DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=hasselblad.co
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 10, 2026
Valid Until
January 08, 2027 78 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
29:4A:50:9F:BB:38:9F:0D:25:86:98:F4:AE:E4:41:48:27:D0:30:D9:2A:BD:CD:93:9C:64:65:D4:9E:51:1E:80
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
amad.it *.amad.it *.analytics.amad.it *.authsmtp.amad.it *.autoconfig.amad.it *.aws.amad.it *.chart.amad.it *.imap4.amad.it *.intel.amad.it *.mail.amad.it *.mta-sts.amad.it *.rd.amad.it *.redash.amad.it *.remote.amad.it *.reporting.amad.it *.smtp.amad.it *.stats.amad.it *.superset.amad.it *.supersets.amad.it *.visual.amad.it

Other domains in certificate

comparecontrastandconfer.com *.comparecontrastandconfer.com *.static.comparecontrastandconfer.com *.support.comparecontrastandconfer.com
*.437.githubuserconten.com *.actions.githubuserconten.com *.camo.githubuserconten.com *.github.githubuserconten.com githubuserconten.com *.githubuserconten.com *.githubusercontent.githubuserconten.com *.media.githubuserconten.com *.raw.githubuserconten.com *.release-assets.githubuserconten.com *.ww17.githubuserconten.com
hasselblad.co *.hasselblad.co *.store.hasselblad.co *.ww25.hasselblad.co
koyosha.com.cn *.koyosha.com.cn *.masosmdeod.koyosha.com.cn *.myjaacsseb.koyosha.com.cn
*.apps.leonardoleao.online *.gnin.leonardoleao.online leonardoleao.online *.leonardoleao.online *.web2.leonardoleao.online
*.59.ospital.com *.bombayhospital.ospital.com *.kj-h.ospital.com *.mental.ospital.com *.no.ospital.com *.nu.ospital.com ospital.com *.ospital.com *.primayahoo.ospital.com *.relay1g.ospital.com *.sunrisehospital.ospital.com *.website.ospital.com *.ww16.ospital.com
*.app.padovane.it *.dev.padovane.it *.padovacuktura.padovane.it *.padovacultura.padovane.it padovane.it *.padovane.it
*.paca-achats.placebymake.org placebymake.org *.placebymake.org
*.api.sarahwindsor.com *.marketing.sarahwindsor.com sarahwindsor.com *.sarahwindsor.com *.uat.sarahwindsor.com
*.oxveg.veggroup.org *.saveggies.veggroup.org *.t3v.veggroup.org *.ups.veggroup.org veggroup.org *.veggroup.org
*.ok.xzokzyzy.com *.okxxxxzy.xzokzyzy.com *.okxxzy.xzokzyzy.com *.okxzy.xzokzyzy.com *.okzy.xzokzyzy.com *.ww38.xzokzyzy.com *.ww5.xzokzyzy.com xzokzyzy.com *.xzokzyzy.com