76/100 SECURITY SCORE

Certificate Information

Subject
CN=echogreen.cyou
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 16, 2026
Valid Until
August 14, 2026 72 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
61:B1:BC:4D:F7:9E:26:C3:6F:84:7F:06:5F:13:FD:12:9D:D4:14:B6:05:E5:B9:11:C1:8F:86:45:8B:80:88:16
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
nelsonics.com *.nelsonics.com *.ftp.nelsonics.com

Other domains in certificate

*.90a61e.aiqpharmacy.com aiqpharmacy.com *.aiqpharmacy.com
*.api.echogreen.cyou echogreen.cyou *.echogreen.cyou *.vpn.echogreen.cyou
*.0afmf.nagaair88.top *.2l6wm.nagaair88.top *.39ir6.nagaair88.top *.3ugcn.nagaair88.top *.4d5b0057-a686-4a8e-91b6-3a136186093d.nagaair88.top *.5vs9r.nagaair88.top *.95vhx.nagaair88.top *.api.nagaair88.top *.app.nagaair88.top *.backup.nagaair88.top *.bephyip4i2.nagaair88.top *.c6udy.nagaair88.top *.cuyk.nagaair88.top *.d.nagaair88.top *.dashboard.nagaair88.top *.dev.nagaair88.top *.dn930.nagaair88.top *.eu3rm.nagaair88.top *.fcvkr.nagaair88.top *.fdb74.nagaair88.top *.fu1fc.nagaair88.top *.g89kw.nagaair88.top *.ggmbrfcvkr.nagaair88.top *.hrka1.nagaair88.top *.i51qg.nagaair88.top *.ip4i2.nagaair88.top *.iramumarketing.nagaair88.top *.jsqfxzruod.nagaair88.top *.kac0t.nagaair88.top *.kp5po.nagaair88.top *.l0r4m.nagaair88.top *.l2aa8.nagaair88.top *.lcjev.nagaair88.top *.mail.nagaair88.top *.mp7tf.nagaair88.top nagaair88.top *.nagaair88.top *.ndifg.nagaair88.top *.new.nagaair88.top *.o1ghs.nagaair88.top *.okrsa2l6wm.nagaair88.top *.osc36.nagaair88.top *.qa.nagaair88.top *.qdiek.nagaair88.top *.qk6fu.nagaair88.top *.qxsgzorrwv.nagaair88.top *.rkuvx.nagaair88.top *.sjifui51qg.nagaair88.top *.staging.nagaair88.top *.tpxa3.nagaair88.top *.tzygd.nagaair88.top *.upujdkp5po.nagaair88.top *.v7v61v.nagaair88.top *.web.nagaair88.top *.wrglm5vs9r.nagaair88.top *.wxzbswrglm5vs9r.nagaair88.top *.xrqcg.nagaair88.top *.y04uw.nagaair88.top *.yltdpv7v61v.nagaair88.top *.zruod.nagaair88.top
*.agent.trendpromoinnovieren.com *.alpha.trendpromoinnovieren.com *.analytic.trendpromoinnovieren.com *.chat.trendpromoinnovieren.com *.development.trendpromoinnovieren.com *.flowise.trendpromoinnovieren.com *.forums.trendpromoinnovieren.com *.gitlab.trendpromoinnovieren.com *.prod.trendpromoinnovieren.com *.sitemaps.trendpromoinnovieren.com *.test.trendpromoinnovieren.com trendpromoinnovieren.com *.trendpromoinnovieren.com *.ww12.trendpromoinnovieren.com *.ww7.trendpromoinnovieren.com *.ww99.trendpromoinnovieren.com *.www.trendpromoinnovieren.com
tvleak.com *.tvleak.com