Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=982yjj.top
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 20, 2026
Valid Until
May 21, 2026
89 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2B:48:09:4A:BA:A2:4A:C6:AE:15:82:57:8E:A0:35:29:F3:3C:23:6A:CF:B5:8D:7F:0B:D9:95:C2:13:26:A1:EA
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
mypaymef.com
*.mypaymef.com
*.ingalls.mypaymef.com
*.unitupoint.mypaymef.com
982yjj.top
*.982yjj.top
*.abc.982yjj.top
*.1d20368f-c83f-4d58-a24e-f420119f6c85.bitcoinraffle.org
*.aceaustaging.bitcoinraffle.org
*.admin.bitcoinraffle.org
*.api.bitcoinraffle.org
*.app.bitcoinraffle.org
*.backup.bitcoinraffle.org
bitcoinraffle.org
*.bitcoinraffle.org
*.bot.bitcoinraffle.org
*.comeging.bitcoinraffle.org
*.dash.bitcoinraffle.org
*.dev.bitcoinraffle.org
*.e12db8e6-ea2b-4989-ae7c-dcda5ae8f119.bitcoinraffle.org
*.gitlab.bitcoinraffle.org
*.hostmaster.bitcoinraffle.org
*.m.bitcoinraffle.org
*.mx.bitcoinraffle.org
*.new.bitcoinraffle.org
*.shop.bitcoinraffle.org
*.staging.bitcoinraffle.org
*.test.bitcoinraffle.org
*.uat.bitcoinraffle.org
*.user.bitcoinraffle.org
*.www.bitcoinraffle.org
cipit777.co
*.cipit777.co
*.ww38.cipit777.co
*.api.demandboost.us
*.app.demandboost.us
*.assets.demandboost.us
demandboost.us
*.demandboost.us
*.demo.demandboost.us
*.dev.demandboost.us
*.hostmaster.demandboost.us
*.test.demandboost.us
*.ugacjdemo.demandboost.us
holistar.com
*.holistar.com
*.random.holistar.com
*.backup.jovem-guarda.com
*.claudia-rath.jovem-guarda.com
jovem-guarda.com
*.jovem-guarda.com
*.rds1.jovem-guarda.com
*.store.jovem-guarda.com
*.www.jovem-guarda.com
*.admin.l-k-5-5-5.vip
*.api.l-k-5-5-5.vip
*.app.l-k-5-5-5.vip
*.backup.l-k-5-5-5.vip
*.dashboard.l-k-5-5-5.vip
*.demo.l-k-5-5-5.vip
*.dev.l-k-5-5-5.vip
*.homolog.l-k-5-5-5.vip
*.hostmaster.l-k-5-5-5.vip
l-k-5-5-5.vip
*.l-k-5-5-5.vip
*.mail.l-k-5-5-5.vip
*.marketing.l-k-5-5-5.vip
*.spriiapi.l-k-5-5-5.vip
*.staging.l-k-5-5-5.vip
*.stg.l-k-5-5-5.vip
*.v2.l-k-5-5-5.vip
*.vip.l-k-5-5-5.vip
*.web.l-k-5-5-5.vip
*.www.l-k-5-5-5.vip
philippinesmyth.site
*.philippinesmyth.site
*.ww25.philippinesmyth.site
*.acc.qlys90.app
*.admin.qlys90.app
*.api.qlys90.app
*.app.qlys90.app
*.dev.qlys90.app
*.hostmaster.qlys90.app
*.press.qlys90.app
qlys90.app
*.qlys90.app
*.rustore.qlys90.app
*.shop.qlys90.app
*.www.qlys90.app
Other domains in certificate