DNS Gurus
Cached · just now
98/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 8
PayPal logo PayPal Shields.io logo Shields.io YouTube logo YouTube Cloudflare Turnstile logo Cloudflare Turnstile ForwardEmail logo ForwardEmail GitHub logo GitHub noembed logo noembed Sectigo logo Sectigo

Certificate Information

Subject
CN=*.forwardemail.net
Issuer
C=GB, O=Sectigo Limited, CN=Sectigo Public Server Authentication CA DV R36
Valid From
July 06, 2026
Valid Until
January 20, 2027 175 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BF:43:7B:C1:97:4E:ED:DE:32:BB:60:C2:F6:00:6B:0B:6E:E0:23:26:ED:16:BE:4A:D7:D1:F7:94:8B:1E:43:2A
Alternative Names
2 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31557600; includeSubDomains; preload
Content-Security-Policy
YouTube logo
Good
default-src; connect-src; font-src; +9 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Present
accelerometer=(), ambient-light-sensor=(), autoplay=(); +31 more
Recommendations
  • • Strengthen CSP by removing 'unsafe-eval'

CAA Records (Certificate Authority Authorization)

CAA Records
Configured (Restricts certificate issuance)
Current Issuer
Authorized (Matches CAA policy)
Authorized CAs
amazon.com amazonaws.com amazontrust.com awstrust.com comodoca.com digicert.com ; cansignhttpexchanges=yes letsencrypt.org pki.goog ; cansignhttpexchanges=yes sectigo.com ; cansignhttpexchanges=yes ssl.com
Wildcard CAs
digicert.com ; cansignhttpexchanges=yes letsencrypt.org pki.goog ; cansignhttpexchanges=yes sectigo.com ; cansignhttpexchanges=yes ssl.com comodoca.com
Incident Reporting
Recommendations
  • • Consider using critical flag (flags=128) for stricter CAA enforcement
  • • You have authorized 10 CAs - consider limiting to only the CAs you actively use

Subject Alternative Names

2 domains
forwardemail.net *.forwardemail.net