Open
Cached
·
just now
79/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=1win-application.fun
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 12, 2026
Valid Until
May 13, 2026
76 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EE:90:69:71:A0:DB:45:42:86:F3:74:34:FE:7C:92:A0:5B:74:1F:02:44:B5:A8:0B:CB:DF:E5:D5:86:F1:E7:54
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
moubei.com
*.moubei.com
1win-application.fun
*.1win-application.fun
28021.la
*.28021.la
3334111a5.sbs
*.3334111a5.sbs
ai-blocknet.xyz
*.ai-blocknet.xyz
anitahostglobal.com
*.anitahostglobal.com
blockchainmin.click
*.blockchainmin.click
calcio.vip
*.calcio.vip
campuslike.com
*.campuslike.com
cana-popesoo.sbs
*.cana-popesoo.sbs
cana-solaemeals.sbs
*.cana-solaemeals.sbs
canadianfreight.com
*.canadianfreight.com
coranano.com
*.coranano.com
nb008.com
*.nb008.com
oncloudmexico.com.mx
*.oncloudmexico.com.mx
opnhost.com
*.opnhost.com
royalpalmbeach.net
*.royalpalmbeach.net
sellatscale.com
*.sellatscale.com
sfcvdid.cyou
*.sfcvdid.cyou
smm-4trrank.icu
*.smm-4trrank.icu
software-se2.click
*.software-se2.click
sonitoto2.quest
*.sonitoto2.quest
superpianta.it
*.superpianta.it
td30472.cc
*.td30472.cc
telephone.ad
*.telephone.ad
tes86rm.cyou
*.tes86rm.cyou
tgfzk448.com
*.tgfzk448.com
therapy-note-863969034.click
*.therapy-note-863969034.click
theslatevideo.com
*.theslatevideo.com
theslatevideocrew.com
*.theslatevideocrew.com
theslatevideoteam.com
*.theslatevideoteam.com
titoid.shop
*.titoid.shop
trycuratelyaihub.com
*.trycuratelyaihub.com
trynextgensales.com
*.trynextgensales.com
tuttifood.com
*.tuttifood.com
twjk.shop
*.twjk.shop
uuu3262.top
*.uuu3262.top
verdenstudios.com
*.verdenstudios.com
vevonex.com
*.vevonex.com
vheal.cn
*.vheal.cn
vhvcvx.mobi
*.vhvcvx.mobi
vulkan24-rubles.icu
*.vulkan24-rubles.icu
wonankj.cn
*.wonankj.cn
xn--6orr38cpffvf.com
*.xn--6orr38cpffvf.com
xs10068.cc
*.xs10068.cc
Other domains in certificate