DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=bw357.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 21, 2026
Valid Until
May 22, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3B:0E:36:F4:66:D2:84:07:B7:06:23:F0:0C:2A:56:CC:9B:09:96:44:1C:72:A3:F1:75:F7:65:39:B0:7F:90:4C
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
settle.link *.settle.link *.admin.settle.link *.api.settle.link *.app.settle.link *.b750c5ca-80bc-4e22-b7f2-6acfdb1173ba.settle.link *.cnjhqzvd.settle.link *.cpyvfdtb.settle.link *.demo.settle.link *.dev.settle.link *.ehskndcl.settle.link *.elvcgjxb.settle.link *.exdfnmiz.settle.link *.ezvlncpr.settle.link *.fnlvwzqm.settle.link *.fxhmbnjp.settle.link *.hostmaster.settle.link *.ihywqzge.settle.link *.jaghouye.settle.link *.jbdgeqpa.settle.link *.jgudwbcz.settle.link *.keqxawfd.settle.link *.klbipyjd.settle.link *.kueomzkayehlq.settle.link *.lfdemjoh.settle.link *.lvyasjze.settle.link *.lwfxvton.settle.link *.mbpzvcok.settle.link *.members.settle.link *.mhotfcbx.settle.link *.mrbukhzv.settle.link *.nmlsqxei.settle.link *.nzhovbws.settle.link *.pckloswf.settle.link *.pgowqsvz.settle.link *.qadbysjk.settle.link *.qsrykedh.settle.link *.qxemrbut.settle.link *.qzahpogl.settle.link *.salnywgd.settle.link *.sldphrzg.settle.link *.srjqpfec.settle.link *.staging.settle.link *.swzltknm.settle.link *.test.settle.link *.tmobile.settle.link *.uat.settle.link *.wjltiaoe.settle.link *.wmxrbdnj.settle.link *.wszbapgowqsvz.settle.link *.wvpqltfe.settle.link *.yerobifz.settle.link

Other domains in certificate

*.3g.bw357.com *.app.bw357.com bw357.com *.bw357.com *.chat.bw357.com *.crm.bw357.com *.dan.bw357.com *.dev.bw357.com *.dqzjjsslvpn.bw357.com *.email.bw357.com *.f94a708d-13e5-4496-8551-6a99145abdc7.bw357.com *.m.bw357.com *.ns.bw357.com *.rds.bw357.com *.staging.bw357.com *.ups.bw357.com *.vpn.bw357.com *.www.bw357.com
*.adfs.sallyday.com *.anyconnect.sallyday.com *.connect.sallyday.com *.dashboard.sallyday.com *.gateway.sallyday.com *.isoremote.sallyday.com *.login-data-viz.sallyday.com *.m.sallyday.com *.mail.sallyday.com *.rdgw.sallyday.com *.rds.sallyday.com *.rds1.sallyday.com *.remote.sallyday.com sallyday.com *.sallyday.com *.sendy.sallyday.com *.studentsvpn.sallyday.com *.wap.sallyday.com *.web2.sallyday.com *.webmail.sallyday.com