Allowed
Domain intelligence
Security Report for
A closer look at this domain’s security, infrastructure, and public records. Findings first, with the evidence behind every result.
Explore the reportWebsite Security
HTTPS, browser protections, DNS controls and known threats
Grade A #2 of 57
Strong website security
The public security settings RequestGuard checked are well configured.
A94/100
Secure connection
Strong40/40
Browser protections
Needs work24/30
Domain protection
Strong15/15
Known threats
Strong15/15
Fix these first
- 1
Content security policy
4/10To earn 10/10, remove *, http:, https:, data:, 'unsafe-inline', and 'unsafe-eval' from script-src or its default-src fallback. Allow exact hosts and use per-request nonces or hashes for required inline scripts.
Strongest results
-
HTTPS response
15/15HTTPS returned status 403.
-
Valid TLS certificate
10/10The TLS certificate is valid for this domain.
-
DNSSEC
8/8DNSSEC validation data was found.
All 15 security checks
Every result is shown, with what it means and how to fix it.
Working 15/15
HTTPS response
HTTPS returned status 403.
Working 10/10
Valid TLS certificate
The TLS certificate is valid for this domain.
Working 5/5
HTTP redirects to HTTPS
HTTP redirects to HTTPS.
Working 5/5
Modern TLS
TLSv1.3 was negotiated.
Working 5/5
Strict transport security
Strict-Transport-Security covers at least 180 days.
Could be stronger 4/10
Content security policy
Content-Security-Policy is enforced but allows broad script sources.
To earn 10/10, remove *, http:, https:, data:, 'unsafe-inline', and 'unsafe-eval' from script-src or its default-src fallback. Allow exact hosts and use per-request nonces or hashes for required inline scripts.
Working 5/5
Frame protection
The response limits which sites may frame it.
Working 5/5
Content type protection
Content type sniffing is disabled.
Working 5/5
Referrer policy
Referrer-Policy uses same-origin.
Working 5/5
Browser permissions policy
Common sensitive browser capabilities are disabled by default.
Working 8/8
DNSSEC
DNSSEC validation data was found.
Working 7/7
Certificate authority restriction
CAA records restrict certificate issuance.
Working 6/6
Known malware reports
No active malware-distribution URL was reported.
Working 5/5
Threat-blocking DNS
3 threat-protection resolvers returned the domain.
Working 4/4
Domain blocklists
The domain did not match the checked domain blocklists.
This dated automated check does not verify the business, its content, or every page. The score describes the configuration observed during this scan.
Badges and embed code
Embed code
<a href="https://requestguard.com/domain/llmbase.ai/">
<img src="https://requestguard.com/domain/llmbase.ai/badges/security.svg" alt="Website security grade for llmbase.ai" width="160" height="44" loading="lazy" decoding="async" fetchpriority="low">
</a>Embed code
<a href="https://requestguard.com/domain/llmbase.ai/#infrastructure">
<img src="https://requestguard.com/domain/llmbase.ai/badges/location.svg" alt="Network location for llmbase.ai" width="160" height="44" loading="lazy" decoding="async" fetchpriority="low">
</a>Embed code
<a href="https://requestguard.com/domain/llmbase.ai/">
<img src="https://requestguard.com/domain/llmbase.ai/badges/trust.svg" alt="Trust badge for llmbase.ai" width="160" height="44" loading="lazy" decoding="async" fetchpriority="low">
</a>Embed code
<a href="https://requestguard.com/domain/llmbase.ai/#whois">
<img src="https://requestguard.com/domain/llmbase.ai/badges/domain-rating.svg" alt="Domain Rating for llmbase.ai" width="160" height="44" loading="lazy" decoding="async" fetchpriority="low">
</a> Use these results through the API
API requests require a workspace key and a plan with Lookups access.
The hosted badge updates after a manual scan. A downloaded badge stays static and avoids contacting RequestGuard on page views.
Search visibility
Homepage signals that can affect crawling and indexing
Obstacles found
The crawler found technical obstacles that may prevent access or indexing. Start with the flagged checks below.
