Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=studentvisa.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
November 10, 2026
Valid Until
February 08, 2027
89 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
B9:71:E2:2A:A3:34:95:C5:5D:79:FF:1C:2F:EA:AB:C4:A0:FC:9B:A0:48:2A:42:06:5D:E6:62:88:50:FE:0A:61
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
88 domains
formacion.it
*.formacion.it
*.api.formacion.it
*.app.formacion.it
*.demo.formacion.it
*.staging.formacion.it
*.superset.formacion.it
574.it
*.574.it
*.analytic.574.it
*.analytics.574.it
*.atl.574.it
*.chart.574.it
*.dash.574.it
*.dashboards.574.it
*.foot-rule.574.it
*.forces.574.it
*.forecast.574.it
*.metric.574.it
*.metrics.574.it
*.passionetennis.574.it
*.remote.574.it
*.report.574.it
*.robbreport.574.it
*.sea.574.it
*.stats.574.it
*.superset.574.it
*.supersets.574.it
*.t.574.it
*.www.574.it
betflow.casino
*.betflow.casino
*.portal.betflow.casino
bokep31.sbs
*.bokep31.sbs
*.app.construct.news
construct.news
*.construct.news
furrydetect.me
*.furrydetect.me
glowtv.live
*.glowtv.live
golden-klever.info
*.golden-klever.info
holyway.info
*.holyway.info
iasport.bet
*.iasport.bet
javasea.me
*.javasea.me
king88resmi.pro
*.king88resmi.pro
nedvizhimo.pro
*.nedvizhimo.pro
newcitiessummit2017.org
*.newcitiessummit2017.org
*.ww38.newcitiessummit2017.org
*.www.newcitiessummit2017.org
*.admin.oho.asia
*.app.oho.asia
*.dashboard.oho.asia
*.dev.oho.asia
oho.asia
*.oho.asia
*.portal.oho.asia
*.staging.oho.asia
*.test.oho.asia
pilinganddrillingcontractors.com.au
*.pilinganddrillingcontractors.com.au
pr0gramm.me
*.pr0gramm.me
r7s.info
*.r7s.info
resgade.me
*.resgade.me
secrets.cards
*.secrets.cards
setupmy.life
*.setupmy.life
studentvisa.au
*.studentvisa.au
unique-massagen.de
*.unique-massagen.de
*.www.unique-massagen.de
videothumb.io
*.videothumb.io
watchdfiles.pro
*.watchdfiles.pro
Other domains in certificate