DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=qlcdn.xyz
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 03, 2026
Valid Until
January 01, 2027 79 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
8D:69:8F:69:0C:AC:35:CC:17:E8:42:4C:14:D0:1B:A3:80:48:2B:52:4B:A7:92:1B:80:C5:BA:A5:9A:18:D3:C6
Alternative Names
84 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

84 domains
icg-lanarkshire2011.com *.icg-lanarkshire2011.com *.app.icg-lanarkshire2011.com *.blog.icg-lanarkshire2011.com *.customers.icg-lanarkshire2011.com *.download.icg-lanarkshire2011.com *.events.icg-lanarkshire2011.com *.imap3d.icg-lanarkshire2011.com *.localhost.icg-lanarkshire2011.com *.log.icg-lanarkshire2011.com *.owa.icg-lanarkshire2011.com *.postgresql.icg-lanarkshire2011.com *.pub.icg-lanarkshire2011.com *.registration.icg-lanarkshire2011.com *.research.icg-lanarkshire2011.com *.router.icg-lanarkshire2011.com *.ssh.icg-lanarkshire2011.com *.ssl.icg-lanarkshire2011.com *.vpn1.icg-lanarkshire2011.com *.ww01.icg-lanarkshire2011.com *.www.icg-lanarkshire2011.com *.www02.icg-lanarkshire2011.com

Other domains in certificate

28364.cc *.28364.cc *.cloud.28364.cc *.de.28364.cc *.gitlab.28364.cc *.smtp.28364.cc
elpasobuilders.info *.elpasobuilders.info *.m.elpasobuilders.info
*.com.grt-eg.com grt-eg.com *.grt-eg.com *.sa.grt-eg.com
hsbjyou2.xyz *.hsbjyou2.xyz *.xn--6-y56a.hsbjyou2.xyz
httxst.com *.httxst.com *.shx.httxst.com
memyths.com *.memyths.com *.sitemap.memyths.com
primehubdeal.online *.primehubdeal.online *.testing.primehubdeal.online
*.img.qlcdn.xyz qlcdn.xyz *.qlcdn.xyz *.ww38.qlcdn.xyz
*.api.rosmic.us rosmic.us *.rosmic.us
*.app.spedizionesicilia.com *.bi.spedizionesicilia.com *.demo.spedizionesicilia.com *.dev.spedizionesicilia.com *.forecast.spedizionesicilia.com *.redash.spedizionesicilia.com *.reporting.spedizionesicilia.com spedizionesicilia.com *.spedizionesicilia.com *.superset.spedizionesicilia.com
statefinbank.com *.statefinbank.com
*.amiga.tem.casa *.casar.tem.casa *.n.tem.casa *.onde.tem.casa *.stage.tem.casa tem.casa *.tem.casa *.um.tem.casa *.ww6.tem.casa
*.ftp.voafone.co.uk *.mdm.voafone.co.uk *.old.voafone.co.uk *.report.voafone.co.uk voafone.co.uk *.voafone.co.uk
*.virtualaccess3.wink777plusth.com wink777plusth.com *.wink777plusth.com