DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=theater42.org
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 26, 2026
Valid Until
July 25, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
57:C6:41:BB:71:67:F2:83:BE:82:17:E8:58:E2:23:27:F6:D2:42:C6:C0:CF:D5:1F:80:C9:78:69:07:0C:FA:0D
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
lavvitech.com *.lavvitech.com

Other domains in certificate

16826.plus *.16826.plus
26626.my *.26626.my
28777vv.cc *.28777vv.cc
324fsdofsdof.sbs *.324fsdofsdof.sbs
76381.one *.76381.one
77761vv.cc *.77761vv.cc
77794vv.cc *.77794vv.cc
777acebet.com *.777acebet.com
8h-8h-026nv.sbs *.8h-8h-026nv.sbs
8h-8h-u47he.sbs *.8h-8h-u47he.sbs
96129.blog *.96129.blog
aqatty.com *.aqatty.com
aqoil.com *.aqoil.com
barbar77nn.com *.barbar77nn.com
bcuxb.auction *.bcuxb.auction
benmsndenalcagmbuurnlervar.shop *.benmsndenalcagmbuurnlervar.shop
boldfeminine.com *.boldfeminine.com
bpblt.town *.bpblt.town
bvous.agency *.bvous.agency
careersignalaxis.live *.careersignalaxis.live
celebgates.cc *.celebgates.cc
cyberquester913.shop *.cyberquester913.shop
exdsga.cc *.exdsga.cc
f4ktzt.cyou *.f4ktzt.cyou
fafa168.it.com *.fafa168.it.com
fitnessnoblequest.club *.fitnessnoblequest.club
forklift-431264.sbs *.forklift-431264.sbs
forklift-job-pt-wp-x-1211241.sbs *.forklift-job-pt-wp-x-1211241.sbs
get-online-mental-testing-usa.sbs *.get-online-mental-testing-usa.sbs
govck.channel *.govck.channel
great-flushchips.quest *.great-flushchips.quest
great-lightcloud.quest *.great-lightcloud.quest
hightech-roofing.com *.hightech-roofing.com
ko666.foo *.ko666.foo
*.greatio-premium.realter.co *.net.realter.co realter.co *.realter.co *.submit.realter.co *.testing.realter.co
theater42.org *.theater42.org *.ww25.theater42.org
wareaq.com *.wareaq.com
*.blog.xn--fkqp5g2tc.com *.wp.xn--fkqp5g2tc.com xn--fkqp5g2tc.com *.xn--fkqp5g2tc.com
*.co.yachtclub.biz yachtclub.biz *.yachtclub.biz