DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=southern-cross-group.org
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 17, 2026
Valid Until
May 18, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
23:DE:B8:83:6F:2B:9E:71:3E:16:A9:6D:D5:B4:50:7A:BF:D2:12:34:20:59:74:53:7B:F3:B8:11:E5:B9:6F:33
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
carvend.io *.carvend.io *.ww25.carvend.io

Other domains in certificate

arabby.co *.arabby.co
*.3efaae45-4c40-4446-9a0d-41f775268a5a.baghub.us *.admin.baghub.us *.app.baghub.us baghub.us *.baghub.us *.intranet.baghub.us *.lqzmasite.baghub.us *.portal.baghub.us *.public.baghub.us *.site.baghub.us *.staging.baghub.us *.test.baghub.us *.wiki.baghub.us *.www.baghub.us
*.api.baji666.club *.app.baji666.club baji666.club *.baji666.club *.portal.baji666.club *.shop.baji666.club *.store.baji666.club
berryto.store *.berryto.store *.whatsapp.berryto.store
brand-master.me *.brand-master.me
glennbecktv.com *.glennbecktv.com
gozbebegimanaokulu.com *.gozbebegimanaokulu.com *.gunesholiday.gozbebegimanaokulu.com *.kokuludusler.gozbebegimanaokulu.com *.serapdoganyigit.gozbebegimanaokulu.com
knitwear.website *.knitwear.website
lectormiau.co *.lectormiau.co *.ww38.lectormiau.co
noonootv30.store *.noonootv30.store
oggifiga.com *.oggifiga.com
pgplay24h.net *.pgplay24h.net *.sitemaps.pgplay24h.net
*.bk.popularusa.online popularusa.online *.popularusa.online
*.analytic.pseudonums.com *.backend.pseudonums.com *.beta.pseudonums.com *.f6a7146a-4c96-4a32-b9e7-08f4692237f8.pseudonums.com *.new.pseudonums.com pseudonums.com *.pseudonums.com *.shop.pseudonums.com *.stats.pseudonums.com *.temp.pseudonums.com *.vpn.pseudonums.com
*.cpanel.quakaroniiodealzone.shop quakaroniiodealzone.shop *.quakaroniiodealzone.shop
satyaki.co *.satyaki.co
*.backend.sofome.it sofome.it *.sofome.it
*.blog.southern-cross-group.org southern-cross-group.org *.southern-cross-group.org
*.sitemap.thattutor.com *.sitemaps.thattutor.com thattutor.com *.thattutor.com *.ww1.thattutor.com *.ww38.thattutor.com
tradegold.online *.tradegold.online
*.login.tvzota100.com tvzota100.com *.tvzota100.com *.www.tvzota100.com
weket.store *.weket.store