Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=betbold.icu
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 07, 2026
Valid Until
January 05, 2027
62 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
B1:1D:55:2F:66:B9:82:16:9C:CD:CE:C8:F3:3A:85:CB:1C:6C:CB:10:F2:3B:0D:7A:51:DE:86:6A:54:32:F8:E9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
trestshop.shop
www.trestshop.shop
12265.org
*.12265.org
23606.net
*.23606.net
5888.men
*.5888.men
betbold.icu
www.betbold.icu
bnceglobalplus.sbs
*.bnceglobalplus.sbs
coltonlawfirm.com
*.coltonlawfirm.com
dolokret.sbs
*.dolokret.sbs
fabolous.uk
*.fabolous.uk
ffcmedia.com
*.ffcmedia.com
ggeconsulting.com
www.ggeconsulting.com
ikolent.cfd
*.ikolent.cfd
johnsonplumbing.co.uk
*.johnsonplumbing.co.uk
mechanix.works
www.mechanix.works
o-burgz.pro
*.o-burgz.pro
open-rice.com
www.open-rice.com
orchardvs.co.uk
*.orchardvs.co.uk
order-11972.info
*.order-11972.info
pemex-silver.digital
*.pemex-silver.digital
pending-ca-transfer.top
www.pending-ca-transfer.top
pending-ca-transfer.xyz
www.pending-ca-transfer.xyz
peransib.com
www.peransib.com
performancepeakhub.icu
www.performancepeakhub.icu
pkbmsyaikhona.com
www.pkbmsyaikhona.com
pmpyx.win
*.pmpyx.win
pol-stars.life
www.pol-stars.life
portaal.live
www.portaal.live
poshmark-id.today
www.poshmark-id.today
praxium.uk
*.praxium.uk
puwdh.one
*.puwdh.one
rummy91.live
*.rummy91.live
s3j5.onl
*.s3j5.onl
sapphire-treks.live
*.sapphire-treks.live
softauraa.com
*.softauraa.com
spirit-of-om.co.uk
*.spirit-of-om.co.uk
supportinvite.com
www.supportinvite.com
sustenanceexpert.xyz
*.sustenanceexpert.xyz
thatchportal.com
*.thatchportal.com
tom-wear.co.uk
*.tom-wear.co.uk
tuzucie.top
*.tuzucie.top
valonsins.sbs
www.valonsins.sbs
vote-0xfluid.com
www.vote-0xfluid.com
watchesgmt.co.uk
*.watchesgmt.co.uk
x543.cn
*.x543.cn
xn--55qt2b4uw3m.com
*.xn--55qt2b4uw3m.com
Other domains in certificate