Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=indianhotspring.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 19, 2026
Valid Until
May 20, 2026
89 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
55:F9:70:47:65:3C:CA:D0:F9:34:57:F1:18:0F:35:62:07:DA:E9:B0:71:B2:62:8D:9A:94:E9:3F:59:A3:CA:9E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
solverdaddies.com
*.solverdaddies.com
*.gudggadmin.solverdaddies.com
achtermann.com
*.achtermann.com
aromaty.com
*.aromaty.com
billigerbasteln.de
*.billigerbasteln.de
*.mail.billigerbasteln.de
brokerchoser.com
*.brokerchoser.com
*.ww25.brokerchoser.com
correiosrastreamento.com
*.correiosrastreamento.com
freshweb.com.au
*.freshweb.com.au
*.gsk.freshweb.com.au
ghorbarifurniture.com
*.ghorbarifurniture.com
*.root.ghorbarifurniture.com
*.ww38.ghorbarifurniture.com
indianhotspring.com
*.indianhotspring.com
*.ww12.indianhotspring.com
*.65246b63-b8d0-4572-b919-fb8c6909149d.kabu2.net
*.admin.kabu2.net
*.api.kabu2.net
*.cloud.kabu2.net
*.commta-sts.kabu2.net
*.cpanel.kabu2.net
*.cpcalendars.kabu2.net
*.cpcontacts.kabu2.net
*.css.kabu2.net
*.docs.kabu2.net
*.git.kabu2.net
*.gowww.kabu2.net
*.hostmaster.kabu2.net
*.jvbsgmta-sts.kabu2.net
kabu2.net
*.kabu2.net
*.m.kabu2.net
*.mta-sts.kabu2.net
*.painel.kabu2.net
*.random.kabu2.net
*.rds.kabu2.net
*.rds1.kabu2.net
*.vpn.kabu2.net
*.webmail.kabu2.net
*.website.kabu2.net
*.ww1.kabu2.net
*.ww7.kabu2.net
*.www.kabu2.net
maranahealthcenter.com
*.maranahealthcenter.com
*.www.maranahealthcenter.com
mazaji.com
*.mazaji.com
*.1.moviesflix.xyz
*.2.moviesflix.xyz
*.3.moviesflix.xyz
*.4.moviesflix.xyz
*.5.moviesflix.xyz
*.bharamrishi.moviesflix.xyz
*.blog.moviesflix.xyz
*.bookshelves.moviesflix.xyz
*.booksread.moviesflix.xyz
*.cpanel.moviesflix.xyz
*.dc-37d2472c3c9e.moviesflix.xyz
*.hostmaster.moviesflix.xyz
*.mail.moviesflix.xyz
*.menuofthedays.moviesflix.xyz
*.movie4your.moviesflix.xyz
moviesflix.xyz
*.moviesflix.xyz
*.netflixmovie.moviesflix.xyz
*.netmovie.moviesflix.xyz
*.news.moviesflix.xyz
*.play.moviesflix.xyz
*.tech.moviesflix.xyz
*.todays.moviesflix.xyz
*.webdisk.moviesflix.xyz
*.webmail.moviesflix.xyz
*.www.moviesflix.xyz
*.xyz.moviesflix.xyz
*.yummly.moviesflix.xyz
niveditha.com
*.niveditha.com
stylis.com
*.stylis.com
Other domains in certificate