desec.io
At a glance
- Category
- Cloud & Hosting
- Language
- English
- Paid-content signal
- No paid content foundObserved
- Registered
- 2014
- Hosting
- Hetzner Online GmbHInferred
- HTTPS certificate trusted
- PassedObserved
- Last updated
Related questions
More questions →What is desec.io?
Does desec.io offer paid content?
What languages does desec.io support?
How can I visit desec.io?
What are some alternatives to desec.io?
Website Overview
An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Several search or sharing settings need attention. Together they may make snippets, preview images or preferred URLs less consistent across platforms.
Domain and Registration
Registered in 2014, this domain has about 11 years of history. That suggests continuity, although ownership and purpose may have changed. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses the common .io extension, which is not an independent safety signal.
DNS and Email
Nameservers are provided by desec.io, indicating managed DNS hosting. MX records point to the a4a.de email service. DNSSEC is enabled, allowing validating resolvers to authenticate signed DNS data. CAA records restrict which certificate authorities are authorized to issue certificates. No CNAME was found; the observed records resolve directly to addresses.
TLS and Certificates
The certificate uses an RSA 2048-bit public key, offering broad client compatibility. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.
HTTP and Browser Security
The response lacks these common security headers: Permissions-Policy. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. No obvious internal addresses or debug information were found in the headers. The Server header identifies nginx without an exact version. No explicit CDN or WAF marker was found in the response headers.
Technology Stack Analysis
The public page identifies nginx without precise versions, leaving fewer clues for version-specific scanning.
Search and Social Sharing
No homepage meta description was detected, leaving snippet selection more dependent on page text. No homepage canonical URL was detected. If duplicate URLs exist, consolidation may be less explicit. No Open Graph metadata was detected, so social previews may depend on platform inference. The title has 23 characters, within a common display range. The observed directives allow indexing and link following.
Hosting and Email
Registration details
| Registrar | 101domain GRS Limited |
|---|---|
| Registered | 2014-11-12 |
| Expires | 2035-11-12 |
| Domain status | clientTransferProhibited https://icann.org/epp#clientTransferProhibited、clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited |
| Nameservers | ns1.desec.io、ns2.desec.org |
| DNSSEC | signed |
DNS records
| Type | Name | Value | TTL | Priority |
|---|---|---|---|---|
| A | desec.io | 88.99.64.5 | 900 | — |
| AAAA | desec.io | 2a01:4f8:10a:1044:deec:642:ac10:80 | 900 | — |
| MX | desec.io | mail.a4a.de | 900 | 10 |
| NS | desec.io | ns1.desec.io | 300 | — |
| NS | desec.io | ns2.desec.org | 300 | — |
| TXT | desec.io | google-site-verification=_QJ4parq2J9DNC6Ha2PcC0oZE9oMVETq2LlYtFu7dWE | 900 | — |
| TXT | desec.io | google-site-verification=kHvNl9DPVIQMSbpPgc-j_hZrNTYFxgEcICtgtJaogXA | 900 | — |
| TXT | desec.io | v=spf1 a mx -all | 900 | — |
| CAA | desec.io | 128 iodef "mailto:[email protected]" | 300 | — |
| CAA | desec.io | 128 issue "letsencrypt.org;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/1909605" | 300 | — |
| DS | desec.io | 53307 13 2 3f6a815a28593ba6ff5a3e5da9b9af695d8f1022b7e0bda02793c53596da0944 | 3600 | — |
| DS | desec.io | 53307 13 4 156e3dfcceb69a9b2c4f1c769d9fe8558bfbcf5f0475aba5da5924a5f613c1be287529d8da5df773e573a2a08c69ab99 | 3600 | — |
| DMARC | _dmarc.desec.io | v=DMARC1; p=reject; pct=100; fo=1; ri=3600; rua=mailto:[email protected]; ruf=mailto:[email protected]; | 3600 | — |
TLS and certificates
HTTP response headers
| Header | Value |
|---|---|
| content-type | text/html |
| cache-control | no-cache |
| server | nginx |
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| content-security-policy | default-src 'self'; frame-src 'none'; connect-src 'self'; font-src 'self' data:; img-src 'self' data:; media-src data:; script-src 'self' 'unsafe-eval' 'sha256-MS6/3FCg4WjP9gwgaBGwLpRCY6fZBgwmhVCdrPrNf3E=' 'sha256-tQjf8gvb2ROOMapIxFvFAYBeUJ0v1HCbOcSmDNXGtDo=' 'sha256-VA8O2hAdooB288EpSTrGLl7z3QikbWU9wwoebO/QaYk=' 'sha256-+5XkZFazzJo8n0iOP4ti/cLCMUudTf//Mzkb7xNPXIc='; style-src 'self' 'unsafe-inline'; base-uri 'self'; frame-ancestors 'none'; block-all-mixed-content; form-action 'none'; |
| x-frame-options | deny |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
Identified technologies
Pages, Search and Sharing
| Meta description | Not detected |
|---|---|
| Canonical URL | Not detected |
| Language | English (default) |
| Twitter Card | Not detected |
Unknown
robots.txt (opens in a new tab)
1 rulesAll bots 0 allowed · 1 disallowed
- Disallow
/api/
No matching rules.
Sitemaps
0No sitemaps found
User reviews (0)