DNS Gurus
Cached · just now
79/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=riches.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 05, 2026
Valid Until
May 06, 2026 80 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EC:1A:EA:82:91:30:B6:AF:73:20:78:33:61:4D:84:83:AA:0D:00:3F:A5:2D:8E:C4:81:CB:B8:6B:E0:35:9D:F2
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
salsha.com *.salsha.com

Other domains in certificate

redditadvertisingserviceonline.com *.redditadvertisingserviceonline.com
register2ride.com *.register2ride.com
reprint.me *.reprint.me
rhkcgjvn.com *.rhkcgjvn.com
riches.it *.riches.it
rjrudy.org *.rjrudy.org
rkxog.net *.rkxog.net
rme63.top *.rme63.top
roadsurfervanvilla.com *.roadsurfervanvilla.com
roarwellness.co *.roarwellness.co
robertocavalli.in *.robertocavalli.in
robette.it *.robette.it
robhicks.com *.robhicks.com
robinsolar.com *.robinsolar.com
robinwilliams.it *.robinwilliams.it
roboconverge.com *.roboconverge.com
robolabor.xyz *.robolabor.xyz
roborock-test-682821955.click *.roborock-test-682821955.click
roborockflexi.com *.roborockflexi.com
robotagent.me *.robotagent.me
roboticsbody.com *.roboticsbody.com
robotique.io *.robotique.io
robotmobile.it *.robotmobile.it
robozawr.com *.robozawr.com
robuxgod.com *.robuxgod.com
rocitin.com *.rocitin.com
rodrigonogueira.com *.rodrigonogueira.com
romeli.it *.romeli.it
rongtaipay.com *.rongtaipay.com
roomoniiosdalraft.cyou *.roomoniiosdalraft.cyou
roope.it *.roope.it
ross789pro.live *.ross789pro.live
rqt34h.top *.rqt34h.top
rthdf.net *.rthdf.net
rtp-maniaktoto8.asia *.rtp-maniaktoto8.asia
rtpcasinglive.xyz *.rtpcasinglive.xyz
rtpl78.pro *.rtpl78.pro
rufaqaastayconnected.com *.rufaqaastayconnected.com
rvcasinogames.com *.rvcasinogames.com
rynqavoa.xyz *.rynqavoa.xyz
rzts7i9ws.buzz *.rzts7i9ws.buzz
sadqe.pro *.sadqe.pro
sagging-surgery-340711330.click *.sagging-surgery-340711330.click
salomonteam.com *.salomonteam.com