Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=xn--flge-2ra.de
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 28, 2026
Valid Until
December 27, 2026
58 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
AB:C1:6B:F1:78:84:7C:B4:AE:7A:3E:12:87:4A:BD:72:3E:0C:F4:81:53:1D:74:E8:28:26:AA:98:2B:78:4B:43
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
fixx.com.au
*.fixx.com.au
*.analytics.fixx.com.au
*.cms.fixx.com.au
*.demo.fixx.com.au
*.dev.fixx.com.au
*.laravel.fixx.com.au
*.new.fixx.com.au
*.panel.fixx.com.au
*.ww16.fixx.com.au
*.ww17.fixx.com.au
*.ww38.fixx.com.au
abh.llc
*.abh.llc
*.accounts.abh.llc
*.admin.abh.llc
*.app.abh.llc
*.dashboard.abh.llc
*.dev.abh.llc
*.oauth.abh.llc
*.partner.abh.llc
*.services.abh.llc
*.staging.abh.llc
*.test.abh.llc
*.aff.betou.bet
*.app.betou.bet
betou.bet
*.betou.bet
*.dashboard.betou.bet
*.ww38.betou.bet
confucius.bio
*.confucius.bio
*.staging.confucius.bio
differences.com.au
*.differences.com.au
*.gitlab.differences.com.au
*.random.differences.com.au
*.ww25.differences.com.au
dropship247.com.au
*.dropship247.com.au
*.gitlab.dropship247.com.au
*.www.dropship247.com.au
*.auth.emergencycare.com.au
emergencycare.com.au
*.emergencycare.com.au
*.idpd.emergencycare.com.au
*.incoming.emergencycare.com.au
*.mail.emergencycare.com.au
*.palovpn.emergencycare.com.au
*.remote.emergencycare.com.au
*.vant.emergencycare.com.au
*.vps.emergencycare.com.au
*.webmail.emergencycare.com.au
*.admin.fashionstock.it
*.api.fashionstock.it
*.app.fashionstock.it
*.backend.fashionstock.it
*.dashboard.fashionstock.it
*.demo.fashionstock.it
*.dev.fashionstock.it
fashionstock.it
*.fashionstock.it
*.metrics.fashionstock.it
*.owa.fashionstock.it
*.random.fashionstock.it
*.report.fashionstock.it
*.stats.fashionstock.it
*.crm.feedbin.com.au
feedbin.com.au
*.feedbin.com.au
*.gitlab.feedbin.com.au
*.ns0.feedbin.com.au
*.ftp.kronprinzenpalais.de
kronprinzenpalais.de
*.kronprinzenpalais.de
*.mail.kronprinzenpalais.de
*.mailout.kronprinzenpalais.de
*.mx0.kronprinzenpalais.de
*.random.kronprinzenpalais.de
*.webmail.kronprinzenpalais.de
*.ww16.kronprinzenpalais.de
rango.pro
*.rango.pro
*.dns.rtpliveslotgacor.id
rtpliveslotgacor.id
*.rtpliveslotgacor.id
*.www.rtpliveslotgacor.id
xn--flge-2ra.de
*.xn--flge-2ra.de
Other domains in certificate