Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=supplementyourincome.com.au
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 24, 2026
Valid Until
December 23, 2026
74 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
5B:D2:45:E0:4B:E2:AE:9A:6F:C8:28:51:DE:73:90:E9:67:12:CE:9D:3E:57:8C:1A:C7:D4:C7:76:0E:7E:B0:49
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
infraenterprise.click
*.infraenterprise.click
hypicdownload.com
*.hypicdownload.com
3d5736c8-2f37-4f50-8029-89b748a93c8b.kurnell.au
acbcb724-47b0-4426-a54b-b04663a45109.kurnell.au
dcdccb20-9696-4ada-b049-73bc6cf44160.kurnell.au
emv1.kurnell.au
kurnell.au
sh.kurnell.au
signup.kurnell.au
www.kurnell.au
*.135ced69b403dae903970015ad51820c.lesbians.com.au
*.8f94100b394bb39ad4405fe3f2c671ff.lesbians.com.au
*.a7d45216b18cba3567c2a43732a2b389.lesbians.com.au
*.free.lesbians.com.au
lesbians.com.au
*.lesbians.com.au
*.random.lesbians.com.au
*.7bc8532e-6a20-431e-bd56-fac665d92788.marketanalysis.com.au
*.a9e7bd13-0862-4f7e-bb2e-cf52ebc41017.marketanalysis.com.au
*.forum.marketanalysis.com.au
marketanalysis.com.au
*.marketanalysis.com.au
*.ww.marketanalysis.com.au
*.ww41.marketanalysis.com.au
12327a98-808f-439f-a91a-2c007ceeb23f.melbournefitouts.au
app.melbournefitouts.au
b131379f-4cb0-453c-8f45-c710f2de2170.melbournefitouts.au
b7c38468-9360-4872-905a-66879ddb1e21.melbournefitouts.au
billing.melbournefitouts.au
emv1.melbournefitouts.au
melbournefitouts.au
mta-sts.melbournefitouts.au
saxdqapp.melbournefitouts.au
www.melbournefitouts.au
nvdltalentscoutcenter.com
*.nvdltalentscoutcenter.com
*.16.oddballs.com.au
*.557307fd-f66f-4f8d-b6ab-f4bc63cbd8fe.oddballs.com.au
*.a92b1f08-c1c0-4ad2-a8ad-f4f6a74c7470.oddballs.com.au
*.m.oddballs.com.au
oddballs.com.au
*.oddballs.com.au
*.public.oddballs.com.au
*.share.oddballs.com.au
*.wildcard.oddballs.com.au
*.ww16.oddballs.com.au
*.ww25.oddballs.com.au
*.ww38.oddballs.com.au
*.www.oddballs.com.au
*.003.rkdmf0429.com
*.300.rkdmf0429.com
rkdmf0429.com
*.rkdmf0429.com
*.random.sportvandaag.com
sportvandaag.com
*.sportvandaag.com
*.backend.striking.com.au
*.backup.striking.com.au
striking.com.au
*.striking.com.au
*.backup.supplementyourincome.com.au
supplementyourincome.com.au
*.supplementyourincome.com.au
*.ww38.supplementyourincome.com.au
*.backup.surfersparadisehotel.com.au
surfersparadisehotel.com.au
*.surfersparadisehotel.com.au
*.backup.taxaccountantsaustralia.com.au
taxaccountantsaustralia.com.au
*.taxaccountantsaustralia.com.au
*.backup.thebarossa.com.au
thebarossa.com.au
*.thebarossa.com.au
*.autoconfig.turfs.com.au
*.backup.turfs.com.au
turfs.com.au
*.turfs.com.au
*.ww38.turfs.com.au
*.admin.xx35.live
*.app.xx35.live
*.dashboard.xx35.live
*.dev.xx35.live
*.sso.xx35.live
*.staging.xx35.live
*.test.xx35.live
xx35.live
*.xx35.live
Other domains in certificate