Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=linktv1.club
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 20, 2025
Valid Until
March 20, 2026
33 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
38:EE:39:26:F0:13:43:4A:5D:3D:26:09:A2:0B:C8:6D:56:3E:66:57:0D:6A:38:DB:A5:46:AA:8E:E8:16:9D:42
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
homeeworkify.com
*.homeeworkify.com
angeloperrone.net
*.angeloperrone.net
*.lahdenkautodiscover.angeloperrone.net
dinghologyden.org
*.dinghologyden.org
educrestinternational.com
*.educrestinternational.com
fundacionelfaroong.org
*.fundacionelfaroong.org
haycep.com
*.haycep.com
iitm7z.org
*.iitm7z.org
intyblack.com
*.intyblack.com
iransoicalsec.com
*.iransoicalsec.com
jaggerharvey.com
*.jaggerharvey.com
jana-post.com
*.jana-post.com
kirutotukam.com
*.kirutotukam.com
kuas4d.com
*.kuas4d.com
lavacam.org
*.lavacam.org
leos34.com
*.leos34.com
*.adm.lexus.store
*.app.lexus.store
*.dev-app.lexus.store
*.dms.lexus.store
*.events.lexus.store
*.hub.lexus.store
*.learning.lexus.store
lexus.store
*.lexus.store
*.lyncdiscover.lexus.store
*.main.lexus.store
*.plugin.lexus.store
*.ws.lexus.store
*.ww25.lexus.store
*.ww38.lexus.store
*.hostmaster.linktv1.club
linktv1.club
*.linktv1.club
lyon111.com
*.lyon111.com
mainstreetmusicusa.com
*.mainstreetmusicusa.com
mango99.org
*.mango99.org
maplehillkshistory.org
*.maplehillkshistory.org
mattressforlessoutlet.com
*.mattressforlessoutlet.com
paulhorton100.com
*.paulhorton100.com
*.ww25.paulhorton100.com
playfulfitness.org
*.playfulfitness.org
printabpuzzle.com
*.printabpuzzle.com
salontastichj.com
*.salontastichj.com
sauve.live
*.sauve.live
shipleysports.org
*.shipleysports.org
sjcbistro.com
*.sjcbistro.com
*.ww25.sjcbistro.com
stakedatuaprima.com
*.stakedatuaprima.com
stmarystmenacopticri.org
*.stmarystmenacopticri.org
svoysredisvoix.com
*.svoysredisvoix.com
szmwipc.com
*.szmwipc.com
*.sitemap.total-sports.tv
total-sports.tv
*.total-sports.tv
*.ww01.total-sports.tv
*.ww25.total-sports.tv
*.www.total-sports.tv
Other domains in certificate