76/100 SECURITY SCORE

Certificate Information

Subject
CN=anbox.cc
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 31, 2026
Valid Until
May 01, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FE:0C:FC:B4:AB:44:8B:C1:E3:93:26:48:72:31:9F:96:85:F9:C7:F9:62:05:A0:3E:2E:74:57:36:CC:78:77:FA
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
barnils.com *.barnils.com *.client.barnils.com

Other domains in certificate

*.72qu6661.anbox.cc anbox.cc *.anbox.cc *.clubo3.anbox.cc *.ffffffffffff.anbox.cc *.i11.anbox.cc *.if.anbox.cc *.tomia.anbox.cc *.ww25.anbox.cc
*.2fwww.attessia.tv attessia.tv *.attessia.tv *.beta.attessia.tv
bachelorsdegree.guide *.bachelorsdegree.guide *.communications.bachelorsdegree.guide *.healthcare-administration.bachelorsdegree.guide *.project-management.bachelorsdegree.guide *.sports-management.bachelorsdegree.guide
casarseenperu.info *.casarseenperu.info *.cpcontacts.casarseenperu.info *.online.casarseenperu.info
coincap.space *.coincap.space *.exchange.coincap.space *.mail.coincap.space *.school.coincap.space
intimaterobo.com *.intimaterobo.com *.www.intimaterobo.com
*.hostmaster.thebestclass.com thebestclass.com *.thebestclass.com
*.backup.topulence.com *.ee1a5e2c-5d16-4add-b278-ab5853aa7edb.topulence.com topulence.com *.topulence.com
*.55183.travelocity.au *.mailserver.travelocity.au travelocity.au *.travelocity.au *.tripadvisor.travelocity.au
*.d.watchhdplustv.xyz *.mail.watchhdplustv.xyz *.random.watchhdplustv.xyz watchhdplustv.xyz *.watchhdplustv.xyz *.webmail.watchhdplustv.xyz *.wildcard.watchhdplustv.xyz *.ww25.watchhdplustv.xyz
*.ap.zipy.site *.aw.zipy.site *.b4.zipy.site *.bb.zipy.site *.bc.zipy.site *.bp.zipy.site *.bt.zipy.site *.cc.zipy.site *.cf.zipy.site *.d3.zipy.site *.dm.zipy.site *.gc.zipy.site *.gf.zipy.site *.gy.zipy.site *.ib.zipy.site *.iu.zipy.site *.jc.zipy.site *.lg.zipy.site *.lh.zipy.site *.oh.zipy.site *.ok.zipy.site *.pc.zipy.site *.ps.zipy.site *.pv.zipy.site *.rl.zipy.site *.rz.zipy.site *.service.zipy.site *.tk.zipy.site *.tq.zipy.site *.v5.zipy.site *.wap.zipy.site *.wiki.zipy.site *.xd.zipy.site *.xq.zipy.site zipy.site *.zipy.site