Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=halloffame.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 29, 2026
Valid Until
December 28, 2026
52 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
47:C4:A1:D9:05:62:59:F3:FE:C4:00:51:44:D8:D7:02:AD:D2:6A:94:77:87:13:BA:F0:C3:EE:D0:04:77:B8:9A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
directive.com.au
*.directive.com.au
*.17.directive.com.au
*.dev.directive.com.au
*.mail.directive.com.au
*.wildcard.directive.com.au
astralif.cfd
*.astralif.cfd
cetis.com.br
*.cetis.com.br
*.mailserver.cetis.com.br
*.random.cetis.com.br
*.ww16.cetis.com.br
*.ww25.cetis.com.br
charitable.events
*.charitable.events
*.media.charitable.events
*.swope.charitable.events
*.crm.feds.com.au
feds.com.au
*.feds.com.au
*.inbound.feds.com.au
*.ipe.feds.com.au
*.mailgw.feds.com.au
*.6441056b613c32a9.gjsmachinery.com.au
*.feeds.gjsmachinery.com.au
gjsmachinery.com.au
*.gjsmachinery.com.au
*.imap.gjsmachinery.com.au
*.imap1.gjsmachinery.com.au
*.mail.gjsmachinery.com.au
*.mailbox.gjsmachinery.com.au
*.mailin.gjsmachinery.com.au
*.smtps.gjsmachinery.com.au
*.www.gjsmachinery.com.au
halloffame.com.au
*.halloffame.com.au
*.mail.halloffame.com.au
*.mail6.halloffame.com.au
*.mailserver.halloffame.com.au
*.outmail.halloffame.com.au
*.tas.halloffame.com.au
*.ww25.halloffame.com.au
hallucination.com.au
*.hallucination.com.au
*.help.hallucination.com.au
*.mailserver.hallucination.com.au
*.autodiscover.heliexperiences.com.au
*.dev.heliexperiences.com.au
heliexperiences.com.au
*.heliexperiences.com.au
*.mail.heliexperiences.com.au
*.app.kagwirawo.com
kagwirawo.com
*.kagwirawo.com
*.random.kagwirawo.com
*.ug.kagwirawo.com
*.hostmaster.luck.cm
*.i.luck.cm
luck.cm
*.luck.cm
*.mail.luck.cm
*.map.luck.cm
*.wildcard.luck.cm
*.4yj7f.marketingis.top
*.5vs9r.marketingis.top
*.60t9v.marketingis.top
*.6s98n.marketingis.top
*.cc2mm.marketingis.top
*.cxie3.marketingis.top
*.i51qg.marketingis.top
*.lkzdx.marketingis.top
marketingis.top
*.marketingis.top
*.me7q1.marketingis.top
*.n2pro.marketingis.top
*.pwb3b.marketingis.top
*.qk6fu.marketingis.top
*.ques8.marketingis.top
*.rnyzj.marketingis.top
*.uw9i.marketingis.top
*.v3ywp.marketingis.top
*.z3dl1.marketingis.top
*.portal.sensus.studio
sensus.studio
*.sensus.studio
*.mato.vendorsmegalopolis.com
vendorsmegalopolis.com
*.vendorsmegalopolis.com
Other domains in certificate