Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=holdings.finance
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 13, 2026
Valid Until
August 11, 2026
78 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
42:C9:B6:85:00:15:DD:A8:9F:97:31:89:23:A0:5C:32:B9:8D:1F:BB:80:A0:C0:FD:E8:55:B8:D7:4D:C9:56:05
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
iv4.cc
*.iv4.cc
*.1.iv4.cc
*.2.iv4.cc
*.a.iv4.cc
*.my.iv4.cc
161742.lol
*.161742.lol
*.u3nvpn.161742.lol
bankbook.com.au
*.bankbook.com.au
*.demo.bankbook.com.au
*.old.bankbook.com.au
*.random.bankbook.com.au
*.staging.bankbook.com.au
*.ww25.bankbook.com.au
coffeeday.eu
*.coffeeday.eu
*.host20.coffeeday.eu
*.mail.coffeeday.eu
*.mx.coffeeday.eu
*.ww.coffeeday.eu
*.3dduzd.envisionamplifyywave.info
envisionamplifyywave.info
*.envisionamplifyywave.info
fap18.pro
*.fap18.pro
*.ww16.fap18.pro
hkconstruct.com
*.hkconstruct.com
*.sitemap.hkconstruct.com
*.vpn.hkconstruct.com
*.www.hkconstruct.com
holdings.finance
*.holdings.finance
*.hostmaster.holdings.finance
instanthr-insight.com
*.instanthr-insight.com
*.admin.leepaid.store
*.ci.leepaid.store
leepaid.store
*.leepaid.store
*.preprod.leepaid.store
*.production.leepaid.store
*.webdisk.leepaid.store
*.ww25.leepaid.store
*.www.leepaid.store
lifejackets.com.au
*.lifejackets.com.au
*.ns0.lifejackets.com.au
local-seguro.online
*.local-seguro.online
*.pay.local-seguro.online
*.ww38.local-seguro.online
lvonlineresmi.casino
*.lvonlineresmi.casino
michigan.pics
*.michigan.pics
*.admin.ohasianz.com
ohasianz.com
*.ohasianz.com
*.ekonomat.provindo.org
*.kanisius.provindo.org
provindo.org
*.provindo.org
*.psp.provindo.org
soccerhub.co
*.soccerhub.co
*.www.soccerhub.co
*.black.teazeworld.com
*.blog.teazeworld.com
*.cloudsec.teazeworld.com
*.fuwu.teazeworld.com
*.gd.teazeworld.com
*.hcv.teazeworld.com
*.mail.teazeworld.com
*.newstudent.teazeworld.com
*.store.teazeworld.com
teazeworld.com
*.teazeworld.com
*.ww25.teazeworld.com
*.ww38.teazeworld.com
*.www.teazeworld.com
*.ns1.tvmovie.com.au
tvmovie.com.au
*.tvmovie.com.au
*.wildcard.xn--jvv142c9jal74b.com
xn--jvv142c9jal74b.com
*.xn--jvv142c9jal74b.com
Other domains in certificate