Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=xoso66.vin
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 20, 2026
Valid Until
August 18, 2026
72 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B3:C8:E5:96:C3:BE:8A:2F:BD:61:8D:B6:B0:8D:AD:12:38:B4:76:8E:5E:DC:24:A7:D3:BD:54:7F:5D:3E:AB:32
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
xoso66.vin
*.xoso66.vin
*.app.xoso66.vin
*.dev.xoso66.vin
*.help.xoso66.vin
*.m.xoso66.vin
*.sitemaps.xoso66.vin
*.uat.xoso66.vin
*.www.xoso66.vin
bolo.baby
*.bolo.baby
*.to.bolo.baby
*.aa.createyourmood.it
*.admin.createyourmood.it
*.ae.createyourmood.it
*.af.createyourmood.it
*.ah.createyourmood.it
*.ai.createyourmood.it
*.al.createyourmood.it
*.am.createyourmood.it
*.api.createyourmood.it
*.app.createyourmood.it
*.ar.createyourmood.it
*.backend.createyourmood.it
*.bb.createyourmood.it
*.bk.createyourmood.it
*.bn.createyourmood.it
*.bo.createyourmood.it
*.bp.createyourmood.it
*.cb.createyourmood.it
*.cc.createyourmood.it
*.ck.createyourmood.it
*.cl.createyourmood.it
*.cr.createyourmood.it
createyourmood.it
*.createyourmood.it
*.ct.createyourmood.it
*.cu.createyourmood.it
*.dashboard.createyourmood.it
*.db.createyourmood.it
*.dc.createyourmood.it
*.de.createyourmood.it
*.dev.createyourmood.it
*.df.createyourmood.it
*.dg.createyourmood.it
*.ds.createyourmood.it
*.ec.createyourmood.it
*.mail.createyourmood.it
*.postmaster.createyourmood.it
*.qa-agent.createyourmood.it
*.qa.createyourmood.it
*.securesmtp.createyourmood.it
*.staging.createyourmood.it
*.www.createyourmood.it
customerstatus.co
*.customerstatus.co
*.ww25.customerstatus.co
*.ww38.customerstatus.co
heisehuixx106.top
*.heisehuixx106.top
*.hsh.heisehuixx106.top
*.khvzvxn--0oq032bvje657c.heisehuixx106.top
*.mkiyxxn--eyxv2tennwmr.heisehuixx106.top
*.siwa.heisehuixx106.top
*.xn--1lu57nj2hd6g.heisehuixx106.top
*.xn--5l1ao5f10ep3b.heisehuixx106.top
*.xn--7yqz33b6mp67t.heisehuixx106.top
mafioso.in
*.mafioso.in
*.www.mafioso.in
momentmonday.com
*.momentmonday.com
*.remote.momentmonday.com
*.ww38.momentmonday.com
*.www.momentmonday.com
*.argo.robloxlogger.com
*.backend.robloxlogger.com
robloxlogger.com
*.robloxlogger.com
*.0u12d.touchartworks.xyz
*.87ab5.touchartworks.xyz
*.89wkp.touchartworks.xyz
*.l7nqb.touchartworks.xyz
*.me7q1.touchartworks.xyz
*.oahlw.touchartworks.xyz
touchartworks.xyz
*.touchartworks.xyz
*.net.xbxb34.com
xbxb34.com
*.xbxb34.com
Other domains in certificate