Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=carolinabasenjis.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 23, 2026
Valid Until
August 21, 2026
62 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EA:5E:8D:09:5A:39:B9:66:1B:24:8E:A8:BE:EF:4C:FB:BB:78:B9:B2:F0:3D:C1:8F:C4:B3:2E:4B:56:74:55:FD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
tapper.net
*.tapper.net
*.flex2.tapper.net
*.webmail.tapper.net
1100.au
*.1100.au
*.smarterwx.1100.au
buffstreams.city
*.buffstreams.city
*.live.buffstreams.city
*.live1.buffstreams.city
*.live2.buffstreams.city
*.live3.buffstreams.city
*.live5.buffstreams.city
*.live6.buffstreams.city
*.live9.buffstreams.city
carolinabasenjis.com
*.carolinabasenjis.com
*.pilox.carolinabasenjis.com
*.app.gkc.asia
gkc.asia
*.gkc.asia
kfuiu.top
*.kfuiu.top
*.www.kfuiu.top
*.account.kohlds.com
*.accounting.kohlds.com
*.apps.kohlds.com
*.dashboard.kohlds.com
*.elasticbeanstalk.kohlds.com
*.flix-loadbalancer.kohlds.com
*.flix.kohlds.com
*.flixaccounting.kohlds.com
*.flixglobal.kohlds.com
*.flixprofiles.kohlds.com
*.fuf-global.kohlds.com
*.fuf-mobileclient.kohlds.com
*.fuf.kohlds.com
*.global.kohlds.com
kohlds.com
*.kohlds.com
*.kubernetes-flix.kohlds.com
*.kubernetes.kohlds.com
*.kubernetesflix.kohlds.com
*.loadbalancer.kohlds.com
*.mobile.kohlds.com
*.previewfuf.kohlds.com
*.random.kohlds.com
*.toolbar.kohlds.com
*.traffic-flix.kohlds.com
*.ww25.kohlds.com
red-dot.store
*.red-dot.store
*.www.red-dot.store
*.assetsnffrgf-a5-akamaihd5-net.unblocked.wtf
*.bxr5-wikipedia5-org.unblocked.wtf
*.clients5-ahost5-uz.unblocked.wtf
*.csb5-wikipedia5-org.unblocked.wtf
*.d3cxv97fi8q1775-cloudfront5-net.unblocked.wtf
*.datahub5-io.unblocked.wtf
*.demo5-opennms5-org.unblocked.wtf
*.devitems5-com.unblocked.wtf
*.eztv1.unblocked.wtf
*.eztv6-re.unblocked.wtf
*.ga5-nsimg5-net.unblocked.wtf
*.ha5-wikipedia5-org.unblocked.wtf
*.images-na3-ssl-images-amazon3-com.unblocked.wtf
*.io5-wiktionary5-org.unblocked.wtf
*.ja5-wikinews5-org.unblocked.wtf
*.kv5-wikipedia5-org.unblocked.wtf
*.lt5-wordpress5-org.unblocked.wtf
*.myhentai5-tv.unblocked.wtf
*.privacy5-icq5-com.unblocked.wtf
*.sl3-wikipedia3-org.unblocked.wtf
*.tahoe-lafs5-org.unblocked.wtf
*.torrentz1.unblocked.wtf
*.trustaffs6-com.unblocked.wtf
*.ug3-wikisource3-org.unblocked.wtf
unblocked.wtf
*.unblocked.wtf
*.www5-googletagservices5-com.unblocked.wtf
*.www5-wikidot5-com.unblocked.wtf
*.www6-kink6-com.unblocked.wtf
*.krs.uyeicpcjl.com
*.newv2.uyeicpcjl.com
*.qtc.uyeicpcjl.com
*.urr.uyeicpcjl.com
uyeicpcjl.com
*.uyeicpcjl.com
Other domains in certificate