75/100 SECURITY SCORE

Certificate Information

Subject
CN=whatisthemaze.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 15, 2026
Valid Until
January 13, 2027 76 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
CD:3A:2D:07:6B:4F:EF:20:DF:9F:3B:90:03:DB:54:31:BC:A4:4B:9B:5C:6B:95:06:C2:35:85:3C:9E:06:D3:1F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
ecomindmentor.com *.ecomindmentor.com

Other domains in certificate

blockchainics.com *.blockchainics.com
brandforge.business *.brandforge.business
bumro.app *.bumro.app
burgzoficial.my *.burgzoficial.my
cadmv.app *.cadmv.app
cafebet777.app *.cafebet777.app
celestpath.world *.celestpath.world
clearagencynet.com *.clearagencynet.com
cowfh.tax *.cowfh.tax
daydreamgo.com *.daydreamgo.com
djzrj.one *.djzrj.one
dongbangnonglv.cn *.dongbangnonglv.cn
dynamicfitnesstrust.live *.dynamicfitnesstrust.live
ekonomikvizyon.pro *.ekonomikvizyon.pro
elevate247station.buzz *.elevate247station.buzz
entienden.com *.entienden.com
eurolink.org *.eurolink.org
euthymia.bio *.euthymia.bio
finaclearway.com *.finaclearway.com
finetrax.com *.finetrax.com
fitnessepitome.live *.fitnessepitome.live
flarec-ode247.forum *.flarec-ode247.forum
fn61vs.top *.fn61vs.top
foggerpod.com *.foggerpod.com
founddietv.com *.founddietv.com
gardenvalor.store *.gardenvalor.store
getshota.com *.getshota.com
gogl5hry.com *.gogl5hry.com
goldenpromises.beauty *.goldenpromises.beauty
gonenhours.com *.gonenhours.com
googlepx.com *.googlepx.com
googler1uz.com *.googler1uz.com
grandbetting2025-adres.com *.grandbetting2025-adres.com
gwucl.win *.gwucl.win
haminaonsite.com *.haminaonsite.com
heibaohuwei.com *.heibaohuwei.com
hypergammastudio.click *.hypergammastudio.click
jjbetapp.net *.jjbetapp.net
lucky-play-play.click *.lucky-play-play.click
mrspros.com *.mrspros.com
neuraltechbright.click *.neuraltechbright.click
nohmq.vip *.nohmq.vip
whatisthemaze.com *.whatisthemaze.com *.zyjfwwz.whatisthemaze.com