Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=kharghar.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 09, 2026
Valid Until
January 07, 2027
62 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
E7:B1:CC:74:60:C8:F4:D8:9B:03:4F:F4:CC:84:4B:E0:B0:DC:D4:19:CB:2A:A2:BF:19:6C:49:90:F4:A4:40:BF
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
88 domains
fullserieshd.com
*.fullserieshd.com
*.autodiscover.fullserieshd.com
*.dc-dd73dbaf7cbb.fullserieshd.com
*.kigqs.fullserieshd.com
*.mail.fullserieshd.com
*.peliculas.fullserieshd.com
*.sub.fullserieshd.com
*.ww12.fullserieshd.com
*.ww7.fullserieshd.com
71bet.bet
*.71bet.bet
785b.cn
*.785b.cn
785c.cn
*.785c.cn
arkansas.uk
*.arkansas.uk
*.kcl.arkansas.uk
*.api.avivaco.uk
avivaco.uk
*.avivaco.uk
*.dev.avivaco.uk
*.direct.avivaco.uk
*.hostmaster.avivaco.uk
*.m.avivaco.uk
*.notifications.avivaco.uk
*.zero.avivaco.uk
*.ad709f4449c6.bq2.shop
*.admin.bq2.shop
*.allegra.bq2.shop
*.atommie.bq2.shop
*.auction.bq2.shop
bq2.shop
*.bq2.shop
*.brooklyn.bq2.shop
*.internal.bq2.shop
*.leaks.bq2.shop
*.mein.bq2.shop
*.onylfans.bq2.shop
*.render.bq2.shop
*.riona.bq2.shop
*.shaneanddaff.bq2.shop
*.tiffayana.bq2.shop
*.tymwits.bq2.shop
*.wildcard.bq2.shop
*.yasmina.bq2.shop
halototoslot.foundation
*.halototoslot.foundation
*.mail.halototoslot.foundation
infraplatform2025.click
*.infraplatform2025.click
*.cjm.kharghar.com
kharghar.com
*.kharghar.com
*.nexa.kharghar.com
knosr.vip
*.knosr.vip
lizzo.uk
*.lizzo.uk
longlegs.uk
*.longlegs.uk
mlgame.uk
*.mlgame.uk
*.espn21.movie21star.com
*.flix.movie21star.com
*.foxcine.movie21star.com
*.hbo.movie21star.com
*.hulu.movie21star.com
*.lzu.movie21star.com
movie21star.com
*.movie21star.com
*.movstarz.movie21star.com
*.movstarz02.movie21star.com
*.netflixs.movie21star.com
*.test.movie21star.com
mynametags.uk
*.mynametags.uk
nationalrails.co.uk
*.nationalrails.co.uk
ncmd.uk
*.ncmd.uk
ousho.uk
*.ousho.uk
paragazetesi.online
*.paragazetesi.online
patpay.uk
*.patpay.uk
Other domains in certificate