DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=calmadvantage.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
May 29, 2026
Valid Until
August 27, 2026 78 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BB:8D:A4:08:97:DA:D7:11:5E:58:E0:FC:5B:DB:DE:CE:6F:78:07:DB:02:07:AE:F3:03:79:47:97:DC:7D:20:D0
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
uknobull.com *.uknobull.com

Other domains in certificate

calmadvantage.com *.calmadvantage.com
captainspick.com *.captainspick.com
chco.tv *.chco.tv
clearviewnetwork.sbs *.clearviewnetwork.sbs
creabittycreatine.com *.creabittycreatine.com
credithuman-02signin.com *.credithuman-02signin.com
credithuman-02user.com *.credithuman-02user.com
credoramarket.com *.credoramarket.com
crisps.info *.crisps.info
cryptokanobi.com *.cryptokanobi.com
crystal31.com *.crystal31.com
cykaaa-cazino.sbs *.cykaaa-cazino.sbs
ditnhau18.com *.ditnhau18.com
dtjt8.xyz *.dtjt8.xyz
flipfloptaco.com *.flipfloptaco.com *.vpn.flipfloptaco.com
fujirico.com *.fujirico.com *.vpn.fujirico.com
growthpathgo.com *.growthpathgo.com
gzsuoliang.cn *.gzsuoliang.cn
hboihc.cc *.hboihc.cc
heaion.com *.heaion.com
healthcare-practice-software.click *.healthcare-practice-software.click
hh7q1fzcudkx.com *.hh7q1fzcudkx.com
indianknights.com *.indianknights.com
infslot.com *.infslot.com *.vpn.infslot.com
invite.forum *.invite.forum
jpds4.bond *.jpds4.bond
piknicelectronik.cl *.piknicelectronik.cl
privateactingcoaching.com *.privateactingcoaching.com
rakomusine.sbs *.rakomusine.sbs
rbjjf.gdn *.rbjjf.gdn
rjtefp.cyou *.rjtefp.cyou
sahafoundationtrust.com *.sahafoundationtrust.com
sahsuahuyq7y.sbs *.sahsuahuyq7y.sbs
selfaq.com *.selfaq.com
shmaroc.com *.shmaroc.com
spanish21tournament.com *.spanish21tournament.com
ss520woni.cc *.ss520woni.cc
survysdm.com *.survysdm.com
ttamjs.loan *.ttamjs.loan
ufp72qazgh1v.com *.ufp72qazgh1v.com
voltivia.info *.voltivia.info
vortexwarrior626.shop *.vortexwarrior626.shop