DNS Gurus
Cached · just now
91/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 45
Google Trust logo Google Trust AWS CloudFront logo AWS CloudFront Chili Piper logo Chili Piper Google Tag Manager logo Google Tag Manager Bing logo Bing G2 logo G2 RudderStack logo RudderStack UnifyGTM logo UnifyGTM Netlify logo Netlify Reddit logo Reddit Midbound Cloud logo Midbound Cloud HubSpot Forms logo HubSpot Forms Google DoubleClick logo Google DoubleClick Google Analytics logo Google Analytics Google Conversion Tracking logo Google Conversion Tracking ClearBit logo ClearBit Iubenda logo Iubenda Google Static File Front End logo Google Static File Front End Metadata.io logo Metadata.io Google API JS Client logo Google API JS Client Wistia logo Wistia Twitter logo Twitter Hotjar logo Hotjar Kustomer logo Kustomer LinkedIn logo LinkedIn Contentful logo Contentful Influ2 logo Influ2 Prismic logo Prismic Stripe logo Stripe HubSpot Analytics logo HubSpot Analytics Sequel logo Sequel Google Search logo Google Search Qualified logo Qualified Facebook logo Facebook Amazon S3 logo Amazon S3 StackAdapt logo StackAdapt Cloudflare CDNJS logo Cloudflare CDNJS SlideShare logo SlideShare Visual Website Optimizer logo Visual Website Optimizer HubSpot logo HubSpot Vector logo Vector YouTube logo YouTube Microsoft Clarity logo Microsoft Clarity jsDelivr logo jsDelivr Google Cloud logo Google Cloud

Certificate Information

Subject
CN=profitwell.com
Issuer
C=US, O=Google Trust Services, CN=WE1
Valid From
April 07, 2026
Valid Until
July 06, 2026 85 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA256
SHA-256 Fingerprint
F8:C0:86:0B:3A:50:06:DA:7B:25:65:30:D1:CC:29:1E:90:0A:BC:BB:7C:E9:BB:61:89:73:57:5F:6E:69:04:9F
Alternative Names
2 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
Content-Security-Policy
AWS CloudFront logo
Basic
base-uri; default-src; worker-src; +11 more Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
  • • Consider adding 'preload' to HSTS for maximum security
  • • Improve CSP by adding more specific directives and removing 'unsafe-inline'
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

2 domains
profitwell.com *.profitwell.com