Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=1-hdfree-film.space
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 20, 2026
Valid Until
August 18, 2026
69 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
71:BA:E3:29:81:4F:3A:35:C1:C0:46:9E:32:71:10:7D:3F:10:DF:0F:97:9B:0E:14:8E:21:31:DB:48:B3:A1:88
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
agencymodelsearch.com
*.agencymodelsearch.com
*.qdrid5.agencymodelsearch.com
1-hdfree-film.space
*.1-hdfree-film.space
*.ww25.1-hdfree-film.space
aokju.com
*.aokju.com
*.img1-fg.aokju.com
*.aee.elc1.top
*.aew.elc1.top
*.agent.elc1.top
*.ai.elc1.top
*.aqd.elc1.top
*.avk.elc1.top
*.bdk.elc1.top
*.beta.elc1.top
*.bkm.elc1.top
*.bot.elc1.top
*.btk.elc1.top
*.ccr.elc1.top
*.ceq.elc1.top
*.cfw.elc1.top
*.cmn.elc1.top
*.djq.elc1.top
*.dsd.elc1.top
*.dwt.elc1.top
*.dxy.elc1.top
*.dzr.elc1.top
*.eev.elc1.top
*.ehu.elc1.top
elc1.top
*.elc1.top
*.ely.elc1.top
*.fvo.elc1.top
*.ijl.elc1.top
*.kfv.elc1.top
*.lyo.elc1.top
*.muv.elc1.top
*.onm.elc1.top
*.production.elc1.top
*.pym.elc1.top
*.rkh.elc1.top
*.rxw.elc1.top
*.ujk.elc1.top
*.vhn.elc1.top
*.ww38.elc1.top
*.xms.elc1.top
*.xsv.elc1.top
*.ybg.elc1.top
fijishower.co
*.fijishower.co
*.llm.fijishower.co
*.comwww.framebyframefilms.co
framebyframefilms.co
*.framebyframefilms.co
*.email.intensifyx.com
intensifyx.com
*.intensifyx.com
northernireland.homes
*.northernireland.homes
*.www1.northernireland.homes
*.admin.rediscoveringmystyle.com
*.autodiscover.rediscoveringmystyle.com
*.cpanel.rediscoveringmystyle.com
*.navigation.rediscoveringmystyle.com
rediscoveringmystyle.com
*.rediscoveringmystyle.com
*.careers.sonofamachine.com
*.random.sonofamachine.com
sonofamachine.com
*.sonofamachine.com
*.admin.suitecitystays.com
*.analytic.suitecitystays.com
*.api.suitecitystays.com
*.app.suitecitystays.com
*.backend.suitecitystays.com
*.cpanel.suitecitystays.com
*.demo.suitecitystays.com
*.dev.suitecitystays.com
*.home.suitecitystays.com
*.mobile.suitecitystays.com
*.news.suitecitystays.com
*.rds.suitecitystays.com
suitecitystays.com
*.suitecitystays.com
*.superset.suitecitystays.com
*.visualization.suitecitystays.com
*.web.suitecitystays.com
*.www.suitecitystays.com
Other domains in certificate