Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=teamfor.it
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 18, 2026
Valid Until
May 19, 2026
89 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BA:D5:01:25:46:DF:03:31:41:66:98:FF:8D:80:FE:03:A2:60:1C:84:DA:50:67:B7:E8:D0:67:AE:08:33:77:FE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
marathoncard.com
*.marathoncard.com
*.random.marathoncard.com
*.store.marathoncard.com
*.wiki.marathoncard.com
*.ww38.marathoncard.com
algiz.co
*.algiz.co
*.magento.algiz.co
*.mx.algiz.co
*.remote.algiz.co
*.shop.algiz.co
*.staging.algiz.co
*.store.algiz.co
*.webconf.algiz.co
*.www.algiz.co
bkpnuanellwldmkz.xyz
*.bkpnuanellwldmkz.xyz
*.cc2mm.bkpnuanellwldmkz.xyz
*.com.bkpnuanellwldmkz.xyz
*.dpfqhovt.bkpnuanellwldmkz.xyz
*.log.bkpnuanellwldmkz.xyz
*.mp7tf.bkpnuanellwldmkz.xyz
*.pwb3b.bkpnuanellwldmkz.xyz
*.qdiek.bkpnuanellwldmkz.xyz
*.yhue2.bkpnuanellwldmkz.xyz
culvert.pro
*.culvert.pro
*.ww25.culvert.pro
*.app.dewittegids.be
*.backend.dewittegids.be
*.dev.dewittegids.be
dewittegids.be
*.dewittegids.be
*.staging.dewittegids.be
*.def43e50-be6e-4725-9c21-d30f105b5694.fi68.co
fi68.co
*.fi68.co
*.dm4price.idanagro.com
idanagro.com
*.idanagro.com
*.kivicare.idanagro.com
*.passease.idanagro.com
*.premiumhealth.idanagro.com
*.traffic.idanagro.com
*.www.idanagro.com
*.kwid9.md857.top
md857.top
*.md857.top
*.games.odinplay.net
odinplay.net
*.odinplay.net
officefurnitureteam.co.uk
*.officefurnitureteam.co.uk
opentennis.it
*.opentennis.it
*.vpn.opentennis.it
*.anonbook.spawnarea.be
*.immanuelnet.spawnarea.be
*.immanuelweb.spawnarea.be
*.projects.spawnarea.be
spawnarea.be
*.spawnarea.be
*.store.spawnarea.be
*.admin.teamfor.it
teamfor.it
*.teamfor.it
*.blacked.teenlove.com
*.comune.teenlove.com
*.mailgw.teenlove.com
*.relay.teenlove.com
teenlove.com
*.teenlove.com
*.www-1.teenlove.com
*.autodiscover.winraz.com
*.cheap.winraz.com
*.cn.winraz.com
*.cpcalendars.winraz.com
*.cpcontacts.winraz.com
*.license.winraz.com
*.localhost.winraz.com
*.m.winraz.com
*.mail.winraz.com
*.shop.winraz.com
*.store.winraz.com
*.wap.winraz.com
*.webdisk.winraz.com
winraz.com
*.winraz.com
*.www.winraz.com
Other domains in certificate