DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=braz.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 02, 2026
Valid Until
July 01, 2026 50 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5F:88:6A:A7:54:73:A3:BD:36:A3:9E:28:15:0F:25:18:D3:DF:8C:D2:92:BC:F6:4A:95:CB:4E:71:1B:6F:7A:6F
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
braz.com *.braz.com *.analigia.braz.com *.andrea.braz.com *.barbie.braz.com *.critina.braz.com *.di.braz.com *.ind.braz.com *.paulo.braz.com *.pop.braz.com *.samridhi.braz.com *.stepsister.braz.com *.ww20.braz.com *.x.braz.com *.xinli.braz.com *.xnxx.braz.com *.xx.braz.com *.xxx.braz.com *.xxxxx.braz.com *.zz.braz.com

Other domains in certificate

404jpl.cc *.404jpl.cc
a-btc.com *.a-btc.com
aaama.com *.aaama.com *.nullmx.aaama.com
cutu.ca *.cutu.ca *.mail.cutu.ca *.mostra.cutu.ca *.ns1.cutu.ca *.ns2.cutu.ca
elb.au *.elb.au
filteredwater.au *.filteredwater.au
*.ffffffffffff.godsdirectcontact.com godsdirectcontact.com *.godsdirectcontact.com *.random.godsdirectcontact.com
*.any.iny.de *.caar.iny.de *.famadiana.iny.de iny.de *.iny.de *.manaraka.iny.de *.nifamaly.iny.de *.oa.iny.de *.pierre.iny.de *.tany.iny.de *.tuf.iny.de
jackintheboxinternships.com *.jackintheboxinternships.com *.ww25.jackintheboxinternships.com
leesburg-bridal.com *.leesburg-bridal.com *.ww38.leesburg-bridal.com
*.agent.legpuzzels.net legpuzzels.net *.legpuzzels.net *.ww38.legpuzzels.net
*.branch.mdiindiaonline.com mdiindiaonline.com *.mdiindiaonline.com *.ww25.mdiindiaonline.com
palmarflexion.de *.palmarflexion.de
remedies.au *.remedies.au *.ww25.remedies.au *.ww38.remedies.au
*.hostmaster.ryba.it ryba.it *.ryba.it
*.7f62252d-f1b5-466b-bb3a-fd1a8ab43eb5.typig.club *.smar.typig.club typig.club *.typig.club
ustraveldocs.de *.ustraveldocs.de *.ww38.ustraveldocs.de *.wwww.ustraveldocs.de
util.au *.util.au
webchats.com *.webchats.com
*.clearlawww16.xn--gebrauchte-schlpfer-kbc.de xn--gebrauchte-schlpfer-kbc.de *.xn--gebrauchte-schlpfer-kbc.de