DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=duamalik.cfd
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 06, 2026
Valid Until
May 07, 2026 86 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AC:2A:F0:B9:1D:6F:9F:B7:1D:23:CD:72:AC:10:D1:31:91:BE:33:ED:3D:B4:10:1F:8C:8D:B0:F1:53:F5:2D:1D
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
vpnlearnhub.com *.vpnlearnhub.com

Other domains in certificate

duamalik.cfd *.duamalik.cfd
eatonhealthandwellnessconsulting.com *.eatonhealthandwellnessconsulting.com
eclipsetrader.org *.eclipsetrader.org
ecoleplouider.fr *.ecoleplouider.fr
soulpurposeworks.com *.soulpurposeworks.com
spilloni.it *.spilloni.it
sportgearhub.click *.sportgearhub.click
sportscamps.it *.sportscamps.it
steerspark.com *.steerspark.com
storetag.work *.storetag.work
superhrprofile.com *.superhrprofile.com
surgevest.com *.surgevest.com
symqovez.xyz *.symqovez.xyz
tahakava.com *.tahakava.com
team-edgecomply.com *.team-edgecomply.com
tfnreedigit.info *.tfnreedigit.info
thenyeranch.com *.thenyeranch.com
therollercompany.com *.therollercompany.com
totsuka-detached-482517550.click *.totsuka-detached-482517550.click
tradeexperthub.rest *.tradeexperthub.rest
trove.chat *.trove.chat
trwvt.cc *.trwvt.cc
trypathfulservices.com *.trypathfulservices.com
tuoi69z.link *.tuoi69z.link
tvmountorg.online *.tvmountorg.online
uk88.luxe *.uk88.luxe
ultimagota.com *.ultimagota.com
uo2wig.shop *.uo2wig.shop
upxjp.pro *.upxjp.pro
urbix.co *.urbix.co
usetheaperian.com *.usetheaperian.com
vchap.net *.vchap.net
viccomusic.es *.viccomusic.es
vqazd.tv *.vqazd.tv
vuy81.top *.vuy81.top
vyf08.top *.vyf08.top
waterheaters.click *.waterheaters.click
wausauignitesoftball.com *.wausauignitesoftball.com
whizzcare.com *.whizzcare.com
win79.stream *.win79.stream
worldwideeas.com *.worldwideeas.com
wuliao.app *.wuliao.app
xhyh63.com *.xhyh63.com
xn--0p0a.com *.xn--0p0a.com