Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=2990b2990.co
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 18, 2026
Valid Until
August 16, 2026
73 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A1:62:CE:64:57:C2:6D:E7:0D:77:B3:61:C7:C4:EC:83:AE:D4:48:2B:43:B0:FA:ED:09:88:A2:FC:50:0A:D9:E5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
ujwes.sbs
*.ujwes.sbs
2990b2990.co
*.2990b2990.co
3zxfvywah83it.cc
*.3zxfvywah83it.cc
8359394.cc
*.8359394.cc
aysehepister.sbs
*.aysehepister.sbs
bakedstock.us
*.bakedstock.us
baldassari.buzz
*.baldassari.buzz
battenfield.buzz
*.battenfield.buzz
benefisbroker.us
*.benefisbroker.us
bryondhere.us
*.bryondhere.us
c5eb3qgyq.top
*.c5eb3qgyq.top
cash-app-mrbeast.buzz
*.cash-app-mrbeast.buzz
fs668356.cc
*.fs668356.cc
fy894gqr1j5.us
*.fy894gqr1j5.us
fyykagafjdz.us
*.fyykagafjdz.us
gdxxyagoo.us
*.gdxxyagoo.us
geicozoom.us
*.geicozoom.us
geograhy-test-80.us
*.geograhy-test-80.us
handbagsoutlets.us
*.handbagsoutlets.us
hippatraining.us
*.hippatraining.us
lantanalodge.us
*.lantanalodge.us
masstimesnearme.us
*.masstimesnearme.us
mm33.bet
*.mm33.bet
msc-digital.us
*.msc-digital.us
ngf36.icu
*.ngf36.icu
nikeairmaxone.us
*.nikeairmaxone.us
nwkwnt-va.us
*.nwkwnt-va.us
olukaioutletfactory.us
*.olukaioutletfactory.us
open4biz.us
*.open4biz.us
parrotpalace.us
*.parrotpalace.us
playmonopolycodes.us
*.playmonopolycodes.us
qndzfifim.us
*.qndzfifim.us
rupiah268game.com
*.rupiah268game.com
sec-tl-129-e.buzz
*.sec-tl-129-e.buzz
seocopywriter.au
*.seocopywriter.au
sportslogic.us
*.sportslogic.us
sunhomedecor.us
*.sunhomedecor.us
terraswing.us
*.terraswing.us
teslafunds.us
*.teslafunds.us
test-patonmarketing.us
*.test-patonmarketing.us
truffled.us
*.truffled.us
tttzzz91.cn
*.tttzzz91.cn
uznswubvjnb.us
*.uznswubvjnb.us
xn--ykr0q.com
*.xn--ykr0q.com
xturkhubx.click
*.xturkhubx.click
Other domains in certificate