Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=21tuohs.sbs
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 27, 2026
Valid Until
August 25, 2026
72 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6E:BA:3D:C5:27:9E:FA:4D:2D:13:2B:56:97:19:6B:7A:05:10:11:34:C6:E6:38:A1:66:13:9C:BE:6D:22:BB:39
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
wiseinitiative.net
*.wiseinitiative.net
21tuohs.sbs
*.21tuohs.sbs
26762330.vip
*.26762330.vip
33253.my
*.33253.my
79829.club
*.79829.club
995621.top
*.995621.top
adhert.me
*.adhert.me
*.ww17.adhert.me
buyofficepulse.com
*.buyofficepulse.com
cosmoseeker246.info
*.cosmoseeker246.info
depthset.com
*.depthset.com
icanwin.in
*.icanwin.in
jolatksa.com
*.jolatksa.com
joywexe.com
*.joywexe.com
jpepr.cc
*.jpepr.cc
oemcs5.com
*.oemcs5.com
ozeanalabs.com
*.ozeanalabs.com
pawstia.com
*.pawstia.com
pyramidoflight.vip
*.pyramidoflight.vip
pzqrv.my
*.pzqrv.my
r7csn.lol
*.r7csn.lol
seanroperclairvoyant.co.uk
*.seanroperclairvoyant.co.uk
*.ww17.seanroperclairvoyant.co.uk
*.ww25.seanroperclairvoyant.co.uk
shalomproexpert.com
*.shalomproexpert.com
singularity.family
*.singularity.family
sittingprettyurns.com
*.sittingprettyurns.com
solar-panel-installation-6c6k3m4x0x4.sbs
*.solar-panel-installation-6c6k3m4x0x4.sbs
spomagazine.com
*.spomagazine.com
sportsteens.com
*.sportsteens.com
stadiumvibes.com
*.stadiumvibes.com
styledresser.com
*.styledresser.com
teamxchange.com
*.teamxchange.com
top-bllack-cat.com
*.top-bllack-cat.com
travelblisssphere.xyz
*.travelblisssphere.xyz
trekviia.com
*.trekviia.com
trekvivo.com
*.trekvivo.com
uitagiftsetz.org
*.uitagiftsetz.org
uiymjm.cc
*.uiymjm.cc
vitaeloe.com
*.vitaeloe.com
w13723675.com
*.w13723675.com
w13729136.com
*.w13729136.com
wagllee.com
*.wagllee.com
wise-initiative.com
*.wise-initiative.com
wise-initiative.net
*.wise-initiative.net
ylfa.xyz
*.ylfa.xyz
Other domains in certificate