Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=starshotapparel.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 12, 2026
Valid Until
August 10, 2026
85 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
39:57:38:6C:8D:97:38:4F:20:15:37:33:26:3E:D6:62:48:37:B8:39:1B:DE:1E:28:16:4D:0C:06:07:4D:4F:D0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
craca.it
*.craca.it
*.apl.craca.it
*.astelmail.craca.it
*.clientesvpn.craca.it
*.hostmaster.craca.it
*.mail.craca.it
*.mx.craca.it
*.nvdi.craca.it
*.pvc.craca.it
*.status.craca.it
*.vpnma.craca.it
*.xapp.craca.it
analystestimate.com
*.analystestimate.com
*.dan.analystestimate.com
*.hostmaster.analystestimate.com
*.ww25.analystestimate.com
bmed.net
*.bmed.net
*.g.bmed.net
*.hostmaster.bmed.net
*.int.bmed.net
*.s.bmed.net
*.staging.bmed.net
*.wildcard.bmed.net
*.ww25.bmed.net
buscdn.cfd
*.buscdn.cfd
*.ww17.buscdn.cfd
*.ww2.buscdn.cfd
*.ww38.buscdn.cfd
*.ww5.buscdn.cfd
*.www.buscdn.cfd
*.wwwww.buscdn.cfd
*.wwwwww.buscdn.cfd
*.app.colesteroloalto.com
*.argo.colesteroloalto.com
colesteroloalto.com
*.colesteroloalto.com
*.dashboard.colesteroloalto.com
*.metrics.colesteroloalto.com
*.cdn.contentstock.com
contentstock.com
*.contentstock.com
*.ww16.contentstock.com
*.ww25.contentstock.com
*.cloud.defeatingarthritis.com
defeatingarthritis.com
*.defeatingarthritis.com
*.rds.defeatingarthritis.com
*.sitemap.defeatingarthritis.com
*.fmbvpf.healing-journey.info
healing-journey.info
*.healing-journey.info
*.cpanel.jidlo.pro
jidlo.pro
*.jidlo.pro
low-testosterone-houston.com
*.low-testosterone-houston.com
*.ykzqsj.low-testosterone-houston.com
*.loto.majorbet.live
majorbet.live
*.majorbet.live
*.copy.off-ground.com
*.cpanel.off-ground.com
*.dwy.off-ground.com
off-ground.com
*.off-ground.com
*.ww38.off-ground.com
*.backend.starshotapparel.com
starshotapparel.com
*.starshotapparel.com
*.96lgqb.szhhqsm.cn
*.99k.szhhqsm.cn
*.9dr.szhhqsm.cn
*.9e6t.szhhqsm.cn
*.9yh9h2.szhhqsm.cn
*.aiu9vx.szhhqsm.cn
*.aoxx.szhhqsm.cn
*.gsozj5odqq.szhhqsm.cn
*.m.szhhqsm.cn
szhhqsm.cn
*.szhhqsm.cn
*.tp3.szhhqsm.cn
*.wadpgs6o.szhhqsm.cn
*.wejjd5jqte.szhhqsm.cn
*.random.whywaithealth.com
whywaithealth.com
*.whywaithealth.com
Other domains in certificate