Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=lousvillewater.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 02, 2026
Valid Until
December 31, 2026
56 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
47:A3:23:44:74:57:9C:D7:4C:CF:3D:A3:83:58:07:5A:F4:A7:8E:A3:DA:03:7D:3A:DB:A0:18:2B:4C:FE:1C:B0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
86 domains
spurl.me
*.spurl.me
*.cesia-api.spurl.me
*.cpcalendars.spurl.me
*.hostmaster.spurl.me
*.whm.spurl.me
1knph.com
*.1knph.com
*.admin.1knph.com
*.dev.1knph.com
*.www.1knph.com
*.apple.colix.com
colix.com
*.colix.com
*.discord.colix.com
*.movie4kto.colix.com
*.proccbdpwu.colix.com
*.prongcloud.colix.com
*.ptatic.colix.com
*.viola.colix.com
*.blog.forevercrane.com
forevercrane.com
*.forevercrane.com
*.hostmaster.forevercrane.com
*.mysql.forevercrane.com
*.app.hypnotherapy.it
*.bigdata.hypnotherapy.it
*.dashboard.hypnotherapy.it
*.dev.hypnotherapy.it
*.email.hypnotherapy.it
*.forecast.hypnotherapy.it
hypnotherapy.it
*.hypnotherapy.it
*.oaroyblog.hypnotherapy.it
*.pop.hypnotherapy.it
*.report.hypnotherapy.it
*.staging.hypnotherapy.it
*.superset.hypnotherapy.it
*.backup.lousvillewater.com
*.baf7d3e7-b24f-4358-a078-3ed382e0ac52.lousvillewater.com
*.cloud.lousvillewater.com
*.dashboard.lousvillewater.com
*.ebdisk.lousvillewater.com
*.ebmail.lousvillewater.com
lousvillewater.com
*.lousvillewater.com
*.mailer.lousvillewater.com
*.marketing.lousvillewater.com
*.qa.lousvillewater.com
*.random.lousvillewater.com
*.rd.lousvillewater.com
*.rds.lousvillewater.com
*.rdweb.lousvillewater.com
*.remote.lousvillewater.com
*.secure.lousvillewater.com
*.smtp.lousvillewater.com
*.staging.lousvillewater.com
*.stg.lousvillewater.com
*.test.lousvillewater.com
*.ts.lousvillewater.com
*.vpn.lousvillewater.com
*.web.lousvillewater.com
*.webdisk.lousvillewater.com
*.webmail.lousvillewater.com
*.whm.lousvillewater.com
*.www.lousvillewater.com
madonalds.co.uk
*.madonalds.co.uk
*.ww1.madonalds.co.uk
*.admin.naturain.it
*.analyze.naturain.it
*.api.naturain.it
*.app.naturain.it
*.dashboard.naturain.it
*.demo.naturain.it
*.intel.naturain.it
*.intelligence.naturain.it
*.mx.naturain.it
naturain.it
*.naturain.it
*.notexistsdev.naturain.it
*.report.naturain.it
*.research.naturain.it
*.staging.naturain.it
*.status.naturain.it
*.superset.naturain.it
Other domains in certificate