Open
Cached
·
4h ago
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=ztjyspx.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 08, 2026
Valid Until
December 07, 2026
30 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
64:1D:A4:DA:CF:1B:29:77:41:A6:15:8B:56:4A:B3:8C:D9:B8:17:E9:25:A5:31:24:60:F3:9B:10:A6:4F:23:20
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
pegu.it
*.pegu.it
*.analytics.pegu.it
*.app.pegu.it
*.backend.pegu.it
*.dev.pegu.it
*.hostmaster.pegu.it
*.metric.pegu.it
*.notexistsadmin.pegu.it
*.supersets.pegu.it
*.visual.pegu.it
*.www.pegu.it
*.airflow.emancial.me
*.beta.emancial.me
*.dashboard.emancial.me
*.demo.emancial.me
*.elasticsearch.emancial.me
emancial.me
*.emancial.me
*.reporting.emancial.me
*.superset.emancial.me
*.et.graphistik.com
graphistik.com
*.graphistik.com
*.it.graphistik.com
*.sl.graphistik.com
*.sr.graphistik.com
*.admin.mauslot.store
*.app.mauslot.store
mauslot.store
*.mauslot.store
*.portal.mauslot.store
*.sitemap.mauslot.store
*.staging.mauslot.store
*.test.mauslot.store
*.app.ohora.biz
ohora.biz
*.ohora.biz
*.staging.ohora.biz
*.www.ohora.biz
*.admin.outhouse.it
*.backend.outhouse.it
*.demo.outhouse.it
*.dev.outhouse.it
*.hostmaster.outhouse.it
outhouse.it
*.outhouse.it
*.owa.outhouse.it
*.report.outhouse.it
*.supersets.outhouse.it
p90.bet
*.p90.bet
*.staging.p90.bet
*.mx.prestitifacile.it
prestitifacile.it
*.prestitifacile.it
*.admin.psicooncologa.com
*.app.psicooncologa.com
*.dev.psicooncologa.com
psicooncologa.com
*.psicooncologa.com
*.staging.psicooncologa.com
*.test.psicooncologa.com
*.internal.sexmilf.pro
sexmilf.pro
*.sexmilf.pro
sportillustrato.it
*.sportillustrato.it
*.admin.trojanvpn.xyz
*.app.trojanvpn.xyz
*.dashboard.trojanvpn.xyz
*.de1.trojanvpn.xyz
*.fr1.trojanvpn.xyz
*.is2.trojanvpn.xyz
*.nl1.trojanvpn.xyz
*.portal.trojanvpn.xyz
*.staging.trojanvpn.xyz
*.test.trojanvpn.xyz
trojanvpn.xyz
*.trojanvpn.xyz
*.us1.trojanvpn.xyz
*.oa.ztjyspx.com
*.ww.ztjyspx.com
*.ww2.ztjyspx.com
*.ww25.ztjyspx.com
*.ww38.ztjyspx.com
*.www.ztjyspx.com
ztjyspx.com
*.ztjyspx.com
Other domains in certificate