DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=sidarchain.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 17, 2026
Valid Until
August 15, 2026 69 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6F:60:81:F9:FB:AA:D2:75:AE:03:58:BA:F3:42:FA:0E:7D:96:A8:59:8F:71:A6:6B:8C:90:5D:95:D1:A0:DD:95
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
sidarchain.com *.sidarchain.com *.www.sidarchain.com

Other domains in certificate

ambitionbecomesher.info *.ambitionbecomesher.info *.gti0np.ambitionbecomesher.info
*.auto.bankmerica.com bankmerica.com *.bankmerica.com *.domain.bankmerica.com *.random.bankmerica.com *.shop.bankmerica.com *.v2.bankmerica.com *.ww25.bankmerica.com
*.archive.bowlingharbour.com bowlingharbour.com *.bowlingharbour.com *.redbussecondarydns.bowlingharbour.com *.vpn.bowlingharbour.com
*.drupal.jcreq.com jcreq.com *.jcreq.com *.mail.jcreq.com *.rz.jcreq.com *.search.jcreq.com *.users.jcreq.com
*.chat.moviejosss.com *.ci.moviejosss.com *.dash.moviejosss.com *.envoi.moviejosss.com *.insight.moviejosss.com *.link.moviejosss.com *.movie21.moviejosss.com moviejosss.com *.moviejosss.com *.movieonline66.moviejosss.com *.moviestreaming.moviejosss.com *.moviestreaming66.moviejosss.com *.qa.moviejosss.com *.reporting.moviejosss.com *.topmovie.moviejosss.com *.trendzmovie.moviejosss.com *.uat.moviejosss.com *.videos.moviejosss.com *.visualize.moviejosss.com *.ww1.moviejosss.com *.ww17.moviejosss.com
*.api.movietx.com *.help.movietx.com *.hostmaster.movietx.com *.mail.movietx.com movietx.com *.movietx.com *.old.movietx.com *.qa.movietx.com
ranbox.site *.ranbox.site *.ww38.ranbox.site
*.admin.sportsfi.xyz *.sitemaps.sportsfi.xyz sportsfi.xyz *.sportsfi.xyz
*.admin.thechicagopope.com *.api.thechicagopope.com *.app.thechicagopope.com *.assets.thechicagopope.com *.dashboard.thechicagopope.com *.demo.thechicagopope.com *.dev.thechicagopope.com *.edafgtjb.thechicagopope.com *.email.thechicagopope.com *.mail.thechicagopope.com *.mailer.thechicagopope.com *.marketing.thechicagopope.com *.members.thechicagopope.com *.nyeluuat.thechicagopope.com *.oowwumembers.thechicagopope.com *.qa.thechicagopope.com *.secure.thechicagopope.com *.staging.thechicagopope.com *.stg.thechicagopope.com *.test.thechicagopope.com thechicagopope.com *.thechicagopope.com *.uat.thechicagopope.com *.v1.thechicagopope.com *.vpn.thechicagopope.com *.web.thechicagopope.com *.webmail.thechicagopope.com