Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=handbagsandtotes.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 13, 2026
Valid Until
December 12, 2026
57 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
9E:E9:E8:2F:1D:20:F8:84:2D:F0:A7:21:7A:0C:3C:EE:BE:6A:41:FA:22:7D:80:DA:79:7A:D9:01:49:9F:DC:53
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
pq.com.au
*.pq.com.au
*.beacon.pq.com.au
a1garagedoors.co.uk
*.a1garagedoors.co.uk
coogiba.de
*.coogiba.de
*.admin.cukarica.com
*.crm.cukarica.com
cukarica.com
*.cukarica.com
*.temp.cukarica.com
*.ww17.cukarica.com
*.www.cukarica.com
diesto.com
*.diesto.com
finanzsparen.com
*.finanzsparen.com
*.news.finanzsparen.com
*.ww38.finanzsparen.com
firstchoicekebab.co.uk
*.firstchoicekebab.co.uk
*.shop.firstchoicekebab.co.uk
*.www.firstchoicekebab.co.uk
*.api.goodbenefits.it
*.backend.goodbenefits.it
goodbenefits.it
*.goodbenefits.it
*.www.goodbenefits.it
hamsten.com
*.hamsten.com
handbagsandtotes.com
*.handbagsandtotes.com
*.mobi.handbagsandtotes.com
*.page.handbagsandtotes.com
*.rz.handbagsandtotes.com
*.users.handbagsandtotes.com
*.videos.handbagsandtotes.com
info-creances.com
*.info-creances.com
*.r.info-creances.com
*.random.info-creances.com
*.ww38.info-creances.com
jess.it
*.jess.it
*.random.jess.it
jkmy2.co
*.jkmy2.co
mappasicilia.it
*.mappasicilia.it
mdrive.today
*.mdrive.today
*.ww38.mdrive.today
ogledala.com
*.ogledala.com
openkakao.co
*.openkakao.co
payoff888.com
*.payoff888.com
*.ww16.payoff888.com
*.ww38.payoff888.com
pozisgreek.com
*.pozisgreek.com
quintuplets.com.au
*.quintuplets.com.au
*.api.retratarte.com
*.erp.retratarte.com
*.hostmaster.retratarte.com
*.m.retratarte.com
*.rdweb.retratarte.com
retratarte.com
*.retratarte.com
*.sitemap.retratarte.com
*.sitemaps.retratarte.com
*.ww1.retratarte.com
*.ww11.retratarte.com
*.ww16.retratarte.com
*.ww17.retratarte.com
*.ww25.retratarte.com
*.ww38.retratarte.com
tamilyogi.cloud
*.tamilyogi.cloud
*.ww1.tamilyogi.cloud
ttqudetibt.net
*.ttqudetibt.net
xnxxed.com
*.xnxxed.com
*.sitemap.zdravfilt.click
zdravfilt.click
*.zdravfilt.click
Other domains in certificate