Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=flowersandfruit.it
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 28, 2026
Valid Until
July 27, 2026
75 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AE:DF:A6:72:D8:93:DC:87:A3:2A:12:D2:45:7A:B1:0B:F6:C7:CB:41:FA:32:87:E5:4E:DD:3B:37:E4:8B:FA:7F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
icux.com
*.icux.com
*.relay1.icux.com
allmaturepornvideos.cc
*.allmaturepornvideos.cc
*.www.allmaturepornvideos.cc
assistirtvgratishd.online
*.assistirtvgratishd.online
bloggen.it
*.bloggen.it
*.superset.bloggen.it
*.supersets.bloggen.it
*.webmail.bloggen.it
blogist.it
*.blogist.it
*.hhjuhltuoccoro86qkbfgqpl54vepg.blogist.it
*.hostmaster.blogist.it
*.mx.blogist.it
bqad.com
*.bqad.com
*.lnjgg.bqad.com
*.pen.bqad.com
*.u.bqad.com
*.y.bqad.com
flowersandfruit.it
*.flowersandfruit.it
*.www.flowersandfruit.it
*.api.investissementsenafrique.com
*.app.investissementsenafrique.com
*.dev.investissementsenafrique.com
investissementsenafrique.com
*.investissementsenafrique.com
*.mail.investissementsenafrique.com
*.members.investissementsenafrique.com
*.vpn.investissementsenafrique.com
*.www.investissementsenafrique.com
*.ad.pearsonevue.com
*.beta.pearsonevue.com
*.ci.pearsonevue.com
*.demo.pearsonevue.com
*.elearning.pearsonevue.com
*.flowise.pearsonevue.com
*.home.pearsonevue.com
*.insight.pearsonevue.com
pearsonevue.com
*.pearsonevue.com
*.pipeline.pearsonevue.com
*.portfolio.pearsonevue.com
*.uat.pearsonevue.com
*.ww1.pearsonevue.com
*.ww38.pearsonevue.com
*.co.playzion.com
playzion.com
*.playzion.com
*.7e80eb4b-153b-4209-9ff2-9acbc2130f4a.punjabis.org
*.admin.punjabis.org
*.api.punjabis.org
*.app.punjabis.org
*.assets.punjabis.org
*.connect.punjabis.org
*.demo.punjabis.org
*.dev.punjabis.org
*.m.punjabis.org
*.ngpecfiw.punjabis.org
punjabis.org
*.punjabis.org
*.rds.punjabis.org
*.rdweb.punjabis.org
*.secure.punjabis.org
*.sslvpn.punjabis.org
*.test.punjabis.org
*.vpn.punjabis.org
*.webmail.punjabis.org
skmsindia.com
*.skmsindia.com
*.ww38.skmsindia.com
*.32.state-warehouse-670775968.click
state-warehouse-670775968.click
*.state-warehouse-670775968.click
termloan.shop
*.termloan.shop
tokenfinance.it
*.tokenfinance.it
wuqianqa.top
*.wuqianqa.top
*.jessiceshendymenservices.ze.net
*.tbntdrzlinwezpp.ze.net
ze.net
*.ze.net
Other domains in certificate