Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=tiltedpineappletumblers.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 28, 2026
Valid Until
April 28, 2026
71 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1C:4D:74:02:39:D1:CF:35:C1:77:22:47:F9:1A:51:F7:95:61:2C:EB:F5:16:14:FF:0A:7F:ED:30:95:2D:84:D0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
217.live
*.217.live
2carta.com
*.2carta.com
*.ww25.2carta.com
akshaygore.tech
*.akshaygore.tech
chemindesnavigateurs.org
*.chemindesnavigateurs.org
*.test.chemindesnavigateurs.org
*.www.chemindesnavigateurs.org
comparehomewaterfilter.com
*.comparehomewaterfilter.com
cryptomutualfunds.com.au
*.cryptomutualfunds.com.au
dbfstore.tech
*.dbfstore.tech
discountepharmacy.com.au
*.discountepharmacy.com.au
*.hotfix.discountepharmacy.com.au
*.random.discountepharmacy.com.au
funnystories.com
*.funnystories.com
*.wildcard.funnystories.com
icecat.au
*.icecat.au
*.ww25.icecat.au
*.ww38.icecat.au
inobo-kiteboarding.com
*.inobo-kiteboarding.com
*.www.inobo-kiteboarding.com
juvaliant.com
*.juvaliant.com
*.random.juvaliant.com
*.dns.marhsallsfeedback.com
*.hostmaster.marhsallsfeedback.com
marhsallsfeedback.com
*.marhsallsfeedback.com
*.mx7.marhsallsfeedback.com
nudegirls.pictures
*.nudegirls.pictures
*.ww38.nudegirls.pictures
nybankruptcycounsel.com
*.nybankruptcycounsel.com
oberarmtraining.de
*.oberarmtraining.de
oldnavybarclayus.com
*.oldnavybarclayus.com
reimport-fahrzeuge.de
*.reimport-fahrzeuge.de
rossespoint.com
*.rossespoint.com
secretartlondon.uk
*.secretartlondon.uk
*.com.siteground.cm
siteground.cm
*.siteground.cm
*.ua.siteground.cm
*.ww38.siteground.cm
*.lobby.sosvip159.com
sosvip159.com
*.sosvip159.com
sportonline.ps
*.sportonline.ps
t-sellsr.com
*.t-sellsr.com
*.web.t-sellsr.com
*.mail.taito1010.com
taito1010.com
*.taito1010.com
*.ww38.taito1010.com
*.ww7.taito1010.com
tiltedpineappletumblers.com
*.tiltedpineappletumblers.com
*.ww25.tiltedpineappletumblers.com
turkeyhustlerz.com
*.turkeyhustlerz.com
*.stamp.uspsstpoutlet.com
uspsstpoutlet.com
*.uspsstpoutlet.com
*.random.westlaw.au
westlaw.au
*.westlaw.au
*.ww25.westlaw.au
*.ww38.westlaw.au
xn--duftstbe-5za.de
*.xn--duftstbe-5za.de
*.ww38.zoon.au
zoon.au
*.zoon.au
Other domains in certificate