DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=holdings.finance
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 13, 2026
Valid Until
August 11, 2026 78 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
42:C9:B6:85:00:15:DD:A8:9F:97:31:89:23:A0:5C:32:B9:8D:1F:BB:80:A0:C0:FD:E8:55:B8:D7:4D:C9:56:05
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
provindo.org *.provindo.org *.ekonomat.provindo.org *.kanisius.provindo.org *.psp.provindo.org

Other domains in certificate

161742.lol *.161742.lol *.u3nvpn.161742.lol
bankbook.com.au *.bankbook.com.au *.demo.bankbook.com.au *.old.bankbook.com.au *.random.bankbook.com.au *.staging.bankbook.com.au *.ww25.bankbook.com.au
coffeeday.eu *.coffeeday.eu *.host20.coffeeday.eu *.mail.coffeeday.eu *.mx.coffeeday.eu *.ww.coffeeday.eu
*.3dduzd.envisionamplifyywave.info envisionamplifyywave.info *.envisionamplifyywave.info
fap18.pro *.fap18.pro *.ww16.fap18.pro
hkconstruct.com *.hkconstruct.com *.sitemap.hkconstruct.com *.vpn.hkconstruct.com *.www.hkconstruct.com
holdings.finance *.holdings.finance *.hostmaster.holdings.finance
instanthr-insight.com *.instanthr-insight.com
*.1.iv4.cc *.2.iv4.cc *.a.iv4.cc iv4.cc *.iv4.cc *.my.iv4.cc
*.admin.leepaid.store *.ci.leepaid.store leepaid.store *.leepaid.store *.preprod.leepaid.store *.production.leepaid.store *.webdisk.leepaid.store *.ww25.leepaid.store *.www.leepaid.store
lifejackets.com.au *.lifejackets.com.au *.ns0.lifejackets.com.au
local-seguro.online *.local-seguro.online *.pay.local-seguro.online *.ww38.local-seguro.online
lvonlineresmi.casino *.lvonlineresmi.casino
michigan.pics *.michigan.pics
*.admin.ohasianz.com ohasianz.com *.ohasianz.com
soccerhub.co *.soccerhub.co *.www.soccerhub.co
*.black.teazeworld.com *.blog.teazeworld.com *.cloudsec.teazeworld.com *.fuwu.teazeworld.com *.gd.teazeworld.com *.hcv.teazeworld.com *.mail.teazeworld.com *.newstudent.teazeworld.com *.store.teazeworld.com teazeworld.com *.teazeworld.com *.ww25.teazeworld.com *.ww38.teazeworld.com *.www.teazeworld.com
*.ns1.tvmovie.com.au tvmovie.com.au *.tvmovie.com.au
*.wildcard.xn--jvv142c9jal74b.com xn--jvv142c9jal74b.com *.xn--jvv142c9jal74b.com