net
*.backend.kwart.it *.demo.kwart.it *.forecast.kwart.it kwart.it *.kwart.it
*.95b041df-f2f7-49b8-bb51-3680cd4f7f50.lk555.pro lk555.pro *.lk555.pro *.rustore.lk555.pro *.yandex-staff.lk555.pro
*.app.mas18.com *.apps.mas18.com *.cloud.mas18.com *.connect.mas18.com *.dev1grafana.mas18.com *.hostmaster.mas18.com mas18.com *.mas18.com *.portal.mas18.com *.rd.mas18.com *.rdp.mas18.com *.rds1.mas18.com *.remoto.mas18.com *.sitemap.mas18.com *.ts.mas18.com *.vpn.mas18.com *.ww1.mas18.com *.ww11.mas18.com *.ww16.mas18.com *.ww17.mas18.com *.ww2.mas18.com *.ww38.mas18.com *.zlnccapps.mas18.com
masik.it *.masik.it *.mx.masik.it
*.fivykzwme.naturaloze.pl naturaloze.pl *.naturaloze.pl *.przau.naturaloze.pl *.vajukhbiy.naturaloze.pl *.xtmzc33l3.naturaloze.pl
pornogay.online *.pornogay.online *.stage.pornogay.online
*.adminpanel.techfestsliet.org *.evs.techfestsliet.org *.go4food.techfestsliet.org *.rapidreceipt.techfestsliet.org techfestsliet.org *.techfestsliet.org *.tf23.techfestsliet.org *.ww25.techfestsliet.org *.zosszapi.techfestsliet.org
*.jichu.xiaoqing.com xiaoqing.com *.xiaoqing.com