DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=italianfigtrees.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 05, 2026
Valid Until
April 05, 2026 50 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
50:32:E6:66:95:32:DA:25:7A:AD:F3:81:57:67:76:B1:3C:4D:BF:55:3A:06:4F:2B:45:DF:18:3E:92:3A:A5:11
Alternative Names
63 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

63 domains
ucfwtrust.com *.ucfwtrust.com

Other domains in certificate

5soclift.online *.5soclift.online
africanmall.app *.africanmall.app *.api.africanmall.app *.install.africanmall.app *.test.africanmall.app *.webmail.africanmall.app *.www.africanmall.app
baghdad.com.au *.baghdad.com.au
greatsouthernmotorcycles.com.au *.greatsouthernmotorcycles.com.au *.ww25.greatsouthernmotorcycles.com.au *.yamaha.greatsouthernmotorcycles.com.au
italianfigtrees.com *.italianfigtrees.com *.random.italianfigtrees.com
jinjusangdan.co *.jinjusangdan.co *.ww16.jinjusangdan.co
*.autodiscover.makeuppla.net *.cpanel.makeuppla.net *.cpcalendars.makeuppla.net *.mail.makeuppla.net makeuppla.net *.makeuppla.net *.webmail.makeuppla.net *.ww38.makeuppla.net *.www.makeuppla.net
removed.com.au *.removed.com.au
*.cpcalendars.rookwoodjewishcemetery.com.au *.images.rookwoodjewishcemetery.com.au rookwoodjewishcemetery.com.au *.rookwoodjewishcemetery.com.au *.webdisk.rookwoodjewishcemetery.com.au *.webmail.rookwoodjewishcemetery.com.au *.ww25.rookwoodjewishcemetery.com.au
*.app.safensave.biz *.i.safensave.biz *.inv.safensave.biz *.ms.safensave.biz *.o.safensave.biz safensave.biz *.safensave.biz *.sns.safensave.biz *.soft.safensave.biz
strap.com.au *.strap.com.au
teenzone.com.au *.teenzone.com.au
thorntonforever.com *.thorntonforever.com *.ww25.thorntonforever.com
*.analytic.voitam.com.br *.bi.voitam.com.br voitam.com.br *.voitam.com.br *.ww38.voitam.com.br *.xn--ww8-hn0a.voitam.com.br