Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=thejf.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 12, 2026
Valid Until
December 11, 2026
59 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
73:D6:73:4A:B2:BE:8F:F9:D4:6A:7B:40:16:B5:FE:73:8C:EE:0E:32:8B:78:4C:B4:01:26:73:CF:2B:B8:A9:D2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
86 domains
tryit.it
*.tryit.it
*.do.tryit.it
*.forrunningapartyinyourhome.tryit.it
*.fromapprovedformula.tryit.it
*.headache.tryit.it
*.ifyouthinkso.tryit.it
*.isasecondorthirddoserequired.tryit.it
*.leaf.tryit.it
*.learningprocess.tryit.it
*.livelyverse.tryit.it
*.manth.tryit.it
*.permanth.tryit.it
*.pneumoniaandconsumption.tryit.it
*.poiutsthem.tryit.it
*.process.tryit.it
*.reporting.tryit.it
*.required.tryit.it
*.secondorthirddoserequired.tryit.it
*.tbe-lieveit.tryit.it
*.thelearningprocess.tryit.it
*.them.tryit.it
*.ttat.tryit.it
*.tvttat.tryit.it
*.verse.tryit.it
*.wrap-per.tryit.it
18677hzhbqqq.vip
*.18677hzhbqqq.vip
*.jingyuan-uuu.18677hzhbqqq.vip
*.jingyuan-zzz.18677hzhbqqq.vip
39670.bid
*.39670.bid
869340.lol
*.869340.lol
*.adm.869340.lol
a8.com.au
*.a8.com.au
*.all-newmazd.a8.com.au
*.allnewmazd.a8.com.au
*.mazd.a8.com.au
*.newmazd.a8.com.au
*.portal.a8.com.au
froggergame.com
*.froggergame.com
handgunners.com
*.handgunners.com
*.ww1.handgunners.com
mapsonline.com.au
*.mapsonline.com.au
reviewsauthority.co
*.reviewsauthority.co
*.test.reviewsauthority.co
*.top.reviewsauthority.co
thejf.com
*.thejf.com
*.ww25.thejf.com
*.admin.valana.online
*.api.valana.online
*.app.valana.online
*.auth.valana.online
*.backend.valana.online
*.beta.valana.online
*.cms.valana.online
*.console.valana.online
*.corp.valana.online
*.dashboard.valana.online
*.dev.valana.online
*.eu.valana.online
*.hml.valana.online
*.homologacao.valana.online
*.internal.valana.online
*.intranet.valana.online
*.login.valana.online
*.mail.valana.online
*.ns10.valana.online
*.portal.valana.online
*.preprod.valana.online
*.prod.valana.online
*.random.valana.online
*.signin.valana.online
*.sso.valana.online
*.staging.valana.online
*.test.valana.online
*.us.valana.online
valana.online
*.valana.online
Other domains in certificate