DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=netgear.cm
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
March 19, 2026
Valid Until
June 17, 2026 63 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
46:9D:45:BA:A6:DA:7C:C1:04:F6:E9:BF:D9:A5:6B:61:99:80:C7:62:7E:CE:CD:FD:17:23:74:9B:D8:DE:10:3D
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
nhloutlet9.shop *.nhloutlet9.shop *.demo.nhloutlet9.shop *.dev.nhloutlet9.shop *.external.nhloutlet9.shop *.hostmaster.nhloutlet9.shop

Other domains in certificate

4042308.one *.4042308.one *.ww38.4042308.one
arietisdatasettlements.com *.arietisdatasettlements.com *.wp.arietisdatasettlements.com
easygermanschool.com *.easygermanschool.com
*.blog.fanfury.xyz fanfury.xyz *.fanfury.xyz *.link.fanfury.xyz *.web.fanfury.xyz *.wp-dev.fanfury.xyz *.ww25.fanfury.xyz
i8fun.bet *.i8fun.bet *.mou7y.i8fun.bet *.new.i8fun.bet *.yhjj3.i8fun.bet
karencruddenpelvichealth.com *.karencruddenpelvichealth.com *.ww25.karencruddenpelvichealth.com
kepo.life *.kepo.life *.life.kepo.life *.test.kepo.life *.ww38.kepo.life
languagelearningbooks.info *.languagelearningbooks.info
link-alternatif-medantoto.live *.link-alternatif-medantoto.live
linkstream1.com *.linkstream1.com *.www.linkstream1.com
*.downloads.netgear.cm *.insight.netgear.cm *.io.netgear.cm *.jp.netgear.cm netgear.cm *.netgear.cm *.support.netgear.cm *.wildcard.netgear.cm *.ww25.netgear.cm
pinoy1tv.channel *.pinoy1tv.channel
plotsbykarnigroup.info *.plotsbykarnigroup.info *.ww25.plotsbykarnigroup.info *.ww38.plotsbykarnigroup.info
*.email.pv.net.au *.hostmaster.pv.net.au pv.net.au *.pv.net.au
*.dan.rapidpunch.com rapidpunch.com *.rapidpunch.com *.sitemaps.rapidpunch.com *.www.rapidpunch.com
*.apps.resoluteingp.com resoluteingp.com *.resoluteingp.com
sellyourmobilephone.co.uk *.sellyourmobilephone.co.uk
skiing.eu.org *.skiing.eu.org
ttcode.site *.ttcode.site *.ww17.ttcode.site
ukmysteryshopper.co.uk *.ukmysteryshopper.co.uk
verifysformshere.com *.verifysformshere.com *.ww25.verifysformshere.com *.ww38.verifysformshere.com
*.app.wwwork.shop *.home.wwwork.shop *.sitemap.wwwork.shop *.ww25.wwwork.shop *.ww38.wwwork.shop *.www.wwwork.shop wwwork.shop *.wwwork.shop