Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=twins-cafe.net
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 18, 2026
Valid Until
January 16, 2027
81 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
9D:B5:69:EB:D7:01:20:81:D0:ED:AB:C6:AF:B7:E6:05:F6:A5:D3:EB:E0:80:9A:07:C7:CF:D7:CA:DB:26:E5:DB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
anamayatanja.com
*.anamayatanja.com
*.ff.anamayatanja.com
2f5xb1kfdy.com
*.2f5xb1kfdy.com
32my.cn
*.32my.cn
*.interest.32my.cn
*.off.32my.cn
*.open.32my.cn
*.very.32my.cn
*.without.32my.cn
*.world.32my.cn
*.32.44498.bet
44498.bet
*.44498.bet
altadefinizione.io
*.altadefinizione.io
*.hostmaster.altadefinizione.io
*.shop.altadefinizione.io
*.ww2.altadefinizione.io
*.ww38.altadefinizione.io
*.www.altadefinizione.io
bdiptv.live
*.bdiptv.live
*.bk.bdiptv.live
*.chnl.bdiptv.live
*.chnls.bdiptv.live
*.ipl.bdiptv.live
*.tv.bdiptv.live
*.ww38.bdiptv.live
charmers.uk
*.charmers.uk
*.random.charmers.uk
*.autodiscover.colegiosvialesarlsura.com
colegiosvialesarlsura.com
*.colegiosvialesarlsura.com
*.ns1.colegiosvialesarlsura.com
*.ns2.colegiosvialesarlsura.com
*.ww38.colegiosvialesarlsura.com
dtp28xf7.top
*.dtp28xf7.top
exquisitegownsbyyvonne.com.au
*.exquisitegownsbyyvonne.com.au
*.mail.exquisitegownsbyyvonne.com.au
*.ww.exquisitegownsbyyvonne.com.au
*.ww25.exquisitegownsbyyvonne.com.au
*.drive.game6.club
game6.club
*.game6.club
giysneakers.com
*.giysneakers.com
*.bsc.haweun.com
haweun.com
*.haweun.com
*.cpcalendars.odhayon.com
*.mgic.odhayon.com
odhayon.com
*.odhayon.com
*.ww25.odhayon.com
*.ww38.odhayon.com
*.guiweb.phimvn22.net
*.mail.phimvn22.net
phimvn22.net
*.phimvn22.net
*.www.phimvn22.net
regieurope.org
*.regieurope.org
*.ww38.regieurope.org
salju777-rtp.live
*.salju777-rtp.live
sarahlaneritchie.net
*.sarahlaneritchie.net
sigarus18.com
*.sigarus18.com
*.ww38.sigarus18.com
*.hermes.twins-cafe.net
twins-cafe.net
*.twins-cafe.net
*.wf.twins-cafe.net
*.ww25.twins-cafe.net
vnroyal.bet
*.vnroyal.bet
*.random.yamusic.pro
*.ww16.yamusic.pro
yamusic.pro
*.yamusic.pro
yourbestfriendscloset.biz
*.yourbestfriendscloset.biz
Other domains in certificate