DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=shape-sf.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 04, 2026
Valid Until
August 02, 2026 51 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F0:3F:10:5C:1E:83:E7:90:2E:03:15:37:AE:9A:5B:DB:88:05:9B:38:E1:39:A5:3C:5E:31:9B:EC:DE:71:47:10
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
braisel.com *.braisel.com

Other domains in certificate

blogsupermovil-mexico.com *.blogsupermovil-mexico.com
boholbesttours.com *.boholbesttours.com
brk-i.com *.brk-i.com
bsv.one *.bsv.one
btbit.fun *.btbit.fun
budgetcasket.com *.budgetcasket.com
bwaresco.com *.bwaresco.com
chaste.blog *.chaste.blog
checkup.baby *.checkup.baby
citec-rdc.com *.citec-rdc.com
clashparadise.io *.clashparadise.io
clinicaldepressiontreatments.xyz *.clinicaldepressiontreatments.xyz
craftedkwads.com *.craftedkwads.com
custodiandomains.info *.custodiandomains.info
diladihokipol.xyz *.diladihokipol.xyz
millennialsmatter.org *.millennialsmatter.org
minerva-sewing.cz *.minerva-sewing.cz
*.alpha.paystaff.com.au *.api.paystaff.com.au *.beta.paystaff.com.au *.cpanel.paystaff.com.au *.db.paystaff.com.au *.dev.paystaff.com.au *.docs.paystaff.com.au *.ies.paystaff.com.au paystaff.com.au *.paystaff.com.au *.random.paystaff.com.au *.stage-api.paystaff.com.au *.task.paystaff.com.au *.tickets.paystaff.com.au *.training.paystaff.com.au *.webdisk.paystaff.com.au
puretop.org *.puretop.org
scaler.app *.scaler.app
shape-sf.com *.shape-sf.com
slot5ribuqris.com *.slot5ribuqris.com
stopthecensorship.org *.stopthecensorship.org
tattooremovalwashington.com *.tattooremovalwashington.com
tdcpay.com *.tdcpay.com
tech100awards.com *.tech100awards.com
tradingcards.tv *.tradingcards.tv
triumphessays.com *.triumphessays.com
tyancha6.net *.tyancha6.net
ucoae.com *.ucoae.com
ufc253live.com *.ufc253live.com
villamatik.club *.villamatik.club
volnacasinokz23.com *.volnacasinokz23.com
winslowpizza.co.uk *.winslowpizza.co.uk
x79p.cyou *.x79p.cyou
ycoae.com *.ycoae.com
zjksrsw.info *.zjksrsw.info