Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bandecam.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 19, 2026
Valid Until
September 17, 2026
88 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FA:D4:98:FC:21:3C:57:90:30:7C:0C:EE:2C:D4:D5:E1:F3:2A:B5:05:4D:4E:F6:2F:25:F7:CD:33:66:13:78:07
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
bandecam.com
*.bandecam.com
*.ww17.bandecam.com
123pinoyfullmovies.com
*.123pinoyfullmovies.com
*.hostmaster.123pinoyfullmovies.com
*.ww16.123pinoyfullmovies.com
5280burritos.org
*.5280burritos.org
*.q1ikea.5280burritos.org
*.admin.asji.org
asji.org
*.asji.org
*.2b7.aw1.org
*.9c1p.aw1.org
aw1.org
*.aw1.org
*.g513.aw1.org
*.i901.aw1.org
*.np4h.aw1.org
*.suj.aw1.org
bitikbaaz.com
*.bitikbaaz.com
*.cpcalendars.bitikbaaz.com
*.cpcontacts.bitikbaaz.com
*.pay.bitikbaaz.com
calder.com.au
*.calder.com.au
*.roxanne.calder.com.au
championtiresinc.com
*.championtiresinc.com
*.e.championtiresinc.com
*.edpl01zczc.championtiresinc.com
*.m.championtiresinc.com
*.qn3vl6q4vu.championtiresinc.com
*.wildcard.championtiresinc.com
*.arayata.dila.in
dila.in
*.dila.in
*.magdiru.dila.in
ehomesltd.com
*.ehomesltd.com
freephotos.com.au
*.freephotos.com.au
*.agent.indexafrica.io
indexafrica.io
*.indexafrica.io
*.ingwe.indexafrica.io
*.bw6a1s.magentaisland.com
magentaisland.com
*.magentaisland.com
*.adultnewgrounds.moms-assistant.org
*.cuteyoungtranny.moms-assistant.org
*.dirtyteentitans.moms-assistant.org
*.funnyadult.moms-assistant.org
*.kneehighnylon.moms-assistant.org
moms-assistant.org
*.moms-assistant.org
*.sexandnylon.moms-assistant.org
*.sexyhotmilfvideos.moms-assistant.org
*.stockingsheels.moms-assistant.org
*.toonhentaimovie.moms-assistant.org
*.admin.pullcarlease.com
*.assets.pullcarlease.com
*.demo.pullcarlease.com
*.eahbeadmin.pullcarlease.com
*.members.pullcarlease.com
*.mrlgaapi.pullcarlease.com
*.ovmfya.pullcarlease.com
pullcarlease.com
*.pullcarlease.com
*.server.pullcarlease.com
*.uat.pullcarlease.com
*.wzjobbackup.pullcarlease.com
reallegal.com.au
*.reallegal.com.au
*.api.seecarlease.com
*.app.seecarlease.com
*.demo.seecarlease.com
seecarlease.com
*.seecarlease.com
*.shop.seecarlease.com
*.staging.seecarlease.com
*.uat.seecarlease.com
*.vps.seecarlease.com
*.www.seecarlease.com
*.www.xn--usikretlnpdagen-olbc.com
xn--usikretlnpdagen-olbc.com
*.xn--usikretlnpdagen-olbc.com
Other domains in certificate