Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=12y.me
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 04, 2026
Valid Until
September 02, 2026
79 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F8:24:7D:64:BE:4A:5A:AB:72:BB:89:D4:35:BF:24:D6:E7:F4:87:FC:43:FB:B8:41:98:AE:77:78:2C:45:4C:DD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
cheapsaws.com
*.cheapsaws.com
12y.me
*.12y.me
444qq30.xyz
*.444qq30.xyz
5325ss11.com
*.5325ss11.com
763661.my
*.763661.my
7hguy.cfd
*.7hguy.cfd
7ljxe.sbs
*.7ljxe.sbs
7whitehorses.com
*.7whitehorses.com
abrajal.com
*.abrajal.com
acommittee.com
*.acommittee.com
acommnder.com
*.acommnder.com
aconstntly.com
*.aconstntly.com
aconvince.com
*.aconvince.com
acriticize.com
*.acriticize.com
adefensive.com
*.adefensive.com
adeprtment.com
*.adeprtment.com
adrmticlly.com
*.adrmticlly.com
advanced-it.top
*.advanced-it.top
advancefuturehopehubinvestment.com
*.advancefuturehopehubinvestment.com
affyolamsproperty.com
*.affyolamsproperty.com
aladdinloanp2p.com
*.aladdinloanp2p.com
alcoholaccidents.com
*.alcoholaccidents.com
ancientegyptculture.com
*.ancientegyptculture.com
anglogoldghana.com
*.anglogoldghana.com
anso.studio
*.anso.studio
apopultion.com
*.apopultion.com
aram-x.com
*.aram-x.com
astunnelnet.xyz
*.astunnelnet.xyz
asupanku.live
*.asupanku.live
audioshelves.com
*.audioshelves.com
bao-bsi.com
*.bao-bsi.com
bestiescafehtx.com
*.bestiescafehtx.com
bizsolution.pro
*.bizsolution.pro
bobspeed.com
*.bobspeed.com
bottomupcorporation.com
*.bottomupcorporation.com
breaksee.com
*.breaksee.com
casinoslotfree.com
*.casinoslotfree.com
cellufend-us.us
*.cellufend-us.us
chat-ngoom-elyamn.top
*.chat-ngoom-elyamn.top
cheapaudiocables.com
*.cheapaudiocables.com
cityofhopeonlinetrading.com
*.cityofhopeonlinetrading.com
clonedcardsnearme.com
*.clonedcardsnearme.com
crocodile.tv
*.crocodile.tv
ctvacationrentals.info
*.ctvacationrentals.info
kazcapitalupdates.com
*.kazcapitalupdates.com
Other domains in certificate