Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=520klzl.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 26, 2025
Valid Until
March 26, 2026
39 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
52:C7:55:BF:B2:1A:8B:DE:97:F2:9F:FE:23:DD:34:44:2B:51:EC:D9:E4:00:AF:C2:32:8D:88:2E:7A:F2:F1:6F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
wowmodels.bz
*.wowmodels.bz
*.random.wowmodels.bz
520klzl.com
*.520klzl.com
autocareinsurance.co
*.autocareinsurance.co
*.ww25.autocareinsurance.co
bastianandre.at
*.bastianandre.at
bfmrkt.com
*.bfmrkt.com
*.cpanel.bfmrkt.com
blockedshots.com
*.blockedshots.com
*.dsfxirandom.blockedshots.com
*.random.blockedshots.com
*.ww17.blockedshots.com
*.ww25.blockedshots.com
bsk19.com
*.bsk19.com
*.bejasiliwangi.filter-sport4k.com
*.bigsport.filter-sport4k.com
*.booster14.filter-sport4k.com
*.bring-hd.filter-sport4k.com
*.broadcast-tv.filter-sport4k.com
*.camel.filter-sport4k.com
*.dhotline-tv.filter-sport4k.com
*.directv.filter-sport4k.com
*.el-sports.filter-sport4k.com
*.envio-tv.filter-sport4k.com
*.explore.filter-sport4k.com
filter-sport4k.com
*.filter-sport4k.com
*.gamecharger.filter-sport4k.com
*.go-live.filter-sport4k.com
*.gofan-stream.filter-sport4k.com
*.hd4k.filter-sport4k.com
*.hsfa.filter-sport4k.com
*.index.filter-sport4k.com
*.live4k.filter-sport4k.com
*.livesports.filter-sport4k.com
*.magnum.filter-sport4k.com
*.moba.filter-sport4k.com
*.news-tv.filter-sport4k.com
*.official-best.filter-sport4k.com
*.paramount.filter-sport4k.com
*.quality.filter-sport4k.com
*.raden03.filter-sport4k.com
*.royal.filter-sport4k.com
*.score-update.filter-sport4k.com
*.scoreboard.filter-sport4k.com
*.scorebooklive.filter-sport4k.com
*.section.filter-sport4k.com
*.serietv-online.filter-sport4k.com
*.sling-tv.filter-sport4k.com
*.spectrum.filter-sport4k.com
*.spectrumnews.filter-sport4k.com
*.sport-fx.filter-sport4k.com
*.sport-one.filter-sport4k.com
*.sport-rugby.filter-sport4k.com
*.sports-tv.filter-sport4k.com
*.stream-hd.filter-sport4k.com
*.stream-tv.filter-sport4k.com
*.streamsports.filter-sport4k.com
*.striv.filter-sport4k.com
*.transcorps99.filter-sport4k.com
*.tv-news.filter-sport4k.com
*.tv-sport.filter-sport4k.com
*.tv.filter-sport4k.com
*.tvhd.filter-sport4k.com
*.usa1.filter-sport4k.com
*.vipstream.filter-sport4k.com
*.watch-bvm.filter-sport4k.com
*.watchstream-tv.filter-sport4k.com
*.web-gc.filter-sport4k.com
*.wellcomsite.filter-sport4k.com
*.zahra-sports.filter-sport4k.com
i-vdo.info
*.i-vdo.info
*.www.i-vdo.info
jayabola2.us
*.jayabola2.us
*.www.jayabola2.us
linhadaguaviva.com.br
*.linhadaguaviva.com.br
talbotssales.com
*.talbotssales.com
tiger138.at
*.tiger138.at
Other domains in certificate