Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=xh1080.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 08, 2026
Valid Until
July 07, 2026
55 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FE:6F:D7:52:AF:A3:14:B5:FF:17:62:32:04:30:B1:24:16:A3:AB:14:E7:25:92:17:39:4F:AE:A0:26:4F:9D:5F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
zik88.me
*.zik88.me
*.demo.zik88.me
bcbswa.com
*.bcbswa.com
*.order.bcbswa.com
*.ww25.bcbswa.com
blackturtle.co
*.blackturtle.co
bleedcover.info
*.bleedcover.info
blockchaupinment.com
*.blockchaupinment.com
brandingbybooksgenius.com
*.brandingbybooksgenius.com
britdex.com
*.britdex.com
catzilo.com
*.catzilo.com
cellulite-treatment-100002.sbs
*.cellulite-treatment-100002.sbs
checkoutrealestate.com
*.checkoutrealestate.com
citypatrolsecurity.com
*.citypatrolsecurity.com
coldconnectss.com
*.coldconnectss.com
d73y.com
*.d73y.com
dental-implant-trial-elite-361.sbs
*.dental-implant-trial-elite-361.sbs
dfmuu.earth
*.dfmuu.earth
dnrsb.bid
*.dnrsb.bid
emberclothing.com
*.emberclothing.com
f21.co
*.f21.co
fabet.party
*.fabet.party
fhoflyh.cc
*.fhoflyh.cc
kc-mall.net
*.kc-mall.net
*.www.kc-mall.net
ofeju.care
*.ofeju.care
ogmc.io
*.ogmc.io
onlineservice.ai
*.onlineservice.ai
pipelineinnovators.com
*.pipelineinnovators.com
planet88.news
*.planet88.news
plus.asia
*.plus.asia
posei-don.org
*.posei-don.org
premierfitnesshub.club
*.premierfitnesshub.club
pygones.com
*.pygones.com
qecfq.work
*.qecfq.work
qpklt.today
*.qpklt.today
qqefaud1368.vip
*.qqefaud1368.vip
quantumconsultinggroup.download
*.quantumconsultinggroup.download
qvqqp.city
*.qvqqp.city
qwibfb.ren
*.qwibfb.ren
qwibfc.reviews
*.qwibfc.reviews
qwibfp.reviews
*.qwibfp.reviews
qwibfx.reviews
*.qwibfx.reviews
qznlm.loans
*.qznlm.loans
qzyqgw.reviews
*.qzyqgw.reviews
*.a.xh1080.com
*.ww17.xh1080.com
xh1080.com
*.xh1080.com
Other domains in certificate