Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=whiskeynfts.com
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 15, 2026
Valid Until
September 13, 2026
82 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
19:28:8B:A1:E5:26:25:19:4F:34:5F:90:82:10:4E:FA:45:C7:C4:A0:B0:90:E1:ED:61:B8:11:97:A0:B8:26:96
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
groupmessage.org
*.groupmessage.org
*.backup.groupmessage.org
*.comc2-4800f046e75c.groupmessage.org
*.m.groupmessage.org
*.members.groupmessage.org
*.staging.groupmessage.org
*.test.groupmessage.org
*.uat.groupmessage.org
anesthesiatechnicians.com
*.anesthesiatechnicians.com
*.70b8e832-bdf2-400d-881a-626e727c6001.aufhhashvfy.com
*.assets.aufhhashvfy.com
aufhhashvfy.com
*.aufhhashvfy.com
*.b000666b-0892-4538-906c-dddf13aae5ee.aufhhashvfy.com
*.dashboard.aufhhashvfy.com
*.demo.aufhhashvfy.com
*.mailer.aufhhashvfy.com
*.nzvr.aufhhashvfy.com
*.pfakoassets.aufhhashvfy.com
*.v1.aufhhashvfy.com
*.web.aufhhashvfy.com
*.www.aufhhashvfy.com
bvw.com.au
*.bvw.com.au
cheapframing.com
*.cheapframing.com
*.redwood.cheapframing.com
*.shuyang.cheapframing.com
*.cloud.conservetheearth.org
conservetheearth.org
*.conservetheearth.org
*.cpanel.conservetheearth.org
*.cpcalendars.conservetheearth.org
*.cpcontacts.conservetheearth.org
*.rd.conservetheearth.org
*.rds.conservetheearth.org
*.rdweb.conservetheearth.org
*.remote.conservetheearth.org
*.salveelp.conservetheearth.org
*.webmail.conservetheearth.org
csco.au
*.csco.au
*.zvkbcww38.csco.au
*.api.egypt-visits.com
*.blog.egypt-visits.com
*.dev.egypt-visits.com
egypt-visits.com
*.egypt-visits.com
*.hostmaster.egypt-visits.com
*.ww12.egypt-visits.com
hzwz.org
*.hzwz.org
*.ma5qiu.hzwz.org
ohrschmerzen.de
*.ohrschmerzen.de
*.04062ff6-67e2-42d6-b00b-92b50fa86556.wbsaoapp.xyz
wbsaoapp.xyz
*.wbsaoapp.xyz
*.ww25.wbsaoapp.xyz
*.www.wbsaoapp.xyz
*.admin.wfzz.xyz
*.ai.wfzz.xyz
*.api.wfzz.xyz
*.backend.wfzz.xyz
*.cc.wfzz.xyz
*.ch.wfzz.xyz
*.demo.wfzz.xyz
*.dev.wfzz.xyz
*.fk.wfzz.xyz
*.jzf.wfzz.xyz
*.m.wfzz.xyz
*.navigation.wfzz.xyz
*.nvrzdhlqela.wfzz.xyz
*.s.wfzz.xyz
*.staging.wfzz.xyz
wfzz.xyz
*.wfzz.xyz
*.ww1.wfzz.xyz
*.ww25.wfzz.xyz
*.www.wfzz.xyz
*.zz.wfzz.xyz
*.sitemap.whiskeynfts.com
whiskeynfts.com
*.whiskeynfts.com
*.wildcard.whiskeynfts.com
wild001.com
*.wild001.com
*.ww25.wild001.com
Other domains in certificate