Open
Cached
·
just now
78/100
SECURITY SCORE
Certificate Information
Subject
CN=uri.ginih.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 23, 2026
Valid Until
April 23, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
33:85:3E:F7:23:A2:02:B9:5E:09:EE:E9:9B:26:30:34:D0:1F:66:46:BF:25:4F:DA:2D:AE:2F:8F:84:9B:B9:23
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Weak
require-trusted-types-for; report-uri; object-src; +3 more
require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport,script-src 'report-sample' 'nonce-sYlWCQ71BSVm-aV9f1UyGQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self'
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Present
ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Significantly strengthen CSP directives
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
uri.ginih.com
destaque.acegmt.com.br
www.aglae-nice.org
links.allwiretech.com
links.apod.com.au
www.arvat.tech
train-ap.azumalab.net
dl.baikin.net
ikuiku.baikin.net
links.beiq.com
berlin-bites.co
cuatrecasas.biglelegal.com
dorda.biglelegal.com
lthv.biglelegal.com
boik.dev
address.brianreber.com
calculatorian.com
beta.calen360.com
canererdogan.tech
chibi.ai
internet-blocking.cipay.com.br
auth.waraja.com.ng
www.neupaneanish.com.np
www.davidringgenberg.ch
nejca.dev.ar
dev-apollo.devridezum.com
www.donchev.is
auth.drivemethrough.com
app.esquadriafacil.com
staging.console.firepanel.io
sports.gener8tabs.com
style.gener8tabs.com
affiliate-download-rummy-hindi.getmega.com
download-1-app-rummy.getmega.com
download-2-app-cards.getmega.com
download-2-app-rummy.getmega.com
download-app-7.getmega.com
download-app-cards-hindi.getmega.com
download-app-fruitkaat.getmega.com
download-app-pool.getmega.com
download-app-rummy.getmega.com
download-app.getmega.com
download-phonepe-app-cards.getmega.com
instagram.getmega.com
o.getmega.com
youtube.getmega.com
new.goatbet.cm
tools.growth.pro
www.i-portalen.se
ifelix.dev
jakejoris.lt
jgtl.org
brand.jointaction.solutions
josephlee.dev
koungkai168.com
laramckenzie.com
static.like.co
game.lottosocial.com
maddox.boo
www.maxplaygames.com
admin-preprod.milcontratos.com
www.mitset.tech
www.mypoetryjournal.com
nhatdangauto.com
nickstringer.dev
www.niftynet.com
nihss.plus
pay.ntb.com
nunuworks.com
www.nuzo.co
ohoclub.space
reviews.optimalpros.com
demo.peer-it.com
pimzonneveld.site
bestellen.pizzavulcano.de
api.playify.it
projectluca.com
dashboard.querofinanciar.com
planta.rembre.cl
jcp.secretarai.fr
shipvault.com
dashboard.shortedfilms.com
app.socialbureau.io
solrazr.com
portal.superdispatch.com
catch.sushibyte.io
www.talkaboat.online
tassl.com
testless.com
therapist.upliftx.net
profile.uza.moe
beebleclimbo.vidhunnan.design
beebleradarblip.vidhunnan.design
typewithraleway.vidhunnan.design
mhd.vojtechstefek.eu
dev-auth.weightlossapp.me
xn--aksjefring-5cb.no
www.xn--meistermssenaufsteigen-zlc.de
www.xn--nestelp-v1a.no
xn--z4qt9d32y.jp
Other domains in certificate