Open
Cached
·
just now
78/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=buduo.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 11, 2026
Valid Until
December 10, 2026
33 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
07:F3:AB:B3:43:0E:2D:34:E6:AB:1F:AB:79:FD:D9:B8:19:88:D0:D6:8D:7C:36:41:2E:A0:3D:A3:60:80:24:C2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
buduo.com
*.buduo.com
*.facebook.buduo.com
384263.lol
*.384263.lol
*.chat.384263.lol
akdsecurities.com
*.akdsecurities.com
bobmarleymovement.com
*.bobmarleymovement.com
*.backend.chaudron.it
chaudron.it
*.chaudron.it
*.crm.chaudron.it
*.hostmaster.chaudron.it
*.mail.chaudron.it
*.webmail.chaudron.it
chiarello.com
*.chiarello.com
cowboyroofing.com
*.cowboyroofing.com
cucutv.lat
*.cucutv.lat
*.sitemaps.cucutv.lat
digienglandweb.xyz
*.digienglandweb.xyz
*.greekribs.digienglandweb.xyz
*.persona.digienglandweb.xyz
*.proactive.digienglandweb.xyz
*.punjabidhaba.digienglandweb.xyz
easysleep.com
*.easysleep.com
hirev.com
*.hirev.com
internationaldomain.com
*.internationaldomain.com
kmspico.sbs
*.kmspico.sbs
*.access.luxuryclock.it
*.admin.luxuryclock.it
*.apps.luxuryclock.it
*.backend.luxuryclock.it
*.cpanel.luxuryclock.it
*.cs.luxuryclock.it
*.dev.luxuryclock.it
*.hostmaster.luxuryclock.it
luxuryclock.it
*.luxuryclock.it
*.mail.luxuryclock.it
*.rdweb.luxuryclock.it
*.remote.luxuryclock.it
*.secure.luxuryclock.it
*.vdi.luxuryclock.it
*.vpn.luxuryclock.it
*.webdisk.luxuryclock.it
*.webmail.luxuryclock.it
*.www.luxuryclock.it
razorsonline.com
*.razorsonline.com
stemate.com
*.stemate.com
*.admin.stylestack.io
*.api.stylestack.io
*.app.stylestack.io
*.corp.stylestack.io
*.dev.stylestack.io
*.eu.stylestack.io
*.internal.stylestack.io
*.lemonsqueezy.stylestack.io
*.panel.stylestack.io
*.sandbox.stylestack.io
*.staging.stylestack.io
stylestack.io
*.stylestack.io
*.test.stylestack.io
*.us.stylestack.io
*.webapp.stylestack.io
*.m.theghostly.online
*.server.theghostly.online
*.test.theghostly.online
theghostly.online
*.theghostly.online
vidanoche.com
*.vidanoche.com
*.admin.zencloud.cc
*.cdn.zencloud.cc
*.portal.zencloud.cc
*.staging.zencloud.cc
zencloud.cc
*.zencloud.cc
Other domains in certificate