Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=ferrarusa.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 13, 2026
Valid Until
December 12, 2026
55 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
C9:36:E1:CA:AF:94:F6:82:6D:85:45:E8:63:72:E6:AE:18:CA:41:03:A3:B3:AD:15:01:E3:C8:E9:59:1B:FE:39
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
andconsulting.it
*.andconsulting.it
*.wwww.andconsulting.it
*.17.17flb.club
17flb.club
*.17flb.club
alliantenergy.co
*.alliantenergy.co
*.beta.alliantenergy.co
*.crm.alliantenergy.co
*.myaccount.alliantenergy.co
*.ww25.alliantenergy.co
*.ww38.alliantenergy.co
blozzard.com
*.blozzard.com
*.gye.blozzard.com
*.hao.blozzard.com
*.ww25.blozzard.com
ejashiko.com
*.ejashiko.com
*.word.ejashiko.com
*.ww25.ejashiko.com
*.ww38.ejashiko.com
*.bot.elanus.net
elanus.net
*.elanus.net
*.dns.ferrarusa.com
ferrarusa.com
*.ferrarusa.com
*.hostmaster.ferrarusa.com
*.mx7.ferrarusa.com
*.autodiscover.fidelcastro.org
*.cpcontacts.fidelcastro.org
fidelcastro.org
*.fidelcastro.org
*.mail.fidelcastro.org
friendspawever.com.au
*.friendspawever.com.au
gaymilitarysite.com
*.gaymilitarysite.com
*.www-1.gaymilitarysite.com
houstonpost.site
*.houstonpost.site
isoletremiti.co
*.isoletremiti.co
*.remote.isoletremiti.co
*.dw.jinwang.it
jinwang.it
*.jinwang.it
kmcc.site
*.kmcc.site
*.pop.kmcc.site
*.smtp.kmcc.site
m200.pro
*.m200.pro
*.blog.mologni.com
*.hostmaster.mologni.com
mologni.com
*.mologni.com
*.remote.mologni.com
*.cpanel.movieshdstreaming.com
movieshdstreaming.com
*.movieshdstreaming.com
*.6eed1205-ad83-4989-a783-f6962a756d60.putarankp.xyz
putarankp.xyz
*.putarankp.xyz
*.ww25.putarankp.xyz
removeicloudlock.co
*.removeicloudlock.co
*.www.removeicloudlock.co
sportscene.co.uk
*.sportscene.co.uk
*.preprod.stmatcha.com.au
stmatcha.com.au
*.stmatcha.com.au
*.ww38.stmatcha.com.au
talktitsandtequila.com
*.talktitsandtequila.com
*.ww38.talktitsandtequila.com
*.random.tradeseller.com
tradeseller.com
*.tradeseller.com
*.hostmaster.vikingsplashtours.com
*.news.vikingsplashtours.com
*.production.vikingsplashtours.com
vikingsplashtours.com
*.vikingsplashtours.com
*.ww25.vikingsplashtours.com
zeuscables.store
*.zeuscables.store
Other domains in certificate