Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=manhattan.cc
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 06, 2026
Valid Until
September 04, 2026 75 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F5:05:3A:4A:D8:08:C1:81:F6:6D:D9:4F:7E:D1:7D:0C:00:67:6D:D0:3C:12:16:BA:69:61:B3:1D:FC:C8:98:57
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
valuepoint.net *.valuepoint.net *.phpmyadmin.valuepoint.net

Other domains in certificate

86937.one *.86937.one *.demo.86937.one
amory.it *.amory.it *.bi.amory.it *.superset.amory.it
bikerider.au *.bikerider.au
*.165-140-69-202.cpanel.au cpanel.au *.cpanel.au *.cpw062.cpanel.au *.cpw063.cpanel.au *.cpw064.cpanel.au *.cpw065.cpanel.au *.sdc-cpw131.cpanel.au
*.adopt-me-april-fools-2023.exodine.online *.blood-eagle-power-armor-paint.exodine.online *.chateau-dyquem-best-vintages.exodine.online *.csgo-best-m4a1-skins.exodine.online *.doppler-radar-decatur-al.exodine.online exodine.online *.exodine.online *.harvestslgh.exodine.online *.kindle-books-vk.exodine.online *.kiv-7m-manual.exodine.online *.level-11-bloxorz.exodine.online *.pdt-to-central.exodine.online *.pizza-express-marsden-road-bolton.exodine.online *.scott-and-christie-eye-fox-chapel.exodine.online *.sumter-county-code-enforcement.exodine.online *.the-death-of-chivalry-rs3.exodine.online
*.hostmaster.iezo.org iezo.org *.iezo.org *.sitemap.iezo.org *.ww1.iezo.org
*.git.insercam.org insercam.org *.insercam.org
lvbet66666.com *.lvbet66666.com *.maswertepaula.lvbet66666.com *.random.lvbet66666.com
manhattan.cc *.manhattan.cc *.mx.manhattan.cc *.random.manhattan.cc
mtspjiv5.xyz *.mtspjiv5.xyz *.ww25.mtspjiv5.xyz *.ww38.mtspjiv5.xyz
reiwa.group *.reiwa.group *.ww38.reiwa.group
*.5cb46abc-b1bd-49bf-aabb-d0c0b4245d88.uraxen.info *.a.uraxen.info *.api.uraxen.info *.app.uraxen.info *.backup.uraxen.info *.dashboard.uraxen.info *.dev.uraxen.info *.hwrbvstaging.uraxen.info *.mail.uraxen.info *.mailer.uraxen.info *.marketing.uraxen.info *.mxepadwf.uraxen.info *.qa.uraxen.info *.secure.uraxen.info *.stg.uraxen.info *.uat.uraxen.info uraxen.info *.uraxen.info *.v1.uraxen.info *.v2.uraxen.info *.web.uraxen.info
*.api.vellezia.com *.m8y57k.vellezia.com *.test.vellezia.com vellezia.com *.vellezia.com
*.random.xuxusoft.com *.wildcard.xuxusoft.com xuxusoft.com *.xuxusoft.com