Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=winprincess.bet
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 15, 2026
Valid Until
May 16, 2026
89 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
21:04:0F:67:BD:14:92:A3:0B:9E:C4:AC:2F:93:31:84:0F:0F:18:54:84:F7:6D:BE:E1:B9:69:8E:47:1E:4D:9A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
slapcaption.com
*.slapcaption.com
535.biz
*.535.biz
*.blog.535.biz
*.x.535.biz
*.y.535.biz
apsley.com
*.apsley.com
*.citrix.apsley.com
autosalemanes.com
*.autosalemanes.com
biedlingmaier.com
*.biedlingmaier.com
hp35.top
*.hp35.top
*.o1ghs.hp35.top
*.osldc.hp35.top
*.qk6fu.hp35.top
*.qpuov.hp35.top
*.x7pal.hp35.top
microsoftpublisher.com
*.microsoftpublisher.com
*.shop.microsoftpublisher.com
*.ww25.microsoftpublisher.com
*.ww38.microsoftpublisher.com
phimset.xyz
*.phimset.xyz
*.vlxx.phimset.xyz
*.webmail.phimset.xyz
*.websex.phimset.xyz
*.ww25.phimset.xyz
*.ww38.phimset.xyz
*.www.phimset.xyz
*.hb.rezka.website
*.random.rezka.website
rezka.website
*.rezka.website
*.et.sicm.net
*.imf.sicm.net
sicm.net
*.sicm.net
*.sitemap.sicm.net
singlefriends.it
*.singlefriends.it
skin-rejuvination-it-agent.click
*.skin-rejuvination-it-agent.click
skygreen.co
*.skygreen.co
slpublishing.co.uk
*.slpublishing.co.uk
smartdate.it
*.smartdate.it
smartgirl.it
*.smartgirl.it
smartphonestore.it
*.smartphonestore.it
*.rds.templinerecruitment.co.uk
templinerecruitment.co.uk
*.templinerecruitment.co.uk
*.webmail.templinerecruitment.co.uk
*.zhujunhua.templinerecruitment.co.uk
*.9433670f-ed85-42c0-b02b-a2604762d3e2.temu0098.shop
*.ad.temu0098.shop
*.adg.temu0098.shop
*.adguard.temu0098.shop
*.adguard01.temu0098.shop
*.admin.temu0098.shop
*.api.temu0098.shop
*.app.temu0098.shop
*.blog.temu0098.shop
*.dns.temu0098.shop
*.dns1.temu0098.shop
*.doh.temu0098.shop
*.doh1.temu0098.shop
*.metric.temu0098.shop
*.portal.temu0098.shop
*.psfcoad.temu0098.shop
*.qhypsapi.temu0098.shop
*.qisccdoh.temu0098.shop
temu0098.shop
*.temu0098.shop
*.test.temu0098.shop
therefinerie.com
*.therefinerie.com
*.vpn.therefinerie.com
*.portal.winprincess.bet
winprincess.bet
*.winprincess.bet
Other domains in certificate