Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=playfytv.live
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 15, 2026
Valid Until
January 13, 2027
58 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
D8:26:44:61:A4:06:F2:3C:2C:91:16:39:EC:42:49:26:8C:B0:7F:96:1A:B3:6A:60:ED:8E:4D:C9:A0:86:7D:86
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
dpboss.games
*.dpboss.games
27cunhm.sbs
*.27cunhm.sbs
digitaldepartures.site
*.digitaldepartures.site
dihudegaq.com
*.dihudegaq.com
discretamente.com
*.discretamente.com
drivepipelineorbit.com
*.drivepipelineorbit.com
ds5355vip.com
*.ds5355vip.com
futuravorsorgechde.com
*.futuravorsorgechde.com
gardenvirtue.biz
*.gardenvirtue.biz
jgwwc.com
*.jgwwc.com
jilik02.com
*.jilik02.com
jurisconnectas.com
*.jurisconnectas.com
klaster-fin.com
*.klaster-fin.com
mixwinnl.com
*.mixwinnl.com
modernrem.shop
*.modernrem.shop
motionc-orepro.forum
*.motionc-orepro.forum
neonra.sbs
*.neonra.sbs
nexusglobalpa-rtners.click
*.nexusglobalpa-rtners.click
nhhkx.sale
*.nhhkx.sale
nuuxl.win
*.nuuxl.win
omninodeinvest.digital
*.omninodeinvest.digital
owaisfragrance.com
*.owaisfragrance.com
pawsomebowteeq.com
*.pawsomebowteeq.com
pensar777.one
*.pensar777.one
pensar7777.com
*.pensar7777.com
penscompich.com
*.penscompich.com
playfyapp.com
*.playfyapp.com
playfytv.live
*.playfytv.live
plumblift.info
*.plumblift.info
sacredsayings.beauty
*.sacredsayings.beauty
saindicle.info
*.saindicle.info
sandiegan.biz
*.sandiegan.biz
scaleyourresultsagency.com
*.scaleyourresultsagency.com
silvercircle.best
*.silvercircle.best
smart2025media.click
*.smart2025media.click
stellarnetstack.digital
*.stellarnetstack.digital
stonecladapp.com
*.stonecladapp.com
suncityasia.bet
*.suncityasia.bet
surgawin288y.com
*.surgawin288y.com
tailwaggerinn.com
*.tailwaggerinn.com
techbrightquantum.click
*.techbrightquantum.click
telecast.ad
*.telecast.ad
theabrovision.com
*.theabrovision.com
thinkerville.education
*.thinkerville.education
xihu12345.com
*.xihu12345.com
Other domains in certificate