DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=goitibera.org
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 03, 2026
Valid Until
August 01, 2026 73 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EC:7D:65:08:0D:FD:46:DD:1A:82:7D:87:BD:1E:6E:48:C2:27:BA:4D:70:46:CF:B7:10:8F:F1:C6:26:59:5A:9E
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
plumbersfrederick.info *.plumbersfrederick.info *.3e6b8f26-9f52-4325-aadb-b57bb2bdd8e0.plumbersfrederick.info *.9p77nx.plumbersfrederick.info *.a.plumbersfrederick.info *.app.plumbersfrederick.info *.assets.plumbersfrederick.info *.cfxxbassets.plumbersfrederick.info *.dev.plumbersfrederick.info *.mail.plumbersfrederick.info *.webmail.plumbersfrederick.info *.www.plumbersfrederick.info *.xzzcx9p77nx.plumbersfrederick.info

Other domains in certificate

28002.town *.28002.town *.blog.28002.town *.ce552adb-f9da-4143-ab66-47ae6bec4eca.28002.town
5gfuko.xyz *.5gfuko.xyz *.ww38.5gfuko.xyz
ecadastre-bf.org *.ecadastre-bf.org *.gis.ecadastre-bf.org
*.app.f1streams.live f1streams.live *.f1streams.live
goitibera.org *.goitibera.org *.posta.goitibera.org
irempel.com *.irempel.com *.wonyl.irempel.com
itsreleased.net *.itsreleased.net
*.book.jordanslot.pro jordanslot.pro *.jordanslot.pro
*.23329432-160e-4544-8378-cf2695dc3e1a.napgame1s.net *.2d821ce4-bd67-46bc-beca-1a3107a720fd.napgame1s.net *.app.napgame1s.net napgame1s.net *.napgame1s.net *.shop.napgame1s.net *.testing.napgame1s.net *.www.napgame1s.net *.xf5cqz.napgame1s.net
*.m.runesnet.com runesnet.com *.runesnet.com
*.m.semilar.com semilar.com *.semilar.com
*.a.tag.de *.anh.tag.de *.bahnall.tag.de *.bundes.tag.de *.fraenkischer.tag.de *.hi.tag.de *.kleinreparaturen.tag.de *.mfa.tag.de *.reichs.tag.de tag.de *.tag.de *.trau-m.tag.de *.vo.tag.de *.welt-aids.tag.de *.wi.tag.de *.ww16.tag.de
*.2w4q2.villagedejarry.com *.7xacfj.villagedejarry.com *.eqaq.villagedejarry.com *.iiytxz.villagedejarry.com *.np2oe.villagedejarry.com *.nzdjk.villagedejarry.com *.pop3.villagedejarry.com *.smtp.villagedejarry.com *.ss33f.villagedejarry.com villagedejarry.com *.villagedejarry.com
*.api.washingtonconcerts2026.com *.app.washingtonconcerts2026.com *.dev.washingtonconcerts2026.com *.members.washingtonconcerts2026.com washingtonconcerts2026.com *.washingtonconcerts2026.com *.www.washingtonconcerts2026.com
*.ww25.xxj3s.xyz xxj3s.xyz *.xxj3s.xyz