DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=rooster.gold
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 04, 2026
Valid Until
September 02, 2026 71 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
26:F7:42:AE:99:52:D5:F6:91:42:9A:D0:5F:90:C0:BC:2D:86:98:5B:1B:BB:73:E5:73:7D:41:5A:91:25:7D:B0
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
rooster.gold *.rooster.gold *.app.rooster.gold *.backup.rooster.gold *.board.rooster.gold *.dev.rooster.gold *.gitlab.rooster.gold *.izqchjab.rooster.gold *.laravel.rooster.gold *.mautic.rooster.gold *.morganrebemall.rooster.gold *.new.rooster.gold *.sandbox.rooster.gold *.secure.rooster.gold *.sqs.rooster.gold *.stage.rooster.gold *.store.rooster.gold *.webmail.rooster.gold

Other domains in certificate

doubletrade.io *.doubletrade.io *.webdisk.doubletrade.io
isoletremiti.co *.isoletremiti.co *.remote.isoletremiti.co
*.admin.kikotomy.com *.app.kikotomy.com *.hostmaster.kikotomy.com kikotomy.com *.kikotomy.com
*.access.lean-body.com *.connect.lean-body.com *.hostmaster.lean-body.com lean-body.com *.lean-body.com *.rds.lean-body.com *.sslvpn.lean-body.com *.store.lean-body.com
royal4.xyz *.royal4.xyz *.ww38.royal4.xyz
*.ahquitxg.starcasto.com *.autodiscover.starcasto.com *.connect.starcasto.com *.dev.starcasto.com *.egszbgp.starcasto.com *.mkpsxlhv.starcasto.com starcasto.com *.starcasto.com *.wlcisrvy.starcasto.com *.ww25.starcasto.com
*.access.whlyon.com *.email.whlyon.com *.imap.whlyon.com *.inbound.whlyon.com *.rdp.whlyon.com *.securemail.whlyon.com *.sslvpn.whlyon.com *.webmail.whlyon.com whlyon.com *.whlyon.com
*.94a5eadc-d68f-4fd6-8ff4-339bb570e756.xn--uvws64b.com *.admin.xn--uvws64b.com *.api.xn--uvws64b.com *.app.xn--uvws64b.com *.dev.xn--uvws64b.com *.dhncqstore.xn--uvws64b.com *.feobiwebmail.xn--uvws64b.com *.guiweb.xn--uvws64b.com *.home.xn--uvws64b.com *.hostmaster.xn--uvws64b.com *.hwtkpwebmail.xn--uvws64b.com *.intranet.xn--uvws64b.com *.m.xn--uvws64b.com *.mail.xn--uvws64b.com *.mobile.xn--uvws64b.com *.mta-sts.xn--uvws64b.com *.nav.xn--uvws64b.com *.news.xn--uvws64b.com *.portal.xn--uvws64b.com *.shop.xn--uvws64b.com *.store.xn--uvws64b.com *.vpn.xn--uvws64b.com *.wap.xn--uvws64b.com *.web.xn--uvws64b.com *.webdisk.xn--uvws64b.com *.webmail.xn--uvws64b.com *.www.xn--uvws64b.com xn--uvws64b.com *.xn--uvws64b.com