DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=amthembluecross.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
March 20, 2026
Valid Until
June 18, 2026 43 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
70:44:39:F3:A4:CB:63:F0:E1:FD:EC:F0:F5:68:6C:B3:FE:B5:31:6E:36:4A:50:94:44:5F:3C:88:D0:C2:0F:61
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
mig.es *.mig.es *.cpanel.mig.es *.fototeca.mig.es *.redpol.mig.es *.webmail.mig.es

Other domains in certificate

*.admin.amthembluecross.com amthembluecross.com *.amthembluecross.com *.hostmaster.amthembluecross.com *.www1.amthembluecross.com
bequer.com *.bequer.com *.store.bequer.com *.wiki.bequer.com *.ww16.bequer.com *.ww38.bequer.com
*.com.domovies.world *.cpanel.domovies.world *.cpcalendars.domovies.world *.cpcontacts.domovies.world domovies.world *.domovies.world *.domoviesch.domovies.world *.domoviesco.domovies.world *.domovieseu.domovies.world *.domoviesfun.domovies.world *.domoviesin.domovies.world *.domoviesli.domovies.world *.domovieslife.domovies.world *.domoviesonline.domovies.world *.domoviesorg.domovies.world *.domoviesse.domovies.world *.domovieswatch.domovies.world *.domoviesxyz.domovies.world *.download.domovies.world *.hostmaster.domovies.world *.mail.domovies.world *.today.domovies.world *.webdisk.domovies.world *.webmail.domovies.world *.www.domovies.world
fashu.de *.fashu.de *.mailert6k.fashu.de *.pay.fashu.de *.www.fashu.de
*.galleries.icloub.com *.gateway.icloub.com icloub.com *.icloub.com *.m.icloub.com *.mail.icloub.com *.rustore.icloub.com *.ww25.icloub.com
*.am.inviting.my inviting.my *.inviting.my
mpactfirst.co *.mpactfirst.co
namibia2go.co *.namibia2go.co
skigelende.com *.skigelende.com *.ww7.skigelende.com
tellyupdates.click *.tellyupdates.click
*.com.totallylargeshoes.co.uk totallylargeshoes.co.uk *.totallylargeshoes.co.uk
*.admin.trasnet.co.za *.flfrdstg.trasnet.co.za *.intranet.trasnet.co.za *.login.trasnet.co.za *.members.trasnet.co.za *.newsletter.trasnet.co.za *.old.trasnet.co.za *.owa.trasnet.co.za *.portal.trasnet.co.za *.procure.trasnet.co.za *.qa.trasnet.co.za *.secure.trasnet.co.za *.shop.trasnet.co.za *.store.trasnet.co.za trasnet.co.za *.trasnet.co.za *.webmail.trasnet.co.za *.ww1.trasnet.co.za *.ww25.trasnet.co.za *.www.trasnet.co.za