76/100 SECURITY SCORE

Certificate Information

Subject
CN=osvzx.xyz
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 15, 2026
Valid Until
May 16, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3D:B3:3E:B6:ED:CD:1A:84:2A:B6:89:5C:6C:24:89:D2:49:E3:F9:FC:85:37:0A:75:DD:92:0A:54:20:3F:40:B8
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
spawnarea.be *.spawnarea.be *.anonbook.spawnarea.be *.immanuelnet.spawnarea.be *.immanuelweb.spawnarea.be *.projects.spawnarea.be *.store.spawnarea.be

Other domains in certificate

aajtak.tech *.aajtak.tech *.ww25.aajtak.tech *.www.aajtak.tech
*.a.allboxloja.online allboxloja.online *.allboxloja.online *.alpha.allboxloja.online *.apkloja.allboxloja.online *.ativador.allboxloja.online *.d.allboxloja.online *.dream.allboxloja.online *.feratv2.allboxloja.online *.ftv.allboxloja.online *.higtv.allboxloja.online *.ibo2.allboxloja.online *.iboisa.allboxloja.online *.l.allboxloja.online *.laucher.allboxloja.online *.ot.allboxloja.online *.ott.allboxloja.online *.supertv.allboxloja.online *.tb.allboxloja.online *.unitvfree.allboxloja.online *.utvpro.allboxloja.online *.vagner.allboxloja.online *.yka.allboxloja.online
bozsi.com *.bozsi.com *.mx.bozsi.com
*.369ffc97-3f2b-46b6-bcba-b24876dc71b3.cnujwe.pro *.adguard.cnujwe.pro *.agh.cnujwe.pro *.app.cnujwe.pro *.blog.cnujwe.pro cnujwe.pro *.cnujwe.pro *.ddawwagh.cnujwe.pro *.demo.cnujwe.pro *.doh.cnujwe.pro *.doh1.cnujwe.pro *.go.cnujwe.pro *.hostmaster.cnujwe.pro *.intranet.cnujwe.pro *.mail.cnujwe.pro *.mailer.cnujwe.pro *.new.cnujwe.pro *.portal.cnujwe.pro *.qa.cnujwe.pro *.secure.cnujwe.pro *.shop.cnujwe.pro *.staging.cnujwe.pro *.stg.cnujwe.pro *.store.cnujwe.pro *.test.cnujwe.pro *.v2.cnujwe.pro *.web.cnujwe.pro *.www.cnujwe.pro
culvert.pro *.culvert.pro *.ww25.culvert.pro
*.email.hotelplayaspaguera.es hotelplayaspaguera.es *.hotelplayaspaguera.es *.random.hotelplayaspaguera.es *.www.hotelplayaspaguera.es
*.games.odinplay.net odinplay.net *.odinplay.net
*.015d12b9a95c9f13c4ac.osvzx.xyz *.0c50a8abc192352.osvzx.xyz *.5d7117d5a09c043bf79f5.osvzx.xyz *.612be4566d1fee.osvzx.xyz *.669d38ca526efd18783.osvzx.xyz *.8d19b522dbbb.osvzx.xyz *.afd6022c.osvzx.xyz *.e8b6fe81a7.osvzx.xyz osvzx.xyz *.osvzx.xyz *.tumeyf0c8eb83a6afb2e86225a.osvzx.xyz *.wildcard.osvzx.xyz *.xfqsjf8e5607bed1dc4.osvzx.xyz