DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=oddballs.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 07, 2026
Valid Until
January 05, 2027 86 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
8B:56:12:67:C2:1D:DA:5E:39:F0:53:EB:02:D6:AC:83:07:6D:0E:8B:56:3B:7C:CD:07:78:7F:27:75:72:0F:59
Alternative Names
87 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

87 domains
oddballs.com.au *.oddballs.com.au *.16.oddballs.com.au *.557307fd-f66f-4f8d-b6ab-f4bc63cbd8fe.oddballs.com.au *.a92b1f08-c1c0-4ad2-a8ad-f4f6a74c7470.oddballs.com.au *.m.oddballs.com.au *.mail.oddballs.com.au *.oqfxqmail.oddballs.com.au *.public.oddballs.com.au *.share.oddballs.com.au *.wildcard.oddballs.com.au *.ww16.oddballs.com.au *.ww25.oddballs.com.au *.ww38.oddballs.com.au *.www.oddballs.com.au

Other domains in certificate

bdggamelink.ws *.bdggamelink.ws
account.dualincome.com.au adm.dualincome.com.au admin.dualincome.com.au api.dualincome.com.au app.dualincome.com.au autoconfig.dualincome.com.au autodiscover.dualincome.com.au backend.dualincome.com.au beta.dualincome.com.au blog.dualincome.com.au chat.dualincome.com.au cms.dualincome.com.au crm.dualincome.com.au dashboard.dualincome.com.au demo.dualincome.com.au dev.dualincome.com.au dualincome.com.au edu.dualincome.com.au erp.dualincome.com.au ftp.dualincome.com.au health.dualincome.com.au ipv6.dualincome.com.au login.dualincome.com.au m.dualincome.com.au mail.dualincome.com.au my.dualincome.com.au oauth.dualincome.com.au old.dualincome.com.au target.dualincome.com.au veronica.dualincome.com.au vpn.dualincome.com.au wildcard.dualincome.com.au ww16.dualincome.com.au ww25.dualincome.com.au ww38.dualincome.com.au www.dualincome.com.au
qajijifoxo.it.com *.qajijifoxo.it.com
*.dash.tajirmelintir.site *.ftp.tajirmelintir.site *.staging.tajirmelintir.site tajirmelintir.site *.tajirmelintir.site *.webmail.tajirmelintir.site *.whm.tajirmelintir.site
u9cmeqma3w.top *.u9cmeqma3w.top
*.admin.vavadaf47.fun *.app.vavadaf47.fun *.dev.vavadaf47.fun *.internal.vavadaf47.fun *.prod.vavadaf47.fun *.staging.vavadaf47.fun *.test.vavadaf47.fun vavadaf47.fun *.vavadaf47.fun *.video.vavadaf47.fun *.xin.vavadaf47.fun
*.admin.vmquest.xyz *.app.vmquest.xyz *.dev.vmquest.xyz vmquest.xyz *.vmquest.xyz
*.ftp.voafone.co.uk *.mdm.voafone.co.uk *.old.voafone.co.uk *.report.voafone.co.uk *.superset.voafone.co.uk voafone.co.uk *.voafone.co.uk