DNS Gurus
Cached · just now
89/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 41
AWS CloudFront logo AWS CloudFront Google AdSense logo Google AdSense Chili Piper logo Chili Piper Pingdom logo Pingdom Google Tag Manager logo Google Tag Manager Reprise logo Reprise Google Hosted Libraries logo Google Hosted Libraries AppNexus (Xandr) logo AppNexus (Xandr) Reddit logo Reddit Midbound Cloud logo Midbound Cloud Google DoubleClick logo Google DoubleClick Google Analytics logo Google Analytics Microsoft Advertising Google Conversion Tracking logo Google Conversion Tracking 6sense logo 6sense Datadog logo Datadog Google Fonts logo Google Fonts Wistia logo Wistia Twitter logo Twitter Hotjar logo Hotjar LinkedIn logo LinkedIn Contentful logo Contentful Influ2 logo Influ2 Stripe logo Stripe unpkg logo unpkg Google Search logo Google Search BootstrapCDN logo BootstrapCDN Adobe Marketo logo Adobe Marketo Facebook logo Facebook Amazon S3 logo Amazon S3 StackAdapt OneTrust logo OneTrust AWS Certificate Manager logo AWS Certificate Manager Akamai logo Akamai Smartling logo Smartling Intercom logo Intercom Quora logo Quora YouTube logo YouTube The Trade Desk logo The Trade Desk Sentry logo Sentry jsDelivr logo jsDelivr

Certificate Information

Subject
CN=intercom-attachments-10.com
Issuer
C=US, O=Amazon, CN=Amazon RSA 2048 M01
Valid From
February 18, 2026
Valid Until
March 18, 2027 388 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CD:40:28:BE:CE:23:7E:0C:E8:BD:5A:A6:AF:FA:AC:FB:2F:9F:E7:79:38:F3:16:EC:71:15:4D:81:BA:48:BA:D3
Alternative Names
43 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=15552000; includeSubDomains; preload
Content-Security-Policy
AWS CloudFront logo
Basic
default-src; frame-ancestors; child-src; +10 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports