Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=betwin-parimatchh.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 12, 2026
Valid Until
December 11, 2026
34 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
6D:AF:06:C8:15:08:86:AF:A5:CB:A2:BD:1C:F1:DF:99:40:3A:91:43:4A:54:FA:55:83:46:F1:78:66:7A:A3:99
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
79 domains
enviofacil.it
*.enviofacil.it
*.admin.enviofacil.it
*.api.enviofacil.it
*.demo.enviofacil.it
*.dev.enviofacil.it
*.staging.enviofacil.it
1lordserial.buzz
*.1lordserial.buzz
*.admin.1lordserial.buzz
*.dev.1lordserial.buzz
*.portal.1lordserial.buzz
*.ww38.1lordserial.buzz
actvid.com
*.actvid.com
*.admin.actvid.com
*.dashboard.actvid.com
*.img.actvid.com
*.ww01.actvid.com
*.ww12.actvid.com
*.www.actvid.com
*.admin.alsauditibbifoundation.com
alsauditibbifoundation.com
*.alsauditibbifoundation.com
*.app.alsauditibbifoundation.com
*.dev.alsauditibbifoundation.com
*.staging.alsauditibbifoundation.com
*.admin.ayucasino88d.xyz
*.app.ayucasino88d.xyz
ayucasino88d.xyz
*.ayucasino88d.xyz
*.cicd.ayucasino88d.xyz
*.dev.ayucasino88d.xyz
*.eu.ayucasino88d.xyz
*.random.ayucasino88d.xyz
*.staging.ayucasino88d.xyz
betwin-parimatchh.com
*.betwin-parimatchh.com
*.amazon-update-helstek.cinenorte.com
cinenorte.com
*.cinenorte.com
*.portal.cinenorte.com
*.sistema.cinenorte.com
*.app.clzxqc.com
*.blz.clzxqc.com
clzxqc.com
*.clzxqc.com
*.kfcq.clzxqc.com
*.lfoplb.clzxqc.com
*.mha.clzxqc.com
*.nw66.clzxqc.com
*.qbyd7.clzxqc.com
*.vjce.clzxqc.com
*.admin-private.gaypornstage.cc
*.admin-web.gaypornstage.cc
*.admin.gaypornstage.cc
*.app.gaypornstage.cc
*.beta.gaypornstage.cc
*.dashboard.gaypornstage.cc
*.dev.gaypornstage.cc
gaypornstage.cc
*.gaypornstage.cc
*.portal.gaypornstage.cc
*.staging.gaypornstage.cc
*.test.gaypornstage.cc
*.api.loo3.com
*.dev.loo3.com
loo3.com
*.loo3.com
*.random.loo3.com
*.admin.maerith.website
*.app.maerith.website
*.dashboard.maerith.website
*.dev.maerith.website
maerith.website
*.maerith.website
*.portal.maerith.website
*.staging.maerith.website
*.try.maerith.website
Other domains in certificate