6 homepage checks · Unscored
Observed request
Obstacle
Automated crawler access
a Cloudflare browser challenge was served instead of the public homepage (HTTP 403).
Review the hosting firewall or bot-protection rules. Public pages should not require a JavaScript challenge, and verified search crawlers should be exempt from automated challenges.
Not checked
Indexing directives
A browser challenge was returned instead of the homepage, so its robots metadata could not be checked.
Clear
robots.txt homepage rule
No robots.txt rule blocking Googlebot from the homepage was found.
Not checked
Canonical URL
A browser challenge was returned instead of the homepage, so its canonical URL could not be checked.
Obstacle
Search-readable HTML
The sampled response contains a Cloudflare browser challenge, not the public page content.
Serve the public HTML to crawlers without requiring a JavaScript security challenge.
Clear
Sitemap discovery
robots.txt declares 1 sitemap.
This is not a Google index lookup. RequestGuard tests public signals with an identified automated crawler. Only URL Inspection for a verified Google Search Console property can confirm Google's last crawl, selected canonical, and indexing decision.
Open Google's URL Inspection guideCached result
Public exposure
Sensitive files and public administrative interfaces
Not checked—run a website scan.
Checks 100 common paths and up to 50 technology-specific paths. Opening this report does not start exposure checks.
These are bounded, unauthenticated crawler observations, not a penetration test. A public login is not automatically a vulnerability. Secret values are discarded. Findings do not affect your security score.
Server Infrastructure
Resolved addresses, networks, and hosting providers
DNS Records
A, AAAA, MX, and resolving certificate hostnames, with other record types on demand
Email & DNS Security
MX, SPF, DMARC, DNSSEC, and CAA posture
WHOIS & Registrar
Registration details via RDAP
Registered 1.2 years ago
Registration history and published ownership records. Domain age and Domain Rating are context, not a security verdict.
Registrar
Registration dates
Domain age
1.2 years
Created
Jul 7, 2025
Updated
Sep 11, 2026
Expires
Jul 7, 2027
Registrant
Organization Privacy service provided by Withheld for Privacy ehf
Email 3119c5bfa5204748b21c8cd30b94081a.protect@withheldforprivacy.com
Phone +354.4212434
Location 
Reykjavik, Capital Region, IS
Reykjavik, Capital Region, IS Domain status
Registry status codes — green means the owner locked out unauthorized changes
Transfer locked
Checked
Reputation & DNS filtering
Resolver behavior, domain datasets, and server-IP evidence
No threat match
Resolver summary
No match found in 3 checked threat-protection resolvers.
Checked . No-match results apply only to the sources that returned comparable evidence.
Resolver filtering records provider behavior. It does not by itself prove that a domain is malicious.
Resolver matrix
Five public filtering policies compared with neutral DNS
Threat protection
Malware and phishing policy
Ads & tracking
Mixed privacy and security policy
Allowed
Family / content
Content and security policy
Allowed
Reputation datasets
URL and domain-list evidence, separate from resolver policy
URLhaus No match
Reported malware-distribution URLs
SURBL (via URLhaus) Unavailable
URLhaus metadata; this is not a direct SURBL query
Spamhaus DBL (via URLhaus) Unavailable
URLhaus metadata; this is not a direct Spamhaus DBL query
Server-IP DNSBL checks & threat feeds 
104.26.15.60
DNSBL and network-feed matches do not determine the domain verdict. Shared hosting, reverse proxies, and CDNs can put unrelated domains on the same address.
Barracuda
b.barracudacentral.org
SpamCop
bl.spamcop.net
UCEPROTECT L1
dnsbl-1.uceprotect.net
DroneBL
dnsbl.dronebl.org
Unavailable
Unavailable
Unavailable
Unavailable
Unavailable
Unavailable
NextDNS and other custom profiles are not tested because their result depends on enabled lists, security settings, and parental controls. Check the provider log for the exact rule.
Cached result