Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=jstv1857.xyz
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 18, 2026
Valid Until
December 17, 2026
57 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
1C:FD:B0:41:BE:0B:7A:18:9B:E4:0D:D1:5C:55:D4:FA:25:19:8D:44:74:CC:88:06:92:6C:46:3C:94:C0:8E:0F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
homeowner.live
*.homeowner.live
179902.com
*.179902.com
68qbetpg.com
*.68qbetpg.com
allworld-ai.com
*.allworld-ai.com
canna7.com.cn
*.canna7.com.cn
clickmaster789.info
*.clickmaster789.info
cn-zh-qtsports.com
*.cn-zh-qtsports.com
dady8888.net
*.dady8888.net
ekqzsp.com.cn
*.ekqzsp.com.cn
exclusivemarketingsolutions.com
*.exclusivemarketingsolutions.com
fusionomnix.buzz
*.fusionomnix.buzz
getupload-mscenter.pro
www.getupload-mscenter.pro
gkatv.link
*.gkatv.link
hubsmmpanel.com
*.hubsmmpanel.com
influxcode-pro.org
*.influxcode-pro.org
jjsrc12.com
*.jjsrc12.com
*.4hv31w.jstv1857.xyz
*.8j64j3v.jstv1857.xyz
*.8tcwkrf.jstv1857.xyz
*.8zkrhnq.jstv1857.xyz
*.ae9lur.jstv1857.xyz
*.daaboluo.jstv1857.xyz
*.eod4gh.jstv1857.xyz
*.guochan.jstv1857.xyz
*.hongyanyixiao.jstv1857.xyz
*.i40jtk.jstv1857.xyz
*.iinrz2.jstv1857.xyz
jstv1857.xyz
*.jstv1857.xyz
*.juru.jstv1857.xyz
*.qr531i.jstv1857.xyz
*.ww25.jstv1857.xyz
*.ww38.jstv1857.xyz
*.xiangjiao.jstv1857.xyz
*.xotcto.jstv1857.xyz
jwm-s-hyuyuhf.top
*.jwm-s-hyuyuhf.top
kishalayanidhi.com
*.kishalayanidhi.com
knacquisition.com
*.knacquisition.com
kurierservices.com
*.kurierservices.com
lesmeilleuresmontres.com
*.lesmeilleuresmontres.com
mathperiod.com
*.mathperiod.com
megishatech.com
*.megishatech.com
snapwords.com
*.snapwords.com
sparkling.app
*.sparkling.app
storehamtt.shop
www.storehamtt.shop
supertrust.org
*.supertrust.org
tongkula.com.cn
*.tongkula.com.cn
www678333.vip
*.www678333.vip
xyjbyl.com.cn
*.xyjbyl.com.cn
*.d.xyyds78.xyz
*.ed3409f1-333b-4860-b034-93073da5b713.xyyds78.xyz
*.sitemaps.xyyds78.xyz
*.ww25.xyyds78.xyz
*.ww38.xyyds78.xyz
*.www.xyyds78.xyz
*.www1.xyyds78.xyz
*.www70.xyyds78.xyz
xyyds78.xyz
*.xyyds78.xyz
Other domains in certificate