DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=plusportals.co
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 02, 2026
Valid Until
April 02, 2026 48 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
9B:73:B7:74:09:78:4F:43:C0:21:B3:0E:D1:44:AE:2C:81:84:E3:84:EF:D2:31:0D:64:3D:2E:79:3D:32:3C:76
Alternative Names
87 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

87 domains
plusportals.co *.plusportals.co *.blog.plusportals.co *.git.plusportals.co *.qqiicgit.plusportals.co *.ww12.plusportals.co *.ww7.plusportals.co *.www.plusportals.co

Other domains in certificate

flocking.au *.flocking.au *.ww38.flocking.au
*.academy.freelancer.zone *.accounting.freelancer.zone *.adm.freelancer.zone *.app.freelancer.zone *.application.freelancer.zone *.autoconfig.freelancer.zone *.aws.freelancer.zone *.backoffice.freelancer.zone *.blog.freelancer.zone *.booking.freelancer.zone *.bot.freelancer.zone *.chat.freelancer.zone *.core.freelancer.zone *.dashboard.freelancer.zone *.dev-app.freelancer.zone *.dev1.freelancer.zone *.developer.freelancer.zone *.development.freelancer.zone *.dheeeimkxoo.freelancer.zone *.erp.freelancer.zone *.food.freelancer.zone freelancer.zone *.freelancer.zone *.h5.freelancer.zone *.hr.freelancer.zone *.imap.freelancer.zone *.invoice.freelancer.zone *.lms.freelancer.zone *.local.freelancer.zone *.login.freelancer.zone *.magento.freelancer.zone *.mail.freelancer.zone *.main.freelancer.zone *.manage.freelancer.zone *.manager.freelancer.zone *.members.freelancer.zone *.mobile.freelancer.zone *.my.freelancer.zone *.old.freelancer.zone *.pay.freelancer.zone *.plugin.freelancer.zone *.pnbxgevmsoowdrmkjzac.freelancer.zone *.pos.freelancer.zone *.projects.freelancer.zone *.secure.freelancer.zone *.service.freelancer.zone *.shop.freelancer.zone *.shopify.freelancer.zone *.sistema.freelancer.zone *.site.freelancer.zone *.sitemap.freelancer.zone *.sms.freelancer.zone *.staging-api.freelancer.zone *.staging.freelancer.zone *.status.freelancer.zone *.stg.freelancer.zone *.store.freelancer.zone *.v2.freelancer.zone *.ws.freelancer.zone *.www.freelancer.zone
lenoirmagazine.com *.lenoirmagazine.com *.mail1.lenoirmagazine.com *.mail2.lenoirmagazine.com *.random.lenoirmagazine.com *.remote.lenoirmagazine.com *.ww38.lenoirmagazine.com *.www.lenoirmagazine.com
moll.au *.moll.au
mstrstock.xyz *.mstrstock.xyz *.ww16.mstrstock.xyz
*.ww16.yextstock.xyz yextstock.xyz *.yextstock.xyz