DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=blxk.net
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 19, 2026
Valid Until
September 17, 2026 87 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CB:EF:E6:05:5D:B3:81:2F:D4:7F:8F:10:5B:BE:5A:F9:42:E5:09:91:21:54:D7:52:E1:E6:19:B4:37:E9:F8:7A
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
fantasyeducation.com *.fantasyeducation.com *.cpanel.fantasyeducation.com *.eopdk0.fantasyeducation.com *.landing.fantasyeducation.com *.mail.fantasyeducation.com *.webdisk.fantasyeducation.com *.webmail.fantasyeducation.com

Other domains in certificate

472.it *.472.it *.demo.472.it *.foreverliving.472.it *.hitting.472.it *.hostmaster.472.it *.mill.472.it *.notexistsforeverliving.472.it *.year.472.it
*.39sqx2.51018.rip *.4p03p.51018.rip *.4s6yk.51018.rip 51018.rip *.51018.rip *.8zz5mp.51018.rip *.dtey.51018.rip *.e1rs.51018.rip *.enawk.51018.rip *.h9vkqu.51018.rip *.q1sk1m.51018.rip *.r8drkd.51018.rip *.vcfym.51018.rip *.wzsh.51018.rip
*.bdx5b2.bibotin.shop bibotin.shop *.bibotin.shop *.webdisk.bibotin.shop *.webmail.bibotin.shop
*.3ll4fj.blxk.net *.3pvjr1.blxk.net *.5bvlt5.blxk.net *.791.blxk.net *.7zhzp7.blxk.net *.9ntnr0.blxk.net *.b8tlvb.blxk.net blxk.net *.blxk.net *.dthtt0.blxk.net *.hostmaster.blxk.net *.mingren.blxk.net *.old.blxk.net *.ra0.blxk.net *.rustore.blxk.net *.rzrp9l.blxk.net *.tanzi.blxk.net *.vip.blxk.net
*.6s98n.corretoracorrenteseguros.top *.cnfr9.corretoracorrenteseguros.top corretoracorrenteseguros.top *.corretoracorrenteseguros.top *.ip4i2.corretoracorrenteseguros.top *.kwid9.corretoracorrenteseguros.top *.oahlw.corretoracorrenteseguros.top *.snx68.corretoracorrenteseguros.top *.z3dl1.corretoracorrenteseguros.top *.zyu43.corretoracorrenteseguros.top
*.6tosy6.qgcm.net *.804.qgcm.net *.pit9ue.qgcm.net qgcm.net *.qgcm.net *.tml.qgcm.net *.xdr.qgcm.net
*.4e6a5c60-99ec-457e-9100-a7e1d28a8ebc.visaunlimited.co.za *.7b048d9e-1c8b-4057-8695-dcd65e69eed0.visaunlimited.co.za *.autodiscover.visaunlimited.co.za *.carddav.visaunlimited.co.za *.contacts.visaunlimited.co.za *.dav.visaunlimited.co.za *.openpgpkey.visaunlimited.co.za visaunlimited.co.za *.visaunlimited.co.za *.ww.visaunlimited.co.za *.www.visaunlimited.co.za
*.lgjegewcc.xjpabc.xyz xjpabc.xyz *.xjpabc.xyz
*.mail.zavinko.cfd zavinko.cfd *.zavinko.cfd