Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=ieltsparare.com
Issuer
C=US, O=Let's Encrypt, CN=YR1
Valid From
June 02, 2026
Valid Until
August 31, 2026
77 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
38:30:73:34:72:AD:89:07:FA:A0:F5:03:95:8B:C7:C6:1F:90:31:E4:EE:16:4F:69:4D:2E:36:6C:E0:94:7C:16
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
pensong.com
*.pensong.com
1234bets10giris.com
*.1234bets10giris.com
202ddd437.top
*.202ddd437.top
2n8jnnuuow.top
*.2n8jnnuuow.top
345555.vip
*.345555.vip
39885.wang
*.39885.wang
450150.com
*.450150.com
50616.mobi
*.50616.mobi
675130.one
*.675130.one
78452.one
*.78452.one
79176.one
*.79176.one
ieltsparare.com
*.ieltsparare.com
kcc-coffee.org
*.kcc-coffee.org
myhouse7.site
*.myhouse7.site
nedeljkovic-im.com
*.nedeljkovic-im.com
nettrackerpro.com
*.nettrackerpro.com
nevadatech.org
*.nevadatech.org
nightcore.onl
*.nightcore.onl
numenor.vc
*.numenor.vc
oauwvp.work
*.oauwvp.work
occipitosphenoidal.com
*.occipitosphenoidal.com
ofchkhmavxnxhhq2.com
*.ofchkhmavxnxhhq2.com
oklahomawatchdata.org
*.oklahomawatchdata.org
olusturum.info
*.olusturum.info
ooooooooxdhkujuayrrg.com
*.ooooooooxdhkujuayrrg.com
panconciliatory.com
*.panconciliatory.com
pheka.loan
*.pheka.loan
philosophister.com
*.philosophister.com
play8.app
*.play8.app
polymolecular.com
*.polymolecular.com
pornocaldo.com
*.pornocaldo.com
prime-trades.pro
*.prime-trades.pro
private-caregiver-2-mb4.click
*.private-caregiver-2-mb4.click
pseudodox.com
*.pseudodox.com
psychichthys.com
*.psychichthys.com
pterygogenea.com
*.pterygogenea.com
qlukzk.town
*.qlukzk.town
qnbvvw.top
*.qnbvvw.top
qpl28dns94xcmwek.top
*.qpl28dns94xcmwek.top
qundus.com
*.qundus.com
quoddies.com
*.quoddies.com
r05l1b.shop
*.r05l1b.shop
ralinkpaper.site
*.ralinkpaper.site
realmadventure21.shop
*.realmadventure21.shop
ristorantedasilviofossaticasamilano.onl
*.ristorantedasilviofossaticasamilano.onl
Other domains in certificate