Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=touching.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 13, 2026
Valid Until
December 12, 2026
36 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
6F:89:26:88:C4:FA:94:11:85:84:C7:CE:97:0E:B9:77:13:3E:AE:6C:AD:AA:70:25:0B:0B:F9:7F:91:C9:D4:30
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
83 domains
touching.com.au
*.touching.com.au
blindsandshadesmiami.com
*.blindsandshadesmiami.com
borrowfastmoney.com
*.borrowfastmoney.com
campusarea.it
*.campusarea.it
*.hostmaster.campusarea.it
e6s5s.top
*.e6s5s.top
*.5loqy.j4lj0x5lzyo4ki.xyz
j4lj0x5lzyo4ki.xyz
*.j4lj0x5lzyo4ki.xyz
*.ww25.j4lj0x5lzyo4ki.xyz
*.ww38.j4lj0x5lzyo4ki.xyz
*.www.j4lj0x5lzyo4ki.xyz
*.xkdhz.j4lj0x5lzyo4ki.xyz
janka.it
*.janka.it
*.mx.janka.it
*.exchange.mailfast.pro
mailfast.pro
*.mailfast.pro
*.ebay.matsie.com
matsie.com
*.matsie.com
*.wiki.matsie.com
*.ww1.matsie.com
*.ww16.matsie.com
*.ww38.matsie.com
*.www.matsie.com
*.hostmaster.nineanime.to
nineanime.to
*.nineanime.to
notavel365news.com
*.notavel365news.com
paichepdx.com
*.paichepdx.com
*.wiki.paichepdx.com
*.ww38.paichepdx.com
*.www.paichepdx.com
pornhubl.co
*.pornhubl.co
*.ww16.pornhubl.co
*.ww25.pornhubl.co
api.prepaidfuneralservice.com.au
citrix.prepaidfuneralservice.com.au
dev.prepaidfuneralservice.com.au
mta-sts.prepaidfuneralservice.com.au
prepaidfuneralservice.com.au
rds.prepaidfuneralservice.com.au
remote.prepaidfuneralservice.com.au
vpn.prepaidfuneralservice.com.au
www.prepaidfuneralservice.com.au
*.mail11.protonmail.au
*.mailout.protonmail.au
protonmail.au
*.protonmail.au
*.smtpauth.protonmail.au
*.sq.protonmail.au
*.beta.silsal.academy
*.monitoring.silsal.academy
*.random.silsal.academy
*.report.silsal.academy
silsal.academy
*.silsal.academy
*.ww38.silsal.academy
*.cdn1.sirui-photo.com.au
*.inkandwpengine.sirui-photo.com.au
sirui-photo.com.au
*.sirui-photo.com.au
*.wpengine.sirui-photo.com.au
*.ww16.sirui-photo.com.au
*.random.tinydeals.com.au
tinydeals.com.au
*.tinydeals.com.au
tort.com.au
*.tort.com.au
*.app.valhallaseries.com
*.autoconfig.valhallaseries.com
valhallaseries.com
*.valhallaseries.com
Other domains in certificate