Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=balumey.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 29, 2026
Valid Until
December 28, 2026
68 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
60:46:3F:8D:CC:95:3B:F8:B2:2C:6C:3D:81:86:8C:99:0C:5E:4E:2E:82:05:8A:D7:9F:79:29:EE:48:3C:F7:C7
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
gacgemini.com
*.gacgemini.com
019999.co
*.019999.co
360apexsphere.click
*.360apexsphere.click
9898066smoothlyg.shop
*.9898066smoothlyg.shop
balumey.com
*.balumey.com
bdggameonline.shop
*.bdggameonline.shop
f55t5xyb.top
*.f55t5xyb.top
gelarex-eu.bio
*.gelarex-eu.bio
gwipe.pink
*.gwipe.pink
gxzfppv1764.vip
*.gxzfppv1764.vip
hg3088.cc
*.hg3088.cc
hydroflask.live
*.hydroflask.live
ilovehighheels.com
*.ilovehighheels.com
joinafirmo.com
*.joinafirmo.com
juliejules.cfd
*.juliejules.cfd
kyta0.cc
*.kyta0.cc
lcms-team.com
*.lcms-team.com
linty.win
*.linty.win
liquidlevitations.com
*.liquidlevitations.com
lsbxe.vip
*.lsbxe.vip
lsty748.com
*.lsty748.com
lucrocerto.bet
*.lucrocerto.bet
mersindebayan.com
*.mersindebayan.com
mkjohnson.com
*.mkjohnson.com
pewhw.com
*.pewhw.com
pwewq1j.cfd
*.pwewq1j.cfd
rey-pggucci.bet
*.rey-pggucci.bet
rtpgasing777c.xyz
*.rtpgasing777c.xyz
saffirecrm.com
*.saffirecrm.com
shellshokers.io
*.shellshokers.io
spicyboinkmatch.com
*.spicyboinkmatch.com
swiftfreightshipping.com
*.swiftfreightshipping.com
tchstreamx.digital
*.tchstreamx.digital
technexusx-zone.com
*.technexusx-zone.com
teramerge.com
*.teramerge.com
topclickzone5000.top
*.topclickzone5000.top
typay.live
*.typay.live
vinted.de.com
*.vinted.de.com
vinyu.win
*.vinyu.win
wd222.vip
*.wd222.vip
wellpathway.company
*.wellpathway.company
www2222aww.com
*.www2222aww.com
www666pdy.com
*.www666pdy.com
zenithmatrix2025.click
*.zenithmatrix2025.click
zvkqrzq576.vip
*.zvkqrzq576.vip
Other domains in certificate