DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=getaxxx.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 10, 2026
Valid Until
April 10, 2026 44 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7E:34:0F:E3:EE:C5:9D:31:4F:EF:06:E6:86:C6:62:91:94:B5:69:D0:8B:B6:BD:56:F6:07:AC:DA:13:E2:C1:38
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
ativismo.com *.ativismo.com *.bell.ativismo.com *.images.ativismo.com *.m.ativismo.com *.rustore.ativismo.com *.test.ativismo.com *.ww16.ativismo.com *.ww25.ativismo.com *.ww38.ativismo.com

Other domains in certificate

asaadi.com *.asaadi.com *.sharepoint.asaadi.com *.smtp.asaadi.com
*.ba.cascaderange.top cascaderange.top *.cascaderange.top *.daotop2.cascaderange.top *.qltuh.cascaderange.top *.sc.cascaderange.top
cetab.xyz *.cetab.xyz *.ww25.cetab.xyz *.ww38.cetab.xyz
*.dan.foodoutpost.com foodoutpost.com *.foodoutpost.com *.hostmaster.foodoutpost.com
*.cpcontacts.freedomday.com.au freedomday.com.au *.freedomday.com.au *.integration.freedomday.com.au *.ww16.freedomday.com.au *.ww25.freedomday.com.au *.ww38.freedomday.com.au
getaxxx.com *.getaxxx.com *.server.getaxxx.com
hubee.io *.hubee.io *.www.hubee.io
*.ipv6.newtreasuregarden.co.uk newtreasuregarden.co.uk *.newtreasuregarden.co.uk *.webapp-appl-confirm12322.newtreasuregarden.co.uk
*.app.novashop.me novashop.me *.novashop.me *.ww25.novashop.me
*.8484b471-edf3-4381-9cd1-7bda4bed98cc.raldux.tech *.a.raldux.tech *.ad.raldux.tech *.adblock.raldux.tech *.adguard.raldux.tech *.adguard01.raldux.tech *.agh.raldux.tech *.api.raldux.tech *.app.raldux.tech *.ci.raldux.tech *.dev.raldux.tech *.dns.raldux.tech *.dns1.raldux.tech *.doh.raldux.tech *.doh1.raldux.tech *.home.raldux.tech *.integration-jenkins.raldux.tech *.news.raldux.tech *.ns.raldux.tech *.pipeline.raldux.tech raldux.tech *.raldux.tech *.resolver.raldux.tech *.resolver1.raldux.tech *.www.raldux.tech
s-tenkuu.com *.s-tenkuu.com *.ww38.s-tenkuu.com
*.api.stepsister.life stepsister.life *.stepsister.life
*.r.vjn998.top vjn998.top *.vjn998.top *.www.vjn998.top
*.350.yeezysuply.com *.random.yeezysuply.com *.ww38.yeezysuply.com *.ww8.yeezysuply.com yeezysuply.com *.yeezysuply.com