Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=managerfriend.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 25, 2026
Valid Until
July 24, 2026
72 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D7:69:04:FB:37:EF:9A:50:B5:20:D0:BD:82:93:7F:8F:08:86:EC:55:F5:AE:2E:A1:17:F9:F2:FF:6E:F8:EF:5D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
bank777.dev
*.bank777.dev
*.app.bank777.dev
*.dev.bank777.dev
*.test.bank777.dev
225599rr.com
*.225599rr.com
27856.loan
*.27856.loan
34097.blog
*.34097.blog
449106.cc
*.449106.cc
4636c5d4428e5d5c.com
*.4636c5d4428e5d5c.com
84-guinness.com
*.84-guinness.com
*.slovari.84-guinness.com
96319.sx
*.96319.sx
99838.sx
*.99838.sx
alquilerautosfacil.sbs
*.alquilerautosfacil.sbs
anbzo.auction
*.anbzo.auction
anotherrconcept.com
*.anotherrconcept.com
brightheadline.xyz
*.brightheadline.xyz
catalyseforgehub.xyz
*.catalyseforgehub.xyz
*.chat.ero.ms
ero.ms
*.ero.ms
*.m.ero.ms
*.speromanga.ero.ms
etftool.com
*.etftool.com
euuhx.com
*.euuhx.com
feastuponthewordblog.org
*.feastuponthewordblog.org
foctfkqsxr.cc
*.foctfkqsxr.cc
getmartyautomates.com
*.getmartyautomates.com
glorp.cc
*.glorp.cc
hqkitalent.com
*.hqkitalent.com
ikimisli738.com
*.ikimisli738.com
jyza.us
*.jyza.us
m9js9oa.cc
*.m9js9oa.cc
managerfriend.com
*.managerfriend.com
*.zus.managerfriend.com
owltof.finance
*.owltof.finance
precisegardenconsult.live
*.precisegardenconsult.live
primeplatefood.food
*.primeplatefood.food
primevestx.com
*.primevestx.com
relocation-and-storage.click
*.relocation-and-storage.click
repairmaintenancehq.com
*.repairmaintenancehq.com
rest-job-en-wp-x-1212314.sbs
*.rest-job-en-wp-x-1212314.sbs
sdgdfg39sf.top
*.sdgdfg39sf.top
seniorenrecht.org
*.seniorenrecht.org
storyseekersrealm.com
*.storyseekersrealm.com
tires-fr-2954.sbs
*.tires-fr-2954.sbs
tranquilframe.rest
*.tranquilframe.rest
viet69live.cc
*.viet69live.cc
xabgh.auction
*.xabgh.auction
zdmkoc.live
*.zdmkoc.live
Other domains in certificate