Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=nownickeltech.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
October 03, 2026
Valid Until
January 01, 2027
64 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
F8:55:08:45:F9:20:63:2E:88:98:20:B1:1C:EA:BB:EA:FB:A1:97:5C:43:D6:A0:E2:FB:43:D4:77:14:80:E9:94
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
heartparis.com
*.heartparis.com
donutcore.com
*.donutcore.com
driftbos.info
*.driftbos.info
ecoadventureranch.com
*.ecoadventureranch.com
ecoblocksolutions.digital
*.ecoblocksolutions.digital
eth.lighting
*.eth.lighting
exclusivelyknb.com
*.exclusivelyknb.com
financing-petroninvest.digital
*.financing-petroninvest.digital
findascendagency.com
*.findascendagency.com
futurepathossource.com
*.futurepathossource.com
gameforce700.top
*.gameforce700.top
getsnitchernet.com
*.getsnitchernet.com
gosnitcherbot.com
*.gosnitcherbot.com
gothatchops.com
*.gothatchops.com
growdonuthub.com
*.growdonuthub.com
grownewyorkacquisitionvision.com
*.grownewyorkacquisitionvision.com
growpathosnext.com
*.growpathosnext.com
h1h1.net
*.h1h1.net
houseaccountglobal.com
*.houseaccountglobal.com
hynrix.sbs
*.hynrix.sbs
hypernetprime.digital
*.hypernetprime.digital
hysulfoselenide.com
*.hysulfoselenide.com
incorporatedv.com
*.incorporatedv.com
infrahypervault.click
*.infrahypervault.click
joindonutstack.com
*.joindonutstack.com
joindonutsystems.com
*.joindonutsystems.com
joiniconicnext.com
*.joiniconicnext.com
kyberscwp.com
www.kyberscwp.com
labsnickeltech.com
*.labsnickeltech.com
labsthatchtrack.com
*.labsthatchtrack.com
limb.com.cn
*.limb.com.cn
linkdomain365.digital
*.linkdomain365.digital
lms-s-xcewery.cc
*.lms-s-xcewery.cc
magic.to
*.magic.to
mellat.app
*.mellat.app
mockesend.com
*.mockesend.com
myfrancoscafe.com
*.myfrancoscafe.com
newspublishers.digital
*.newspublishers.digital
newyorkacquisitionworks.com
*.newyorkacquisitionworks.com
nexylog.com
*.nexylog.com
nownickeltech.com
*.nownickeltech.com
nowthatchstack.com
*.nowthatchstack.com
orbitsystemsio.click
*.orbitsystemsio.click
ospqeg.my
*.ospqeg.my
reetexam.in
*.reetexam.in
Other domains in certificate