Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=daki.live
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 10, 2026
Valid Until
September 08, 2026
73 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CC:B3:F5:52:C1:BC:F5:D2:BC:EC:BB:E5:0C:0E:D9:8E:7C:3E:11:49:D3:34:80:26:F2:7C:D2:F3:CA:37:29:BB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
slantedmgmt.com
*.slantedmgmt.com
*.catalogue.slantedmgmt.com
2xpj.co
*.2xpj.co
atlars.space
*.atlars.space
*.mail.atlars.space
balltop.com
*.balltop.com
*.ww25.balltop.com
*.www.balltop.com
*.4159120.barny.xyz
barny.xyz
*.barny.xyz
blxd.io
*.blxd.io
*.ww25.blxd.io
daki.live
*.daki.live
*.sitemap.daki.live
*.sitemaps.daki.live
dilluminato.com.br
*.dilluminato.com.br
*.ns2.dilluminato.com.br
*.ns3.dilluminato.com.br
dogplacement.com
*.dogplacement.com
*.m.dogplacement.com
*.ww12.dogplacement.com
*.ww25.dogplacement.com
*.www.dogplacement.com
federalstudentloan.online
*.federalstudentloan.online
*.ww25.federalstudentloan.online
fleischeintopf.de
*.fleischeintopf.de
gatyhub.com
*.gatyhub.com
*.ws.gatyhub.com
*.wss.gatyhub.com
*.ww1.gatyhub.com
*.ww11.gatyhub.com
*.ww25.gatyhub.com
*.ww55.gatyhub.com
imgsur.ru
*.imgsur.ru
*.3c7eeba1.kutexosa.xyz
*.f59e292e.kutexosa.xyz
kutexosa.xyz
*.kutexosa.xyz
*.ridpo0d7798d8.kutexosa.xyz
lecamionvegetarien.fr
*.lecamionvegetarien.fr
*.hostmaster.lppmc.com
lppmc.com
*.lppmc.com
*.ww38.lppmc.com
movingvans.au
*.movingvans.au
nzbplayer.com
*.nzbplayer.com
*.xn--mmarkets-mbh3a7889eha.nzbplayer.com
phidar.fr
*.phidar.fr
*.mta-sts.rickparkerart.com
rickparkerart.com
*.rickparkerart.com
*.hostmaster.smartsnacksinschool.com
*.random.smartsnacksinschool.com
smartsnacksinschool.com
*.smartsnacksinschool.com
*.www.smartsnacksinschool.com
techzright.com
*.techzright.com
*.meritking.tr-hizligir.com
tr-hizligir.com
*.tr-hizligir.com
*.gglyrsecure.tronfin.com
*.pma.tronfin.com
*.rd.tronfin.com
tronfin.com
*.tronfin.com
*.ts.tronfin.com
*.vpn.tronfin.com
*.vpnssl.tronfin.com
*.random.voicemailk7.net
voicemailk7.net
*.voicemailk7.net
*.ww16.voicemailk7.net
Other domains in certificate