DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=bathmate.store
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 14, 2026
Valid Until
July 13, 2026 64 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
20:E3:64:B4:3F:D0:F0:91:0A:A0:AE:B2:4E:16:7C:A1:84:F6:05:3F:31:D7:4F:37:2A:9A:85:57:A8:36:EA:E4
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
68k.it *.68k.it *.admin.68k.it *.api.68k.it *.app.68k.it *.demo.68k.it *.dev.68k.it *.hr.68k.it *.random.68k.it *.remote.68k.it

Other domains in certificate

*.australia.bathmate.store bathmate.store *.bathmate.store *.bulgaria.bathmate.store *.espana.bathmate.store *.india.bathmate.store *.italia.bathmate.store *.portugal.bathmate.store *.switzerland.bathmate.store *.turkey.bathmate.store *.usa.bathmate.store
*.abbonament.irai.it *.abbonamenti.irai.it *.dashboard.irai.it *.intelligence.irai.it irai.it *.irai.it *.metric.irai.it *.metrics.irai.it *.perlacultura.irai.it *.posta.irai.it *.rai.irai.it *.raiplay.irai.it *.remote.irai.it *.sanremo.irai.it *.storievere.irai.it *.unpostoalsole.irai.it *.visual.irai.it
manusim.it.com *.manusim.it.com *.www.manusim.it.com
*.2456w.mjfz8.com mjfz8.com *.mjfz8.com
*.dashboard.nb1111.com *.interestingcgw1.nb1111.com nb1111.com *.nb1111.com
*.app.proz.it *.dashboards.proz.it *.executiveservices.proz.it *.hostmaster.proz.it *.mx.proz.it proz.it *.proz.it *.superset.proz.it
*.16bz5.tendergardeningtouches.xyz *.cxie3.tendergardeningtouches.xyz *.fz4qv.tendergardeningtouches.xyz *.j2zfz.tendergardeningtouches.xyz *.kwid9.tendergardeningtouches.xyz *.o7p4x.tendergardeningtouches.xyz *.pp4gk.tendergardeningtouches.xyz *.ques8.tendergardeningtouches.xyz tendergardeningtouches.xyz *.tendergardeningtouches.xyz *.vhakn.tendergardeningtouches.xyz
*.9725c2c7-9098-4922-aca0-3a8c433cbc2e.vavadaved4.com *.admin.vavadaved4.com *.api.vavadaved4.com *.backup.vavadaved4.com *.c2827889-2639-4a46-8557-8342d8f01063.vavadaved4.com *.dev.vavadaved4.com *.m.vavadaved4.com *.mail.vavadaved4.com *.mta-sts.vavadaved4.com *.sitemap.vavadaved4.com *.sitemaps.vavadaved4.com *.staging.vavadaved4.com *.uat.vavadaved4.com vavadaved4.com *.vavadaved4.com *.vpn.vavadaved4.com *.www1.vavadaved4.com *.wwwbackup.vavadaved4.com *.wwwdev.vavadaved4.com *.wwwmail.vavadaved4.com *.wwwuat.vavadaved4.com