DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=bfb.capital
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 25, 2026
Valid Until
August 23, 2026 67 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7F:D0:1F:6C:1B:02:EC:15:62:70:9F:6F:C9:1E:7E:D5:F2:32:90:96:95:7C:51:BA:84:06:1C:20:99:E0:83:B9
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
detak.com *.detak.com *.backend.detak.com *.d.detak.com *.dashboards.detak.com *.demo.detak.com *.dev-insights.detak.com *.ffffffffffff.detak.com *.i.detak.com *.notexistsadv.detak.com *.reporting.detak.com *.reports.detak.com

Other domains in certificate

4running.it *.4running.it *.remote.4running.it *.wwww.4running.it
*.0484.75196.net *.43wf.75196.net 75196.net *.75196.net *.78u28my.75196.net *.7t2zg.75196.net *.aax2w65.75196.net *.ajy.75196.net *.b9xk3.75196.net *.gp827n.75196.net *.l451d.75196.net *.po0i.75196.net *.uvyh.75196.net
*.109a8509-a670-441b-abaa-b9dcaa5f29e4.aitasbih.com *.admin.aitasbih.com aitasbih.com *.aitasbih.com *.api.aitasbih.com *.app.aitasbih.com *.assets.aitasbih.com *.bb78b0d9-97e9-41ec-a541-3c832aa7a4fe.aitasbih.com *.blog.aitasbih.com *.demo.aitasbih.com *.dev.aitasbih.com *.m.aitasbih.com *.members.aitasbih.com *.staging.aitasbih.com *.test.aitasbih.com *.testing.aitasbih.com
bfb.capital *.bfb.capital *.my.bfb.capital
*.8irzeb.choosen.vip *.api.choosen.vip choosen.vip *.choosen.vip *.www.choosen.vip
loadipvpn.space *.loadipvpn.space
localxflirt.com *.localxflirt.com
lovemaddie.com *.lovemaddie.com
lowercenter.de *.lowercenter.de
lvin.life *.lvin.life
maceater.com *.maceater.com
macgregorpowerwashingservices.com *.macgregorpowerwashingservices.com
micronewspaper.com *.micronewspaper.com
mig8.toys *.mig8.toys
monik.studio *.monik.studio
mosi.coach *.mosi.coach
movimientoteatrtanca.de *.movimientoteatrtanca.de
myadri.com *.myadri.com
mycpabarb.de *.mycpabarb.de
myinstantoffer.online *.myinstantoffer.online
*.0f70b37b-1b21-4cd9-a185-32cd975e9b4e.smknsulbar.com *.cpcalendars.smknsulbar.com *.m.smknsulbar.com smknsulbar.com *.smknsulbar.com