Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=tanktested.org
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 17, 2026
Valid Until
July 16, 2026
61 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C7:38:5F:3A:A9:00:03:D7:EC:49:55:1D:FD:71:04:81:25:88:21:E4:23:02:BF:92:F0:00:72:00:12:DB:0B:7B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
bonusus.com
*.bonusus.com
*.admin.bonusus.com
*.email.bonusus.com
*.en.bonusus.com
*.galleries.bonusus.com
*.kh.bonusus.com
*.members.bonusus.com
*.mm.bonusus.com
*.mx.bonusus.com
*.pop.bonusus.com
*.rveuymail.bonusus.com
*.server.bonusus.com
*.spam.bonusus.com
*.speedtest.bonusus.com
*.travel.bonusus.com
amhnetwork.com
*.amhnetwork.com
*.random.amhnetwork.com
cafefraiche.co.uk
*.cafefraiche.co.uk
*.webmail.cafefraiche.co.uk
cityofwinterhaven.com
*.cityofwinterhaven.com
*.www.cityofwinterhaven.com
disscoveryplus.com
*.disscoveryplus.com
*.ww25.disscoveryplus.com
*.backup.friedeberg-aquariumbau.com
friedeberg-aquariumbau.com
*.friedeberg-aquariumbau.com
*.oldshop.friedeberg-aquariumbau.com
*.shop.friedeberg-aquariumbau.com
*.woo.friedeberg-aquariumbau.com
*.94aa027a-8a3b-4e3d-a2a9-6ce0611c1966.groupoenavra.com
*.a.groupoenavra.com
*.app.groupoenavra.com
*.cpanel.groupoenavra.com
*.dan.groupoenavra.com
*.dcwhruaz.groupoenavra.com
*.gateway.groupoenavra.com
*.go.groupoenavra.com
groupoenavra.com
*.groupoenavra.com
*.iwwdxcpcontacts.groupoenavra.com
*.mail.groupoenavra.com
*.mail02.groupoenavra.com
*.mail2.groupoenavra.com
*.mail5.groupoenavra.com
*.mailgate.groupoenavra.com
*.mx2.groupoenavra.com
*.ofoqkrds.groupoenavra.com
*.pay.groupoenavra.com
*.sitemap.groupoenavra.com
*.smtp.groupoenavra.com
*.test.groupoenavra.com
*.whm.groupoenavra.com
*.www2.groupoenavra.com
islandbar.co.uk
*.islandbar.co.uk
lakebalboapawnshop.com
*.lakebalboapawnshop.com
*.random.lakebalboapawnshop.com
*.ww25.lakebalboapawnshop.com
madfreelife.com
*.madfreelife.com
*.random.madfreelife.com
mycmoclaim.com
*.mycmoclaim.com
*.random.mycmoclaim.com
*.ww38.mycmoclaim.com
*.143c0649-70e6-4a25-8e0e-6923a9860c1c.platinumrings.in
platinumrings.in
*.platinumrings.in
*.pscqkm.platinumrings.in
*.remote.platinumrings.in
*.www.platinumrings.in
radyshell.com
*.radyshell.com
*.com.simplifried.com
simplifried.com
*.simplifried.com
tanktested.org
*.tanktested.org
tofi.live
*.tofi.live
unhasbyvalcordeiro.online
*.unhasbyvalcordeiro.online
wayv.live
*.wayv.live
Other domains in certificate