DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=idalys.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 10, 2026
Valid Until
September 08, 2026 86 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DF:52:D0:DA:70:52:34:46:09:2D:69:A3:74:FF:AE:C1:DB:D8:4A:B2:1E:9D:25:17:28:9F:10:10:39:90:1D:43
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
welcome.gift *.welcome.gift *.admin.welcome.gift *.alamzon.welcome.gift *.aliexpress.welcome.gift *.alo.welcome.gift *.assets.welcome.gift *.bachelor.welcome.gift *.backup.welcome.gift *.bpi.welcome.gift *.clarins.welcome.gift *.corporate.welcome.gift *.dashboard.welcome.gift *.din.welcome.gift *.doordash.welcome.gift *.eastwest.welcome.gift *.gd.welcome.gift *.good.welcome.gift *.home.welcome.gift *.hotel.welcome.gift *.jitdjapi.welcome.gift *.ka.welcome.gift *.mail.welcome.gift *.mailer.welcome.gift *.mariott.welcome.gift *.marriott.welcome.gift *.medical.welcome.gift *.members.welcome.gift *.neigbor.welcome.gift *.paaakamex.welcome.gift *.platinum.welcome.gift *.qa.welcome.gift *.small.welcome.gift *.suites.welcome.gift *.teacher.welcome.gift *.tor.welcome.gift *.uat.welcome.gift *.v1.welcome.gift *.xyxwbuat.welcome.gift *.ynsvashopback.welcome.gift

Other domains in certificate

*.broadstreet.christianbook.co *.cbdreader.christianbook.co christianbook.co *.christianbook.co *.colsoncenter.christianbook.co *.hostmaster.christianbook.co *.wildcard.christianbook.co *.ww38.christianbook.co *.www.christianbook.co
*.co.idalys.com *.demo.idalys.com *.i.idalys.com idalys.com *.idalys.com *.jenkins.idalys.com *.media.idalys.com *.new.idalys.com *.ns2.idalys.com *.pipeline.idalys.com *.pr.idalys.com *.random.idalys.com *.test.idalys.com *.ww25.idalys.com
*.china.nnets.com *.cpanel.nnets.com *.newsite.nnets.com nnets.com *.nnets.com *.ondeleted.nnets.com *.preprod.nnets.com *.prod.nnets.com *.superset.nnets.com *.users.nnets.com *.ww25.nnets.com
*.chat.securedallow.site *.flowiseai.securedallow.site *.go.securedallow.site *.img.securedallow.site *.integration.securedallow.site *.main.securedallow.site *.next.securedallow.site *.pipeline.securedallow.site *.qa.securedallow.site securedallow.site *.securedallow.site *.send.securedallow.site *.src.securedallow.site *.trx.securedallow.site *.ww25.securedallow.site *.zip.securedallow.site