DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=iessantisimatrinidad.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
May 31, 2026
Valid Until
August 29, 2026 68 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1F:3A:25:22:8F:B8:94:8C:C2:2D:52:6C:EE:E2:F1:7F:A8:32:69:56:20:36:AA:7A:18:31:71:BE:CF:0C:19:FD
Alternative Names
81 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

81 domains
cbrdb.com *.cbrdb.com *.analytics.cbrdb.com *.app.cbrdb.com *.hostmaster.cbrdb.com *.mail.cbrdb.com *.www.cbrdb.com

Other domains in certificate

17haoche.com *.17haoche.com *.2ptph3.17haoche.com *.fde9ex.17haoche.com *.huoban.17haoche.com *.n3jzv4.17haoche.com *.www.17haoche.com *.zth.17haoche.com
agtechdeals.com *.agtechdeals.com *.autodiscover.agtechdeals.com *.hostmaster.agtechdeals.com *.webmail.agtechdeals.com *.www.agtechdeals.com
brainybotrentals.com *.brainybotrentals.com *.sitemap.brainybotrentals.com
hackingandpatterson.co.uk *.hackingandpatterson.co.uk *.myaccount.hackingandpatterson.co.uk
iessantisimatrinidad.com *.iessantisimatrinidad.com
imagineball.org *.imagineball.org
infinitxxx.com *.infinitxxx.com
infinityc.xyz *.infinityc.xyz *.revenda.infinityc.xyz *.tim.infinityc.xyz *.ww16.infinityc.xyz
iperustore.com *.iperustore.com
journeyvaluenetwork.live *.journeyvaluenetwork.live
*.meine.nuernbeger.de nuernbeger.de *.nuernbeger.de
*.admin.picciolini.it *.correo.picciolini.it *.correu.picciolini.it *.email.picciolini.it *.ex02.picciolini.it *.imap.picciolini.it *.metric.picciolini.it *.msexch2k13.picciolini.it *.mx.picciolini.it *.mymail.picciolini.it *.owa.picciolini.it picciolini.it *.picciolini.it *.rdweb.picciolini.it *.smail.picciolini.it *.staging.picciolini.it *.webmail.picciolini.it
*.hostmaster.quickhawk.com *.m.quickhawk.com quickhawk.com *.quickhawk.com
russianhill.net *.russianhill.net *.wsjyxuzh.russianhill.net
*.2fala.talk.cm *.com.talk.cm talk.cm *.talk.cm *.ww25.talk.cm
*.m.xn--e1abhtb4eq.com *.mail.xn--e1abhtb4eq.com *.random.xn--e1abhtb4eq.com xn--e1abhtb4eq.com *.xn--e1abhtb4eq.com
zuncjun1170.vip *.zuncjun1170.vip