DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=thunderstruck.com.au
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 22, 2026
Valid Until
August 20, 2026 75 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
35:37:A5:93:F1:9A:D7:13:9F:A8:73:69:EB:FB:73:C7:61:03:6A:5E:8B:19:59:93:5D:98:F9:56:64:10:E2:C7
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
kmci3p.com *.kmci3p.com *.ww99.kmci3p.com

Other domains in certificate

7086xx.xyz *.7086xx.xyz *.cl.7086xx.xyz *.jenkins.7086xx.xyz *.k6.7086xx.xyz *.ww16.7086xx.xyz
blackcandles.com *.blackcandles.com *.ww25.blackcandles.com
dealbay.au *.dealbay.au *.ww38.dealbay.au
ebek.com *.ebek.com *.nbtc.ebek.com
*.app.ecovaluegardens.xyz ecovaluegardens.xyz *.ecovaluegardens.xyz *.staging.ecovaluegardens.xyz *.uat.ecovaluegardens.xyz
eyeexpress.com *.eyeexpress.com *.random.eyeexpress.com *.store.eyeexpress.com *.ww16.eyeexpress.com *.ww25.eyeexpress.com
*.app.finanzasia.digital *.b01cafb0-0ac5-4fd9-8647-1ee06c7405b8.finanzasia.digital *.bkzmxcgn.finanzasia.digital *.dev.finanzasia.digital *.docs.finanzasia.digital *.external.finanzasia.digital finanzasia.digital *.finanzasia.digital *.gpt.finanzasia.digital *.help.finanzasia.digital *.intranet.finanzasia.digital *.jeauboch.finanzasia.digital *.jvglzcdy.finanzasia.digital *.manage.finanzasia.digital *.marketplace.finanzasia.digital *.marketplaces.finanzasia.digital *.my.finanzasia.digital *.public.finanzasia.digital *.request.finanzasia.digital *.sharepoint.finanzasia.digital *.support.finanzasia.digital *.whatsapp.finanzasia.digital
gzwsgjg.cn *.gzwsgjg.cn *.m.gzwsgjg.cn
introduced.au *.introduced.au *.ww25.introduced.au *.ww38.introduced.au
*.hostmaster.kinsleys.com kinsleys.com *.kinsleys.com
*.api.mathworld.net *.app.mathworld.net *.hostmaster.mathworld.net *.m.mathworld.net mathworld.net *.mathworld.net *.myapps.mathworld.net *.owa.mathworld.net *.portal.mathworld.net *.socios.mathworld.net *.ts.mathworld.net *.tssap.mathworld.net *.vpn.mathworld.net *.www.mathworld.net *.xg.mathworld.net
rideme.co *.rideme.co *.www.rideme.co
stinsen.com *.stinsen.com *.ww25.stinsen.com
thunderstruck.com.au *.thunderstruck.com.au *.ww16.thunderstruck.com.au *.ww38.thunderstruck.com.au
*.bpopen.usminiclub.us usminiclub.us *.usminiclub.us