SSL Certificate Analysis for lime.pornhush.com - Security Grade & TLS Configuration | DNS Gurus

Open Cached · just now

75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1

Certificate Information

Subject

CN=omlinecci.com

Issuer

C=US, O=Let's Encrypt, CN=YE2

Valid From

October 24, 2026

Valid Until

January 22, 2027 78 days

Public Key

ECDSA 256 bit (P-256) Adequate

Signature Algorithm

ECDSA-SHA384

SHA-256 Fingerprint

94:6C:01:F5:58:19:03:B6:6E:58:72:00:8F:EB:5A:6B:4C:CE:6B:6F:EA:EE:53:53:19:07:E2:94:3D:2A:4F:5A

Alternative Names

Security Configuration

TLS Protocols

TLS 1.2 TLS 1.3

Forward Secrecy

Supported (Modern clients use PFS)

HTTP Security Headers

Status

Strict-Transport-Security

Missing

Not configured

Content-Security-Policy

Missing

Not configured Analyze

Content-Security-Policy-Report-Only

Missing

Not configured Analyze

X-Frame-Options

Missing

Not configured

X-Content-Type-Options

Missing

Not configured

Referrer-Policy

Missing

Not configured

Permissions-Policy

Missing

Not configured

Recommendations

• Add Strict-Transport-Security header with max-age of at least 1 year
• Add Content-Security-Policy header to prevent XSS attacks
• Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
• Add X-Content-Type-Options: nosniff
• Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
• Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records

Not Configured (Any CA can issue certificates)

CAA Issues

• No CAA records configured - any CA can issue certificates

Recommendations

• Implement CAA records to restrict which CAs can issue certificates for your domain
• This adds an extra layer of security against unauthorized certificate issuance
• Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
• Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains

pornhush.com *.pornhush.com *.api.pornhush.com *.app.pornhush.com *.demo.pornhush.com *.lime.pornhush.com *.sitemaps.pornhush.com *.ww1.pornhush.com *.ww7.pornhush.com *.www.pornhush.com

Other domains in certificate

6a9vxab.xyz *.6a9vxab.xyz *.ww16.6a9vxab.xyz *.ww17.6a9vxab.xyz *.ww25.6a9vxab.xyz

*.anyconnect.capriola.com capriola.com *.capriola.com *.cit.capriola.com *.connect.capriola.com *.hostmaster.capriola.com *.us.capriola.com *.vpn.capriola.com *.webmail.capriola.com

*.4z0f.cloudtalksummit.online *.app.cloudtalksummit.online cloudtalksummit.online *.cloudtalksummit.online *.cr.cloudtalksummit.online *.event.cloudtalksummit.online *.geir.cloudtalksummit.online *.l3z.cloudtalksummit.online *.t8.cloudtalksummit.online *.tj3.cloudtalksummit.online

*.clicabio.comprarconta.net *.com.comprarconta.net comprarconta.net *.comprarconta.net *.sitemaps.comprarconta.net

*.com.glittersfootwears.com glittersfootwears.com *.glittersfootwears.com

*.1d817.omg138-pintu-amp.xyz *.3ugcn.omg138-pintu-amp.xyz *.5qutp.omg138-pintu-amp.xyz *.6s98n.omg138-pintu-amp.xyz *.87ab5.omg138-pintu-amp.xyz *.89wkp.omg138-pintu-amp.xyz *.96c54.omg138-pintu-amp.xyz *.btqeeizoni89wkp.omg138-pintu-amp.xyz *.d.omg138-pintu-amp.xyz *.dashboard.omg138-pintu-amp.xyz *.dn930.omg138-pintu-amp.xyz *.hkofobtqeeizoni89wkp.omg138-pintu-amp.xyz *.jxc88.omg138-pintu-amp.xyz *.jyikv.omg138-pintu-amp.xyz *.kac0t.omg138-pintu-amp.xyz *.kcmkhbtqeeizoni89wkp.omg138-pintu-amp.xyz *.l1v3f.omg138-pintu-amp.xyz *.lbcp6.omg138-pintu-amp.xyz *.lcjev.omg138-pintu-amp.xyz *.lyhqc0.omg138-pintu-amp.xyz *.me7q1.omg138-pintu-amp.xyz *.nan1j.omg138-pintu-amp.xyz omg138-pintu-amp.xyz *.omg138-pintu-amp.xyz *.osldc.omg138-pintu-amp.xyz *.portal.omg138-pintu-amp.xyz *.pp4gk.omg138-pintu-amp.xyz *.pxexfcnfr9.omg138-pintu-amp.xyz *.ques8.omg138-pintu-amp.xyz *.rkuvx.omg138-pintu-amp.xyz *.s5kjz.omg138-pintu-amp.xyz *.umlhnegagydn930.omg138-pintu-amp.xyz *.yhvptbtqeeizoni89wkp.omg138-pintu-amp.xyz *.z4gbs.omg138-pintu-amp.xyz

omlinecci.com *.omlinecci.com *.random.omlinecci.com *.ww17.omlinecci.com

*.com.thebusinessterms.com thebusinessterms.com *.thebusinessterms.com

*.internal.vasiliiskrypnik.site *.lab1.vasiliiskrypnik.site *.lab2.vasiliiskrypnik.site *.lab3.vasiliiskrypnik.site *.sub.vasiliiskrypnik.site vasiliiskrypnik.site *.vasiliiskrypnik.site