DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=plus500.site
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 19, 2026
Valid Until
January 17, 2027 74 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
6D:15:5D:F9:E6:0C:A3:D0:C1:3C:C0:A7:E8:4B:8E:D7:E5:22:32:62:A4:41:16:16:30:B6:2F:5C:01:01:6F:09
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
rootinghost.com *.rootinghost.com *.6c6d7adf-a9f8-4426-8bdc-b79bbd1d1670.rootinghost.com *.admin.rootinghost.com *.avito.rootinghost.com *.bf42ccc3-b43d-49b3-9e27-bccefa4dbc40.rootinghost.com *.cnvqyafabegestao.rootinghost.com *.demo.rootinghost.com *.fcfe83ea-0374-4600-89d5-7b44e1a15194.rootinghost.com *.ffvggtest.rootinghost.com *.gestao.rootinghost.com *.jlncaswb.rootinghost.com *.mhwxigestao.rootinghost.com *.staging.rootinghost.com *.test.rootinghost.com

Other domains in certificate

16375.qpon *.16375.qpon
58onnu.skin *.58onnu.skin
928hdnew.com *.928hdnew.com
947fg1.skin *.947fg1.skin
allconnect.online *.allconnect.online *.demo.allconnect.online *.dev.allconnect.online *.hostmaster.allconnect.online *.superset.allconnect.online *.ww25.allconnect.online
*.api.baally.com *.auth.baally.com baally.com *.baally.com *.balink.baally.com *.creator.baally.com *.dce.baally.com *.et.baally.com *.jobs.baally.com *.nnpday2017.baally.com *.transparency.baally.com
*.admin.beikost.info *.app.beikost.info *.backend.beikost.info beikost.info *.beikost.info *.cdn.beikost.info *.comune.beikost.info *.demo.beikost.info *.dev.beikost.info *.erp.beikost.info *.m.beikost.info *.remote.beikost.info *.staging.beikost.info *.www.beikost.info
cleanslmpieeatsus.sale *.cleanslmpieeatsus.sale
dijitalsofra.com *.dijitalsofra.com
getaiagentprostudio.com *.getaiagentprostudio.com
*.access.holeyplumbing.com holeyplumbing.com *.holeyplumbing.com *.remote.holeyplumbing.com *.uqcvgaccess.holeyplumbing.com *.webdisk.holeyplumbing.com
hudabeautystore.com *.hudabeautystore.com
jl58.com.ph *.jl58.com.ph
juventus1x2bet.com *.juventus1x2bet.com
llikeyoudate.com *.llikeyoudate.com
mahifancycrackers.com *.mahifancycrackers.com
*.globalprotect.penmouse.com penmouse.com *.penmouse.com
*.back.plus500.site *.nav.plus500.site plus500.site *.plus500.site *.test.plus500.site
xn--css12ez6v.com *.xn--css12ez6v.com
yhlhc.xyz *.yhlhc.xyz