75/100 SECURITY SCORE

Certificate Information

Subject
CN=lust666.cc
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 11, 2026
Valid Until
December 10, 2026 47 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
10:58:6B:AC:AF:55:5C:A9:CA:CB:2A:51:93:1E:00:B2:49:30:83:42:2E:4E:90:D7:62:9C:0D:F8:53:74:AF:4F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
badking.com.au *.badking.com.au *.blog.badking.com.au *.com.badking.com.au *.comwww.badking.com.au *.cwww.badking.com.au *.em.badking.com.au *.janestrinket.badking.com.au *.karolina188www.badking.com.au *.new.badking.com.au *.site.badking.com.au *.www.badking.com.au

Other domains in certificate

*.appropriationscomm.deduct.net *.citrix.deduct.net deduct.net *.deduct.net *.mail2.deduct.net *.ww42.deduct.net
*.app.futurz.co futurz.co *.futurz.co
*.5c47f0c6-2033-422f-a027-de853f7b740f.hubjw.org *.6.hubjw.org *.6436aec9-50c3-449d-976f-749642ac3b83.hubjw.org *.access.hubjw.org *.admin.hubjw.org *.analytic.hubjw.org *.api.hubjw.org *.app.hubjw.org *.apps.hubjw.org *.backend.hubjw.org *.bi.hubjw.org *.ca50c3-449d-976f-749642ac3b83.hubjw.org *.connect.hubjw.org *.dashboards.hubjw.org *.dashs.hubjw.org *.data.hubjw.org *.desktop.hubjw.org *.gateway.hubjw.org *.home.hubjw.org hubjw.org *.hubjw.org *.ipeline-preview.hubjw.org *.jw.hubjw.org *.m.hubjw.org *.mail.hubjw.org *.mobile.hubjw.org *.notexistsadmin.hubjw.org *.notexistsapi.hubjw.org *.notexistsapp.hubjw.org *.notexistsbackend.hubjw.org *.notexistsssl.hubjw.org *.notexistsstaging.hubjw.org *.pipeline-preview.hubjw.org *.portal.hubjw.org *.preprod.hubjw.org *.prod-visualizations.hubjw.org *.production-ci.hubjw.org *.ra.hubjw.org *.random.hubjw.org *.rd.hubjw.org *.rds.hubjw.org *.rdweb.hubjw.org *.redash.hubjw.org *.remote.hubjw.org *.remoteapp.hubjw.org *.remoto.hubjw.org *.reporting.hubjw.org *.ruggbwebvpn.hubjw.org *.secure.hubjw.org *.ssl.hubjw.org *.sslvpn.hubjw.org *.staging.hubjw.org *.stream.hubjw.org *.training.hubjw.org *.vdi.hubjw.org *.visual.hubjw.org *.visualize.hubjw.org *.vpn.hubjw.org *.webmail.hubjw.org *.ww16.hubjw.org *.ww38.hubjw.org *.ww6.hubjw.org
lust666.cc *.lust666.cc *.ww38.lust666.cc
*.hello.thecarlin.co *.reviews.thecarlin.co thecarlin.co *.thecarlin.co