DNS Gurus
Cached · just now
93/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 2
Let's Encrypt logo Let's Encrypt Cloudflare Turnstile logo Cloudflare Turnstile

Certificate Information

Subject
CN=candapharmacy.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 12, 2026
Valid Until
December 11, 2026 30 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
2C:AE:66:53:AF:0D:B2:9B:60:95:E1:AD:F3:28:B7:B6:E0:CF:BA:15:E1:16:47:D9:3F:A4:2F:08:48:2A:96:25
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Excellent
max-age=31536000; includeSubDomains; preload
Content-Security-Policy
Cloudflare Turnstile logo
Basic
default-src; script-src; script-src-attr; +8 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
same-origin
Permissions-Policy
Present
accelerometer=(), camera=(), clipboard-read=(); +13 more
Recommendations
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
bnye.shop *.bnye.shop *.206a7d700425.bnye.shop *.ww25.bnye.shop

Other domains in certificate

candapharmacy.com *.candapharmacy.com
*.analytics.donnliston.co *.customer.donnliston.co donnliston.co *.donnliston.co *.marketing.donnliston.co *.pay.donnliston.co *.ph.donnliston.co *.relationships.donnliston.co
*.api.feijoas.com *.backup.feijoas.com *.beta.feijoas.com *.dev.feijoas.com feijoas.com *.feijoas.com *.mail.feijoas.com *.test.feijoas.com *.ww25.feijoas.com
*.access.halbrook.com *.alpha.halbrook.com *.anyconnect.halbrook.com *.apps.halbrook.com *.gateway.halbrook.com halbrook.com *.halbrook.com *.hostmaster.halbrook.com *.m.halbrook.com *.pma.halbrook.com *.rdp.halbrook.com *.rds.halbrook.com *.rdweb.halbrook.com *.returns.halbrook.com *.sitemaps.halbrook.com *.vpn.halbrook.com *.webmail.halbrook.com *.webvpn.halbrook.com *.ww1.halbrook.com *.ww16.halbrook.com *.ww17.halbrook.com *.ww25.halbrook.com *.ww38.halbrook.com *.ww5.halbrook.com
hiketorres.com *.hiketorres.com
*.admin.londonshortlet.com *.app.londonshortlet.com *.assets.londonshortlet.com *.blog.londonshortlet.com *.com.londonshortlet.com *.crm.londonshortlet.com *.dev.londonshortlet.com *.development.londonshortlet.com *.hostmaster.londonshortlet.com *.login.londonshortlet.com londonshortlet.com *.londonshortlet.com *.m.londonshortlet.com *.mail.londonshortlet.com *.portail.londonshortlet.com *.shop.londonshortlet.com *.sitemap.londonshortlet.com *.sitemaps.londonshortlet.com *.staging.londonshortlet.com
myfoodchart.com *.myfoodchart.com *.portal.myfoodchart.com *.rdp.myfoodchart.com *.sitemaps.myfoodchart.com *.ww25.myfoodchart.com
*.hostmaster.saatchart.com *.new.saatchart.com saatchart.com *.saatchart.com *.w1.saatchart.com *.ww25.saatchart.com
*.analytics.securityapps.biz *.bi-beta.securityapps.biz *.dash.securityapps.biz *.kafka-integration.securityapps.biz *.preprod.securityapps.biz *.production-dashboard.securityapps.biz securityapps.biz *.securityapps.biz *.test.securityapps.biz *.ww25.securityapps.biz