DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=thirstythursday.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 09, 2026
Valid Until
May 10, 2026 86 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BC:48:C7:7A:85:BE:CF:AE:71:F5:63:1E:08:0F:90:AA:5D:58:83:C6:1E:2A:21:7A:D0:17:94:FF:DC:95:65:4A
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
antidust.com *.antidust.com *.beta.antidust.com *.blog.antidust.com *.mta-sts.antidust.com *.random.antidust.com *.ww25.antidust.com

Other domains in certificate

ad1d.com *.ad1d.com *.admin.ad1d.com
advantageonebrokers.com *.advantageonebrokers.com *.advantageonebrokersstaging.advantageonebrokers.com *.app.advantageonebrokers.com *.mail.advantageonebrokers.com
aladindvd.com *.aladindvd.com
*.api.bigcyprus.com bigcyprus.com *.bigcyprus.com *.classifieds.bigcyprus.com *.explorer.bigcyprus.com *.learn.bigcyprus.com *.m.bigcyprus.com *.mail.bigcyprus.com *.msoid.bigcyprus.com *.smtp.bigcyprus.com *.ww38.bigcyprus.com *.ww41.bigcyprus.com *.www.bigcyprus.com *.yes5bl1rd3ni81c5.bigcyprus.com
bitbuket.org *.bitbuket.org
chicagowineshops.com *.chicagowineshops.com *.mailer.chicagowineshops.com *.marketing.chicagowineshops.com *.uat.chicagowineshops.com
driverfriendlycarinsurance.com *.driverfriendlycarinsurance.com
fednews-online.com *.fednews-online.com
genesis-lefilm.com *.genesis-lefilm.com
*.backend.ilregistro.it *.hostmaster.ilregistro.it ilregistro.it *.ilregistro.it
justicemikeburke.com *.justicemikeburke.com
*.demo.lampadesolari.it lampadesolari.it *.lampadesolari.it
loveaslaughter.net *.loveaslaughter.net
m88-m88.icu *.m88-m88.icu *.mail.m88-m88.icu
*.05e06b57-ca2c-4d10-a1af-e796ef4ee1c8.milliwatt.games *.app.milliwatt.games *.mail.milliwatt.games milliwatt.games *.milliwatt.games
mycarlocal.com *.mycarlocal.com *.ww25.mycarlocal.com
rockwell.au *.rockwell.au *.ww17.rockwell.au
*.blog.schilddruesenselbsthilfe.de *.random.schilddruesenselbsthilfe.de schilddruesenselbsthilfe.de *.schilddruesenselbsthilfe.de
scholarships911.org *.scholarships911.org
tfr.us *.tfr.us
thirstythursday.com *.thirstythursday.com
*.hostmaster.turfgro.net *.m.turfgro.net turfgro.net *.turfgro.net *.ww16.turfgro.net *.ww17.turfgro.net *.ww25.turfgro.net
wpgeeks.au *.wpgeeks.au