DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=virgi.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 14, 2026
Valid Until
May 15, 2026 80 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E2:D7:B7:40:6A:6A:1F:2C:69:99:71:A6:53:26:9B:C9:7C:BA:15:C9:4F:80:67:CC:10:0B:6C:99:96:7C:5D:93
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
bestlink.it *.bestlink.it *.mx.bestlink.it

Other domains in certificate

amgpipelinefast.com *.amgpipelinefast.com *.api.amgpipelinefast.com *.hostmaster.amgpipelinefast.com *.intranet.amgpipelinefast.com *.rd.amgpipelinefast.com *.rds.amgpipelinefast.com *.servizi.amgpipelinefast.com *.staging.amgpipelinefast.com *.vpn.amgpipelinefast.com *.yfaskqlm.amgpipelinefast.com
bakcleacn.com *.bakcleacn.com *.ww25.bakcleacn.com
bankratw.com *.bankratw.com *.blog.bankratw.com *.hostmaster.bankratw.com *.ww7.bankratw.com *.www.bankratw.com
calmvandira.tech *.calmvandira.tech *.store.calmvandira.tech
dota.sk *.dota.sk *.pbcomp.dota.sk *.ww16.dota.sk *.ww45.dota.sk *.www.dota.sk
elmoerc.vip *.elmoerc.vip
*.download.fastinter.net fastinter.net *.fastinter.net
fullnet.it *.fullnet.it *.mx.fullnet.it
kottarakara.com *.kottarakara.com *.m.kottarakara.com *.sitemap.kottarakara.com *.ww1.kottarakara.com *.ww25.kottarakara.com *.ww37.kottarakara.com *.ww5.kottarakara.com *.www.kottarakara.com
*.hostmaster.labeyewear.com labeyewear.com *.labeyewear.com *.mx.labeyewear.com
*.brutus.ledlighters.com *.demo.ledlighters.com *.dmz.ledlighters.com *.dns4.ledlighters.com *.domains.ledlighters.com *.fr.ledlighters.com *.horus.ledlighters.com ledlighters.com *.ledlighters.com *.lp2.ledlighters.com *.static.ledlighters.com *.webmail.ledlighters.com
*.do.mice.live mice.live *.mice.live
mysoccerplace.com *.mysoccerplace.com *.ww25.mysoccerplace.com *.ww38.mysoccerplace.com
*.admin.slsmortagesettlement.com *.api.slsmortagesettlement.com *.app.slsmortagesettlement.com *.intranet.slsmortagesettlement.com *.portal.slsmortagesettlement.com *.shop.slsmortagesettlement.com slsmortagesettlement.com *.slsmortagesettlement.com *.store.slsmortagesettlement.com *.ww38.slsmortagesettlement.com *.www.slsmortagesettlement.com
*.citrix.virgi.it virgi.it *.virgi.it
www-posteo.de *.www-posteo.de