Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=888b8.win
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 13, 2026
Valid Until
May 14, 2026
89 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
37:01:65:3F:48:C1:36:63:47:53:32:31:3A:69:BB:A9:6C:20:04:E8:A9:B6:F9:D3:55:B7:DA:D1:B7:8A:63:37
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
mosotho.com
*.mosotho.com
*.hostmaster.mosotho.com
*.mail.mosotho.com
*.wiki.mosotho.com
*.wildcard.mosotho.com
*.ww1.mosotho.com
*.ww11.mosotho.com
*.ww16.mosotho.com
*.ww25.mosotho.com
888b8.win
*.888b8.win
*.sitemaps.888b8.win
asia77.page
*.asia77.page
*.hostmaster.asia77.page
californiamobileiv.com
*.californiamobileiv.com
*.www.californiamobileiv.com
*.1.cubanculturalheritage.org
*.53.cubanculturalheritage.org
*.admin.cubanculturalheritage.org
*.api.cubanculturalheritage.org
*.app.cubanculturalheritage.org
cubanculturalheritage.org
*.cubanculturalheritage.org
*.gowww.cubanculturalheritage.org
*.hostmaster.cubanculturalheritage.org
*.m.cubanculturalheritage.org
*.new.cubanculturalheritage.org
*.rd.cubanculturalheritage.org
*.rds.cubanculturalheritage.org
*.rdweb.cubanculturalheritage.org
*.remote.cubanculturalheritage.org
*.test.cubanculturalheritage.org
*.vpn.cubanculturalheritage.org
*.w1.cubanculturalheritage.org
*.webmail.cubanculturalheritage.org
*.wtpfp1.cubanculturalheritage.org
*.www.cubanculturalheritage.org
*.wwww.cubanculturalheritage.org
*.api.erlebnisse.com
*.blog.erlebnisse.com
*.dev.erlebnisse.com
erlebnisse.com
*.erlebnisse.com
*.hostmaster.erlebnisse.com
*.mail.erlebnisse.com
*.mail2.erlebnisse.com
*.test.erlebnisse.com
*.ww11.erlebnisse.com
*.ww16.erlebnisse.com
*.ww25.erlebnisse.com
*.cpcalendars.faepac.org
faepac.org
*.faepac.org
*.ftp.faepac.org
*.redash.faepac.org
*.staging.faepac.org
*.superset.faepac.org
goshopfvp.com
*.goshopfvp.com
*.ww25.goshopfvp.com
izzikz47.com
*.izzikz47.com
*.sitemap.izzikz47.com
jpages.eu
*.jpages.eu
*.mail.jpages.eu
kompania1794.eu
*.kompania1794.eu
*.a9800e04-74ee-479a-93a2-dcb21712f53e.maheswari.com
*.access.maheswari.com
*.api.maheswari.com
*.m.maheswari.com
maheswari.com
*.maheswari.com
*.portal.maheswari.com
*.rds.maheswari.com
*.ts.maheswari.com
moo-yar.com
*.moo-yar.com
*.admin.msmotorsonline.co.uk
msmotorsonline.co.uk
*.msmotorsonline.co.uk
*.ww25.msmotorsonline.co.uk
pompa138suzuki.com
*.pompa138suzuki.com
*.www.pompa138suzuki.com
Other domains in certificate