Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=scholarshipguider.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 18, 2026
Valid Until
January 16, 2027
80 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
76:59:04:DD:FE:7E:0D:BF:62:ED:CF:48:F3:DC:36:01:5F:B4:EE:53:C9:E9:37:9C:8A:0B:8B:34:6F:F4:F8:64
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
75 domains
selectwinetours.com
*.selectwinetours.com
*.231b4d4d-74a5-4b83-9bc5-a835ffa11cd5.selectwinetours.com
*.cpanel.selectwinetours.com
*.v2.selectwinetours.com
*.webmail.selectwinetours.com
*.crm.crypto-nerds.de
crypto-nerds.de
*.crypto-nerds.de
*.mailrelay.crypto-nerds.de
*.office.crypto-nerds.de
*.pop3.crypto-nerds.de
*.sitemap.crypto-nerds.de
*.backoffice.lumaro.digital
*.dashboard.lumaro.digital
lumaro.digital
*.lumaro.digital
*.preview.lumaro.digital
*.staging.lumaro.digital
*.ww38.lumaro.digital
mbestcasinolist.info
*.mbestcasinolist.info
*.ww16.mbestcasinolist.info
nneux.top
*.nneux.top
*.rkuvx.nneux.top
*.tzygd.nneux.top
*.admin.paydayloansgeek.com
*.api.paydayloansgeek.com
*.autodiscover.paydayloansgeek.com
*.ci-production.paydayloansgeek.com
*.login.paydayloansgeek.com
*.main.paydayloansgeek.com
paydayloansgeek.com
*.paydayloansgeek.com
*.prod2.paydayloansgeek.com
*.prod3.paydayloansgeek.com
*.remote.paydayloansgeek.com
*.sitemap.paydayloansgeek.com
*.staging-pipeline.paydayloansgeek.com
*.uat-cicd.paydayloansgeek.com
*.web.paydayloansgeek.com
*.web3.paydayloansgeek.com
*.bobath.przeworsk.com
*.ciecie-woda.przeworsk.com
przeworsk.com
*.przeworsk.com
*.santander.przeworsk.com
*.sauna.przeworsk.com
*.e.rinkit.uk
rinkit.uk
*.rinkit.uk
*.hermes.scholarshipguider.com
scholarshipguider.com
*.scholarshipguider.com
*.mta-sts.schulzentrum-saterland.de
schulzentrum-saterland.de
*.schulzentrum-saterland.de
*.blog.tuffstuffdesign.com.au
tuffstuffdesign.com.au
*.tuffstuffdesign.com.au
*.employeesclose.turkishaffects.org.uk
*.navigated.turkishaffects.org.uk
turkishaffects.org.uk
*.turkishaffects.org.uk
*.analysis.vampire.bio
*.analytics.vampire.bio
*.app.vampire.bio
*.auth.vampire.bio
*.backend.vampire.bio
*.exbi.vampire.bio
*.random.vampire.bio
*.sitemaps.vampire.bio
vampire.bio
*.vampire.bio
Other domains in certificate