Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=acocobuydirect.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 17, 2026
Valid Until
May 18, 2026
81 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
32:C2:AF:D0:88:5F:F5:F1:2E:65:F2:80:1B:29:E9:71:DC:E3:74:84:F5:A3:6D:5A:FC:16:FD:D8:0A:63:16:2E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
selfims.com
*.selfims.com
10967.cc
*.10967.cc
17584.best
*.17584.best
26843.baby
*.26843.baby
4888cp2.cfd
*.4888cp2.cfd
700671.xyz
*.700671.xyz
700761.xyz
*.700761.xyz
700765.xyz
*.700765.xyz
700781.xyz
*.700781.xyz
75708.cc
*.75708.cc
86514.cc
*.86514.cc
9fbprr.top
*.9fbprr.top
acocobuydirect.com
*.acocobuydirect.com
*.info.acocobuydirect.com
arbworld.consulting
*.arbworld.consulting
aystgf.net
*.aystgf.net
bftlc.cc
*.bftlc.cc
chatgpt-168.xyz
*.chatgpt-168.xyz
chckenroad.sbs
*.chckenroad.sbs
cheapautoshipping.com
*.cheapautoshipping.com
checkforfraud.com
*.checkforfraud.com
ciasewq66775dsaew02wqdme.top
*.ciasewq66775dsaew02wqdme.top
cosmoadventure43.shop
*.cosmoadventure43.shop
cranberrydance.com
*.cranberrydance.com
e-girls.co
*.e-girls.co
emaildtatls.shop
*.emaildtatls.shop
forumzy.com
*.forumzy.com
gardenessencer.com
*.gardenessencer.com
gardenfreshs.com
*.gardenfreshs.com
gardenmagics.com
*.gardenmagics.com
gbaycarbontest.xyz
*.gbaycarbontest.xyz
homeblisspros.com
*.homeblisspros.com
homeblisss.com
*.homeblisss.com
homeessencer.com
*.homeessencer.com
homerefreshs.com
*.homerefreshs.com
pokerstudhold.com
*.pokerstudhold.com
qqixbc.vip
*.qqixbc.vip
repent.co.za
*.repent.co.za
tailoredweddingsevents.beauty
*.tailoredweddingsevents.beauty
titan-band.com
*.titan-band.com
*.remote.todochollo.com
todochollo.com
*.todochollo.com
totoslot138mantap.skin
*.totoslot138mantap.skin
vertexexplorer154.top
*.vertexexplorer154.top
vertexmarkets.online
*.vertexmarkets.online
wyomingsolarpower.com
*.wyomingsolarpower.com
Other domains in certificate