DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=puretoons.site
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 10, 2026
Valid Until
April 10, 2026 58 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8C:32:FF:56:50:A8:F2:7C:7B:C8:9A:A7:B6:22:03:C2:DC:9C:96:2D:B6:EA:F2:42:ED:FB:12:A1:48:7D:4B:E7
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
vivintt.com *.vivintt.com *.analytics.vivintt.com *.backend.vivintt.com *.blog.vivintt.com *.dev.vivintt.com *.redash.vivintt.com *.staging.vivintt.com *.superset-ci.vivintt.com *.superset.vivintt.com *.workflow.vivintt.com

Other domains in certificate

biquitous.io *.biquitous.io *.dev.biquitous.io *.investors.biquitous.io
foxwooods.com *.foxwooods.com *.random.foxwooods.com
*.1c2d34d0-664d-4c81-9a3e-b4c57cd6e3c5.kordalenkaleb.com *.app.kordalenkaleb.com *.archive.kordalenkaleb.com *.dash.kordalenkaleb.com *.docs.kordalenkaleb.com *.home.kordalenkaleb.com kordalenkaleb.com *.kordalenkaleb.com *.mta-sts.kordalenkaleb.com *.pop.kordalenkaleb.com *.portal.kordalenkaleb.com *.wap.kordalenkaleb.com *.ww.kordalenkaleb.com *.ww12.kordalenkaleb.com *.ww16.kordalenkaleb.com *.wwww.kordalenkaleb.com *.wyqrbldz.kordalenkaleb.com
*.2jeje.ldxbqgc21rmfb3eqax.top *.637bvbaa.ldxbqgc21rmfb3eqax.top *.6bejc74h.ldxbqgc21rmfb3eqax.top *.6uss3.ldxbqgc21rmfb3eqax.top *.7qgpf.ldxbqgc21rmfb3eqax.top *.9p34p.ldxbqgc21rmfb3eqax.top *.cc75i5xb.ldxbqgc21rmfb3eqax.top *.din8gwgo.ldxbqgc21rmfb3eqax.top *.e0hutxy5.ldxbqgc21rmfb3eqax.top *.eb5vomez.ldxbqgc21rmfb3eqax.top *.edd7x.ldxbqgc21rmfb3eqax.top *.efe3v.ldxbqgc21rmfb3eqax.top *.ehfc9.ldxbqgc21rmfb3eqax.top *.f0nqahfk.ldxbqgc21rmfb3eqax.top *.h4pib8tj.ldxbqgc21rmfb3eqax.top ldxbqgc21rmfb3eqax.top *.ldxbqgc21rmfb3eqax.top *.lzhgcdwv.ldxbqgc21rmfb3eqax.top *.m3p8ps13.ldxbqgc21rmfb3eqax.top *.png9v.ldxbqgc21rmfb3eqax.top *.urigbyl7.ldxbqgc21rmfb3eqax.top *.yh7ff.ldxbqgc21rmfb3eqax.top *.z8f39.ldxbqgc21rmfb3eqax.top
moover.com.au *.moover.com.au
onlinetanken.de *.onlinetanken.de *.ww16.onlinetanken.de
*.pop.puretoons.site puretoons.site *.puretoons.site
*.random.retero.pl retero.pl *.retero.pl
*.shop.specsplex.com specsplex.com *.specsplex.com
*.anyconnect.ungles.com *.app.ungles.com *.olive.ungles.com *.rds1.ungles.com *.rdweb.ungles.com *.remote2.ungles.com *.sitemap.ungles.com *.ssl.ungles.com *.sslvpn3.ungles.com *.studentsvpn.ungles.com ungles.com *.ungles.com *.virtualapps.ungles.com *.ww1.ungles.com
verstapen.com *.verstapen.com *.ww25.verstapen.com