Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=fret.pro
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 04, 2026
Valid Until
May 05, 2026
70 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B6:C6:31:5D:B2:3F:36:53:90:E3:5C:7D:50:07:5E:A4:A2:95:F5:9C:28:8F:FC:2B:E8:1E:58:28:E6:86:7B:2B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
allmond.com
*.allmond.com
*.admin.allmond.com
*.autodiscover.allmond.com
*.connect.allmond.com
*.mail.allmond.com
*.ra.allmond.com
*.secure.allmond.com
belshift.eu
*.belshift.eu
bestcardbonus.com
*.bestcardbonus.com
*.autodiscover.binqiu.com
binqiu.com
*.binqiu.com
bobo.au
*.bobo.au
*.ww38.bobo.au
*.api.buqj.com
buqj.com
*.buqj.com
*.dxk.buqj.com
*.q.buqj.com
*.ww11.buqj.com
chess3000.com
*.chess3000.com
*.bi.choicemobilephone.com
choicemobilephone.com
*.choicemobilephone.com
*.node1.choicemobilephone.com
*.origin.choicemobilephone.com
choiceprivliges.com
*.choiceprivliges.com
dailyrewards.com.au
*.dailyrewards.com.au
*.ww38.dailyrewards.com.au
*.authsmtp.discountbags.au
discountbags.au
*.discountbags.au
*.ww38.discountbags.au
elcofinefoods.com
*.elcofinefoods.com
*.remote.elcofinefoods.com
fraserisland.au
*.fraserisland.au
*.ww38.fraserisland.au
fret.pro
*.fret.pro
fsea.org
*.fsea.org
*.www2.fsea.org
happysecrataryday.com
*.happysecrataryday.com
*.atom.hentaisuper.org
*.cdn-porn.hentaisuper.org
hentaisuper.org
*.hentaisuper.org
homelease.in
*.homelease.in
*.in.homelease.in
*.www.homelease.in
livekamerat.com
*.livekamerat.com
*.ww38.livekamerat.com
needgas.com
*.needgas.com
*.ww25.needgas.com
*.www1.needgas.com
*.cpcalendars.onestopauto.com.au
onestopauto.com.au
*.onestopauto.com.au
pakistantoday.news
*.pakistantoday.news
petranews.com
*.petranews.com
*.random.petranews.com
*.ww25.petranews.com
*.ww38.petranews.com
selectqote.com
*.selectqote.com
shepherds.studio
*.shepherds.studio
supermercadobh.com.br
*.supermercadobh.com.br
*.superset.supermercadobh.com.br
*.ww16.supermercadobh.com.br
*.ww38.supermercadobh.com.br
*.hostmaster.webbimageart.com
webbimageart.com
*.webbimageart.com
Other domains in certificate