Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=havendrift.info
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 14, 2026
Valid Until
August 12, 2026
79 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
75:06:8B:2B:0D:36:D7:CC:62:32:85:A3:CD:1F:AC:2F:66:EA:4C:1E:52:DB:28:A5:40:A1:57:24:3A:DD:AD:2F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
88 domains
ff14note.com
*.ff14note.com
*.1deaa467-9363-44e7-a248-4630e4d6c9ae.ff14note.com
*.beta.ff14note.com
*.shop.ff14note.com
*.a.althy.bargains
althy.bargains
*.althy.bargains
casinospirit.net
*.casinospirit.net
*.minuju.casinospirit.net
checkitanalytics.ai
*.checkitanalytics.ai
*.mail.checkitanalytics.ai
*.7ec7d63f-9073-4383-98ed-e5a1e89e5f5b.elekroworld.cz
*.admin.elekroworld.cz
*.analytics.elekroworld.cz
*.app.elekroworld.cz
*.as.elekroworld.cz
*.astro.elekroworld.cz
*.autodiscover.elekroworld.cz
*.bb.elekroworld.cz
*.bc96ec84-e5cb-47ec-a902-6a67c6c89f56.elekroworld.cz
*.c.elekroworld.cz
*.cabinet.elekroworld.cz
*.cit.elekroworld.cz
*.client.elekroworld.cz
*.cloud.elekroworld.cz
*.cms2.elekroworld.cz
*.come89e5f5b.elekroworld.cz
*.cool.elekroworld.cz
*.dns8.elekroworld.cz
elekroworld.cz
*.elekroworld.cz
*.email.elekroworld.cz
*.hostmaster.elekroworld.cz
*.mobil.elekroworld.cz
*.staging.elekroworld.cz
*.store.elekroworld.cz
*.videos.elekroworld.cz
*.ww.elekroworld.cz
*.www.elekroworld.cz
*.a.havendrift.info
havendrift.info
*.havendrift.info
*.a.ilxlp.bargains
ilxlp.bargains
*.ilxlp.bargains
*.aa2pzv.kreativupwerktop.com
kreativupwerktop.com
*.kreativupwerktop.com
*.9sni.renewamplifyydiamond.info
renewamplifyydiamond.info
*.renewamplifyydiamond.info
*.a0bdhw.systemizevoiceformteam.info
systemizevoiceformteam.info
*.systemizevoiceformteam.info
*.a.teamnelem.com
teamnelem.com
*.teamnelem.com
*.9ev70s.techadvances.digital
techadvances.digital
*.techadvances.digital
*.4729521.uvwxyz.xyz
*.analytics.uvwxyz.xyz
*.bbs.uvwxyz.xyz
*.d.uvwxyz.xyz
*.dashboard.uvwxyz.xyz
*.forum.uvwxyz.xyz
*.hostmaster.uvwxyz.xyz
*.ipv5.uvwxyz.xyz
*.ipv6.uvwxyz.xyz
*.ipv7.uvwxyz.xyz
*.lpv6.uvwxyz.xyz
*.mobile.uvwxyz.xyz
*.mta-sts.uvwxyz.xyz
*.office.uvwxyz.xyz
*.secureaccess.uvwxyz.xyz
*.superset.uvwxyz.xyz
*.supersets.uvwxyz.xyz
uvwxyz.xyz
*.uvwxyz.xyz
*.vip6.uvwxyz.xyz
*.vpn.uvwxyz.xyz
*.wildcard.uvwxyz.xyz
*.ww1.uvwxyz.xyz
*.ww38.uvwxyz.xyz
*.www.uvwxyz.xyz
Other domains in certificate