DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=honegoods.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
November 01, 2026
Valid Until
January 30, 2027 76 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
64:99:59:07:10:B7:B0:E1:F1:F2:37:2F:21:49:3A:AD:34:9C:44:E1:25:0B:FB:20:4D:E3:6A:EE:92:EE:8E:F3
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
virtualtoken.creditcard *.virtualtoken.creditcard *.api.virtualtoken.creditcard

Other domains in certificate

abrenendeg.com *.abrenendeg.com *.jobs.abrenendeg.com
alikes.it *.alikes.it *.api.alikes.it *.demo.alikes.it *.owa.alikes.it *.remote.alikes.it
ciberturista.com *.ciberturista.com *.dddd.ciberturista.com *.grecia.ciberturista.com *.lima.ciberturista.com *.milan.ciberturista.com *.roma.ciberturista.com
*.admin.digitale-stadt.com *.app.digitale-stadt.com digitale-stadt.com *.digitale-stadt.com *.dma.digitale-stadt.com *.emv1.digitale-stadt.com *.mx1.digitale-stadt.com *.notexistsadmin.digitale-stadt.com *.secure.digitale-stadt.com *.staging.digitale-stadt.com
digiversebd.com *.digiversebd.com *.ecommerce.digiversebd.com *.pay.digiversebd.com
*.api.efaxed.com *.app.efaxed.com efaxed.com *.efaxed.com *.login.efaxed.com
etraductor.com *.etraductor.com
expressbancoppel-blog.my *.expressbancoppel-blog.my
flyhub.cyou *.flyhub.cyou
*.ebay.honegoods.com honegoods.com *.honegoods.com *.ww38.honegoods.com
*.hostmaster.langit99a.online langit99a.online *.langit99a.online
*.backup.minicrociera.com *.boutique.minicrociera.com minicrociera.com *.minicrociera.com *.new.minicrociera.com *.sslvpn.minicrociera.com *.vpn2.minicrociera.com *.vpnssl.minicrociera.com
*.17.nbnresolving.org *.entx.nbnresolving.org nbnresolving.org *.nbnresolving.org
serverspares.au *.serverspares.au *.wildcard.serverspares.au *.ww38.serverspares.au
*.admin.signin-apple.co *.app.signin-apple.co *.coviz.signin-apple.co *.dev.signin-apple.co *.findmyiphone.signin-apple.co *.flowise.signin-apple.co *.icloud.signin-apple.co *.m.signin-apple.co *.portal.signin-apple.co signin-apple.co *.signin-apple.co *.staging.signin-apple.co *.test.signin-apple.co *.viz.signin-apple.co *.webdisk.signin-apple.co *.webmail.signin-apple.co *.ww38.signin-apple.co
*.mta-7.startprofitshere.com startprofitshere.com *.startprofitshere.com
*.hoptac.tca.asia tca.asia *.tca.asia