Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=wordymold.site
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 10, 2026
Valid Until
April 10, 2026
51 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
99:29:95:10:D2:43:AE:CC:F1:3A:BE:B6:23:0D:BC:0A:76:3E:54:3F:45:5B:FE:AB:DC:4C:D2:24:90:EE:90:2C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
oprnai.com
*.oprnai.com
*.chat.oprnai.com
*.chatgpt.oprnai.com
*.chet.oprnai.com
*.platfomr.oprnai.com
*.platform.oprnai.com
*.ww25.oprnai.com
amerihempire.com
*.amerihempire.com
*.mobile.amerihempire.com
*.any.bmsp6.homes
*.bfa.bmsp6.homes
bmsp6.homes
*.bmsp6.homes
*.xss.bmsp6.homes
*.admin.chando.org
chando.org
*.chando.org
*.ww38.chando.org
edviewbd.com
*.edviewbd.com
*.www.edviewbd.com
energy-moto.com
*.energy-moto.com
*.www.energy-moto.com
flip.mobi
*.flip.mobi
*.98nr.kff51.xyz
kff51.xyz
*.kff51.xyz
*.random.kff51.xyz
la4gelao.cyou
*.la4gelao.cyou
*.random.la4gelao.cyou
*.adserver.liubu.com
liubu.com
*.liubu.com
mmxxx.net
*.mmxxx.net
*.my.mmxxx.net
*.public.mmxxx.net
*.www.mmxxx.net
*.autodiscover.mozganimf.xyz
*.cpcontacts.mozganimf.xyz
*.eu.mozganimf.xyz
mozganimf.xyz
*.mozganimf.xyz
*.si.mozganimf.xyz
*.webmail.mozganimf.xyz
*.ww38.mozganimf.xyz
*.xyz.mozganimf.xyz
*.ar.munsati.com
munsati.com
*.munsati.com
*.news.munsati.com
*.test.munsati.com
*.app.netsuie.com
*.dgw.netsuie.com
*.eng.netsuie.com
*.hostmaster.netsuie.com
*.mx7.netsuie.com
netsuie.com
*.netsuie.com
*.ns1.netsuie.com
*.ns2.netsuie.com
*.1ve5.puul.com
*.acceso.puul.com
*.aesnm.puul.com
*.api.puul.com
*.dqkw.puul.com
*.jimenez-term.puul.com
*.kute.puul.com
puul.com
*.puul.com
*.secure.puul.com
*.sts.puul.com
*.studentsvpn.puul.com
*.teams.puul.com
*.test.puul.com
*.ww25.puul.com
*.zmail.puul.com
renzoprotocols.co
*.renzoprotocols.co
*.ww25.renzoprotocols.co
*.ap.wordymold.site
*.eb.wordymold.site
*.m.wordymold.site
wordymold.site
*.wordymold.site
Other domains in certificate