Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bestfreeshopifytheme.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 24, 2026
Valid Until
January 22, 2027
74 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
E5:A4:10:4F:60:A4:4B:03:F6:62:E8:BF:FC:40:5E:CC:F0:32:C9:7E:BC:E2:12:6D:F5:40:FD:B2:B9:B8:90:9F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
fer.au
*.fer.au
*.buon.fer.au
*.cous.fer.au
*.f.fer.au
*.ha.fer.au
*.l.fer.au
*.pou.fer.au
*.sa.fer.au
*.android.bestfreeshopifytheme.com
bestfreeshopifytheme.com
*.bestfreeshopifytheme.com
*.dev.bestfreeshopifytheme.com
*.directory.bestfreeshopifytheme.com
*.filme.bestfreeshopifytheme.com
*.flash.bestfreeshopifytheme.com
*.green.bestfreeshopifytheme.com
*.mail.bestfreeshopifytheme.com
*.nhac.bestfreeshopifytheme.com
*.ru.bestfreeshopifytheme.com
*.tech.bestfreeshopifytheme.com
*.ww25.bestfreeshopifytheme.com
*.ww38.bestfreeshopifytheme.com
*.www.bestfreeshopifytheme.com
binyaqub.store
*.binyaqub.store
*.squarespace.binyaqub.store
*.ww16.binyaqub.store
*.ww17.binyaqub.store
dzeko11.live
*.dzeko11.live
*.ww12.dzeko11.live
*.www.dzeko11.live
*.admin.justballoonsaz.com
*.app.justballoonsaz.com
*.corp.justballoonsaz.com
*.dashboard.justballoonsaz.com
*.internal.justballoonsaz.com
justballoonsaz.com
*.justballoonsaz.com
*.portal.justballoonsaz.com
*.preprod.justballoonsaz.com
*.ww25.justballoonsaz.com
*.ww38.justballoonsaz.com
*.menu.onesip.club
onesip.club
*.onesip.club
*.docs.petsuppliesplus.co
*.email.petsuppliesplus.co
*.mufg.petsuppliesplus.co
petsuppliesplus.co
*.petsuppliesplus.co
*.ww38.petsuppliesplus.co
*.git.pn9v3z.top
pn9v3z.top
*.pn9v3z.top
rapvideos.tv
*.rapvideos.tv
*.www.rapvideos.tv
trataba.com
*.trataba.com
*.uk51gg.trataba.com
*.api.xn--mgbz7ccf80f.com
*.app.xn--mgbz7ccf80f.com
*.explorer.xn--mgbz7ccf80f.com
*.metrics.xn--mgbz7ccf80f.com
*.sitemap.xn--mgbz7ccf80f.com
*.sitemaps.xn--mgbz7ccf80f.com
*.ww2.xn--mgbz7ccf80f.com
*.xn--dhbgd25c.xn--mgbz7ccf80f.com
*.xn--mgbgz72d.xn--mgbz7ccf80f.com
*.xn--mgbk9ecc.xn--mgbz7ccf80f.com
xn--mgbz7ccf80f.com
*.xn--mgbz7ccf80f.com
*.xnxx.xn--mgbz7ccf80f.com
*.gynecologyx.xtvshow.com
*.holiday.xtvshow.com
*.homedecoration.xtvshow.com
*.plantsplanters.xtvshow.com
*.rehabilitationcenter.xtvshow.com
*.schonekleider.xtvshow.com
*.tattoomodels.xtvshow.com
*.trendpins.xtvshow.com
*.women.xtvshow.com
xtvshow.com
*.xtvshow.com
*.hostmaster.zooskoolvideo.com
zooskoolvideo.com
*.zooskoolvideo.com
Other domains in certificate