Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=moongolfcourse.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 13, 2026
Valid Until
December 12, 2026
55 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
65:47:17:CF:9E:2F:6F:14:AD:29:F1:70:F5:56:F5:6B:8E:E9:37:EA:0C:7E:4C:CD:0A:AE:92:47:82:3F:FF:13
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
aussieracer.au
*.aussieracer.au
apunkabollwood.com
*.apunkabollwood.com
bjvacations.com
*.bjvacations.com
*.random.bjvacations.com
catcher.uk
*.catcher.uk
centralasianwolfdog.com
*.centralasianwolfdog.com
*.members.centralasianwolfdog.com
cocabichon.com
*.cocabichon.com
*.dev.cocabichon.com
dbv.au
*.dbv.au
*.ww25.dbv.au
*.ww38.dbv.au
dentistmaryborough.au
*.dentistmaryborough.au
*.random.dentistmaryborough.au
dksneyplus.com
*.dksneyplus.com
9k.dogodungmanh.com
caslogin.dogodungmanh.com
dogodungmanh.com
ftp.dogodungmanh.com
old.dogodungmanh.com
www.dogodungmanh.com
dogsfrosale.com
*.dogsfrosale.com
electricalengineers.au
*.electricalengineers.au
*.4d55bbf6-d36e-4cd8-a344-bc2bb2387453.familyfollar.com
*.cpanel.familyfollar.com
familyfollar.com
*.familyfollar.com
*.random.familyfollar.com
adminlogin.freshpeachdine.com
apps.freshpeachdine.com
freshpeachdine.com
old.freshpeachdine.com
www.freshpeachdine.com
gusrxy.cfd
www.gusrxy.cfd
infinityfields.com
*.infinityfields.com
ares.joalpepop.shop
joalpepop.shop
m.joalpepop.shop
www.joalpepop.shop
krigers.com
*.krigers.com
*.ww1.krigers.com
*.ww16.krigers.com
*.www.krigers.com
lords.au
*.lords.au
matousamoa.com
*.matousamoa.com
*.wrty.matousamoa.com
medicareproviderscigna.com
*.medicareproviderscigna.com
melifilm1.com
*.melifilm1.com
moongolfcourse.com
*.moongolfcourse.com
*.random.moongolfcourse.com
*.ww38.moongolfcourse.com
ndp.net.au
*.ndp.net.au
*.random.ndp.net.au
nysdcp.org
*.nysdcp.org
*.ww38.nysdcp.org
*.civil.ocsheriff.com
ocsheriff.com
*.ocsheriff.com
*.rt.ocsheriff.com
*.ww17.ocsheriff.com
painterpla.net
*.painterpla.net
strameast.sk
*.strameast.sk
*.wildcard.strameast.sk
*.ww38.strameast.sk
weztter.de
*.weztter.de
*.ww38.weztter.de
Other domains in certificate