Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=aiforger.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 01, 2026
Valid Until
June 30, 2026
52 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8C:7F:97:38:24:DD:B4:F0:97:2D:CF:F1:E9:2E:D7:EC:B5:CA:0A:54:30:12:CC:74:5A:41:41:77:0F:E7:9F:74
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
bollyfirst.com
*.bollyfirst.com
aiforger.com
*.aiforger.com
ambdz11.com
*.ambdz11.com
anacestry.com
*.anacestry.com
andorino.com
*.andorino.com
angel.direct
*.angel.direct
anorexia.wiki
*.anorexia.wiki
anserenelyseasian.com
*.anserenelyseasian.com
anyang-vision-bnm.click
*.anyang-vision-bnm.click
apartments-for-rent-ww-2.sbs
*.apartments-for-rent-ww-2.sbs
apartmentsforrent20f1.sbs
*.apartmentsforrent20f1.sbs
apartmeny.cyou
*.apartmeny.cyou
apparel.tv
*.apparel.tv
armada.cc
*.armada.cc
asfile.com
*.asfile.com
baongaynay.com
*.baongaynay.com
bcwwa.trade
*.bcwwa.trade
bdslot88-powerup.vip
*.bdslot88-powerup.vip
bestwomenhaircuts.com
*.bestwomenhaircuts.com
bigattempt.com
*.bigattempt.com
biogenas.com
*.biogenas.com
businesscitynews.com
*.businesscitynews.com
cambodia-visa-online.org
*.cambodia-visa-online.org
clarabosch.com
*.clarabosch.com
classromm.com
*.classromm.com
cleanliving.org
*.cleanliving.org
cleanrbuildingcarejanitorial.com
*.cleanrbuildingcarejanitorial.com
cleversimon.com
*.cleversimon.com
commishzoom.com
*.commishzoom.com
consumercelluar.com
*.consumercelluar.com
cubeinsights.ai
*.cubeinsights.ai
dailyholics.com
*.dailyholics.com
data-analytics-de-6817.click
*.data-analytics-de-6817.click
ddpbi.loan
*.ddpbi.loan
desi73.in
*.desi73.in
dewitoto.one
*.dewitoto.one
diaper-island.com
*.diaper-island.com
dogadvocate.org
*.dogadvocate.org
retailgeniemember.com
*.retailgeniemember.com
revolvefestival.com
*.revolvefestival.com
seeninlocal.com
*.seeninlocal.com
stluciataxifares.com
*.stluciataxifares.com
subseagangster.com
*.subseagangster.com
summerhills-services.com
*.summerhills-services.com
zqkas.com
*.zqkas.com
Other domains in certificate