Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=nbastore.icu
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 14, 2026
Valid Until
April 14, 2026
55 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
55:25:FE:25:28:5C:27:7D:F4:5A:C4:33:68:51:7B:4E:C3:47:CC:11:90:CE:FF:AD:66:E4:EF:CA:FB:42:65:5A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
84 domains
dotviews.com
*.dotviews.com
*.hostmaster.dotviews.com
adultmoviepreview.com
*.adultmoviepreview.com
debtplan.org
*.debtplan.org
*.mail.debtplan.org
discountfabricoutlet.com
*.discountfabricoutlet.com
drozzle.com
*.drozzle.com
*.random.drozzle.com
familyhealthcare.net
*.familyhealthcare.net
fayllar3.ru
*.fayllar3.ru
foreignnews.com
*.foreignnews.com
gnula.gratis
*.gnula.gratis
*.random.gnula.gratis
hardwareresourses.com
*.hardwareresourses.com
*.random.hardwareresourses.com
interviewhelp.me
*.interviewhelp.me
maponair.com
*.maponair.com
*.moa1-v3.maponair.com
muzikana.com
*.muzikana.com
*.mx.muzikana.com
*.www.muzikana.com
mydoctrine.com
*.mydoctrine.com
*.cpcontacts.nagoyatokyu.com
nagoyatokyu.com
*.nagoyatokyu.com
*.hostmaster.naming.partners
naming.partners
*.naming.partners
nbastore.icu
*.nbastore.icu
nbclatenight.com
*.nbclatenight.com
nepanigeria.com
*.nepanigeria.com
*.random.nepanigeria.com
portalultatv.biz
*.portalultatv.biz
progedo.com
*.progedo.com
pultemortage.com
*.pultemortage.com
*.random.pultemortage.com
*.servicing.pultemortage.com
*.hostmaster.purewoodworkingsite.com
purewoodworkingsite.com
*.purewoodworkingsite.com
revole.com
*.revole.com
*.random.rockyjuarez.com
rockyjuarez.com
*.rockyjuarez.com
royalbikes.com
*.royalbikes.com
s2symposium.org
*.s2symposium.org
semaglutide.com.au
*.semaglutide.com.au
sf-run.club
*.sf-run.club
shannonfalls.com
*.shannonfalls.com
*.bigpond.shit.au
*.pigshit.shit.au
shit.au
*.shit.au
*.random.tasteofkapolei.com
tasteofkapolei.com
*.tasteofkapolei.com
wvbf9w.com
*.wvbf9w.com
Other domains in certificate