Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=922betmax.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 25, 2026
Valid Until
December 24, 2026
67 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
FB:31:95:9C:08:F2:F1:2A:E7:09:E9:EC:F5:82:C1:28:60:D7:AD:64:92:3E:D5:77:35:8A:A5:A5:24:36:B9:46
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
anamayatanja.com
*.anamayatanja.com
013betesports.com
*.013betesports.com
11qplataforma1.com
*.11qplataforma1.com
222gbrs.com
*.222gbrs.com
312betmax.com
*.312betmax.com
5161game7.com
*.5161game7.com
5ssbetbr.com
*.5ssbetbr.com
66mota.top
*.66mota.top
68556bet.com
*.68556bet.com
68qbrasil.com
*.68qbrasil.com
717br2.com
*.717br2.com
777jogopc.com
*.777jogopc.com
7ff33bet.com
*.7ff33bet.com
8kgbrasil.com
*.8kgbrasil.com
922betmax.com
*.922betmax.com
9393e.com
*.9393e.com
9393k.com
*.9393k.com
9393m.com
*.9393m.com
9393q.com
*.9393q.com
betxycbet.com
*.betxycbet.com
burgerz.com
*.burgerz.com
coustom.online
*.coustom.online
crypto93.com
*.crypto93.com
dbxenoversemobile.club
*.dbxenoversemobile.club
defactoinsights.com
*.defactoinsights.com
delivery-sender.shop
www.delivery-sender.shop
dumsonorganics.com
*.dumsonorganics.com
elevatedfitnessspace.run
*.elevatedfitnessspace.run
estrelabetlogin8.com
*.estrelabetlogin8.com
fitnessprohaven.run
*.fitnessprohaven.run
flutepgbet1.com
*.flutepgbet1.com
official-zh-c7.com
*.official-zh-c7.com
orca-wp.click
www.orca-wp.click
oshi.work
*.oshi.work
popdez1.com
*.popdez1.com
qcinetv.top
*.qcinetv.top
qiqxq.com
*.qiqxq.com
ragilconvert.store
www.ragilconvert.store
rajcrops.com
www.rajcrops.com
refinedcareermoves.live
*.refinedcareermoves.live
shengdatech.sg
www.shengdatech.sg
sproutcards.com
*.sproutcards.com
thekmadan.com
*.thekmadan.com
tokenrefi.com
*.tokenrefi.com
travel-visit-places.com
*.travel-visit-places.com
Other domains in certificate