Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=daltonhistory.info
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 01, 2026
Valid Until
April 01, 2026
42 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
93:1C:C2:C9:AB:B8:E5:32:E4:92:19:5F:D8:BF:75:C2:0E:26:E5:01:C5:3B:1B:0B:F2:40:CD:20:60:37:0B:F3
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
removed.me
*.removed.me
*.does.removed.me
*.have.removed.me
*.valley.removed.me
*.ww25.removed.me
*.you.removed.me
*.b.baberotika.xyz
*.b96dd485-b0bc-477f-be21-63e15f178fcc.baberotika.xyz
baberotika.xyz
*.baberotika.xyz
*.cabinet.baberotika.xyz
*.rustore.baberotika.xyz
*.ww25.baberotika.xyz
bajura.co
*.bajura.co
*.squarespace.bajura.co
bangladeshcrazy.com
*.bangladeshcrazy.com
*.autodiscover.bokepgg.co
bokepgg.co
*.bokepgg.co
*.elastic.bokepgg.co
*.search.bokepgg.co
*.www.bokepgg.co
dajmitoauto.pl
*.dajmitoauto.pl
*.jg0yrliv.dajmitoauto.pl
daltonhistory.info
*.daltonhistory.info
*.ww38.daltonhistory.info
depys.info
*.depys.info
estudarinformatica.info
*.estudarinformatica.info
hollybankcaravanpark.co.uk
*.hollybankcaravanpark.co.uk
hulu-shoping.com
*.hulu-shoping.com
*.posta.hulu-shoping.com
*.38.meubackredirect.com.br
meubackredirect.com.br
*.meubackredirect.com.br
*.ns1.meubackredirect.com.br
*.ww25.meubackredirect.com.br
*.ww38.meubackredirect.com.br
*.app.oovip.xyz
*.d.oovip.xyz
*.m.oovip.xyz
oovip.xyz
*.oovip.xyz
*.remote.oovip.xyz
*.wildcard.oovip.xyz
*.ww25.oovip.xyz
*.www.oovip.xyz
*.www1.oovip.xyz
own-name.online
*.own-name.online
*.ww25.own-name.online
puppins.co.uk
*.puppins.co.uk
*.demo.rjc.uk
*.dev.rjc.uk
*.hostmaster.rjc.uk
*.magento.rjc.uk
*.old.rjc.uk
rjc.uk
*.rjc.uk
*.shop.rjc.uk
*.staging.rjc.uk
*.store.rjc.uk
*.test.rjc.uk
*.www.rjc.uk
senglealodge.co.uk
*.senglealodge.co.uk
setrabet794.com
*.setrabet794.com
tagesschasu.de
*.tagesschasu.de
*.wetter.tagesschasu.de
ticketsworld.co.uk
*.ticketsworld.co.uk
tus.life
*.tus.life
virtual-server.org
*.virtual-server.org
*.sa.vlxxai.net
*.sudbury.vlxxai.net
vlxxai.net
*.vlxxai.net
Other domains in certificate