DNS Gurus
Cached · just now
79/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=ordem.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 18, 2026
Valid Until
May 19, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
04:43:EE:89:25:15:17:A6:BE:30:CD:F7:37:66:FD:47:57:2E:80:BB:A4:35:76:E9:6B:FD:32:09:29:05:32:A6
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
drmarktodd.com *.drmarktodd.com

Other domains in certificate

akazimurwanda.com *.akazimurwanda.com *.webmail.akazimurwanda.com
*.1b96258d-ea17-49b9-84fe-c5052940f590.andrewmacnaughtan.net andrewmacnaughtan.net *.andrewmacnaughtan.net
e8eegu.top *.e8eegu.top
elegantweddingspectacle.beauty *.elegantweddingspectacle.beauty
eslotcarat.cfd *.eslotcarat.cfd
esportebets.bet *.esportebets.bet
extrafancy.com.au *.extrafancy.com.au *.random.extrafancy.com.au *.ww25.extrafancy.com.au
fantasyhattrickin.com *.fantasyhattrickin.com
fantasyinningsin.com *.fantasyinningsin.com
fanvip.bet *.fanvip.bet
*.admin.farebio.it *.checkout.farebio.it *.dashboards.farebio.it farebio.it *.farebio.it *.metric.farebio.it *.reporting.farebio.it
fhv75.top *.fhv75.top
gpt0000.xyz *.gpt0000.xyz *.ww25.gpt0000.xyz *.ww38.gpt0000.xyz
horace.life *.horace.life *.www.horace.life
kbm7813.cc *.kbm7813.cc
keysreedsprotop.com *.keysreedsprotop.com
ksaegi.pro *.ksaegi.pro
londonblinds.au *.londonblinds.au
*.cpcontacts.nativity-stone.com *.m.nativity-stone.com nativity-stone.com *.nativity-stone.com
*.b8e19a2453d4.nikeairmoremoney.us *.blog118.nikeairmoremoney.us *.blog21.nikeairmoremoney.us nikeairmoremoney.us *.nikeairmoremoney.us *.www.nikeairmoremoney.us
*.dev.ntj.it ntj.it *.ntj.it
*.admin.ordem.it *.backend.ordem.it ordem.it *.ordem.it
preacherblogs.com *.preacherblogs.com
*.hostmaster.tawasoul.com *.m.tawasoul.com *.random.tawasoul.com tawasoul.com *.tawasoul.com *.ww16.tawasoul.com *.ww25.tawasoul.com
*.m.veettil.com *.sitemaps.veettil.com veettil.com *.veettil.com
*.analytic.y2kculture.com *.argo.y2kculture.com *.backend.y2kculture.com *.dashboard.y2kculture.com *.report.y2kculture.com *.superset.y2kculture.com *.wildcard.y2kculture.com y2kculture.com *.y2kculture.com