Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=photune.co
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 24, 2026
Valid Until
August 22, 2026
62 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
82:06:D8:58:B5:95:31:18:3C:61:AE:CA:7F:FF:FB:EE:6F:F3:1F:E7:00:64:6C:C6:7E:46:03:60:FE:D4:D4:09
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
freeprojectsupport.org
*.freeprojectsupport.org
*.5n2vth.freeprojectsupport.org
*.9c54aeea-234d-4f0e-8957-2f2603b0906e.freeprojectsupport.org
*.api.freeprojectsupport.org
*.assets.freeprojectsupport.org
*.demo.freeprojectsupport.org
*.dev.freeprojectsupport.org
*.e90c43e3-e1c4-467b-94a2-2c0ed715c339.freeprojectsupport.org
*.members.freeprojectsupport.org
*.smtp.freeprojectsupport.org
*.test.freeprojectsupport.org
86169888.com
*.86169888.com
*.all.86169888.com
ave-a.ai
*.ave-a.ai
*.host.ave-a.ai
*.m.ave-a.ai
*.www1.ave-a.ai
evolvex.com.au
*.evolvex.com.au
*.ww16.evolvex.com.au
*.ww38.evolvex.com.au
*.www.evolvex.com.au
fic.lol
*.fic.lol
*.www.fic.lol
geocching.com
*.geocching.com
*.mx.geocching.com
*.nullmx.geocching.com
*.ww25.geocching.com
*.2.hdkino-2025.info
*.23bcc1c7-b1de-498f-ac56-67d29203f28a.hdkino-2025.info
*.3cd7a562-be75-4de0-89f8-fddda31873ab.hdkino-2025.info
*.a.hdkino-2025.info
*.admin.hdkino-2025.info
*.api.hdkino-2025.info
*.app.hdkino-2025.info
*.assets.hdkino-2025.info
*.b03.hdkino-2025.info
*.blog.hdkino-2025.info
*.demo.hdkino-2025.info
*.dev.hdkino-2025.info
*.fanbgdev.hdkino-2025.info
hdkino-2025.info
*.hdkino-2025.info
*.mail.hdkino-2025.info
*.miutzwww2.hdkino-2025.info
*.partner.hdkino-2025.info
*.staging.hdkino-2025.info
*.www.hdkino-2025.info
photune.co
*.photune.co
*.ww38.photune.co
*.google-auth.pocket-link27.co
pocket-link27.co
*.pocket-link27.co
pornlulu.co
*.pornlulu.co
*.ww38.pornlulu.co
*.admin.sphynx.cc
*.api.sphynx.cc
*.app.sphynx.cc
*.assets.sphynx.cc
*.demo.sphynx.cc
*.dev.sphynx.cc
*.go.sphynx.cc
*.mail.sphynx.cc
sphynx.cc
*.sphynx.cc
*.test.sphynx.cc
*.ww12.sphynx.cc
*.www.sphynx.cc
*.xltkqmail.sphynx.cc
tahoesierracentury.com
*.tahoesierracentury.com
*.webmail.tahoesierracentury.com
viry.xyz
*.viry.xyz
*.ww16.viry.xyz
*.ojzg.xiaomo.cyou
xiaomo.cyou
*.xiaomo.cyou
*.hostmaster.xn--mgbx7bkesme.com
*.www.xn--mgbx7bkesme.com
xn--mgbx7bkesme.com
*.xn--mgbx7bkesme.com
Other domains in certificate