Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=xmovie.online
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 19, 2026
Valid Until
May 20, 2026
89 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8E:89:9D:1D:3A:51:42:9F:A9:E5:8F:DB:56:EC:1C:08:19:94:D7:B4:2E:27:ED:E7:A0:A0:4C:B3:81:FD:64:2B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
vrhobbies.com
*.vrhobbies.com
*.random.vrhobbies.com
*.wildcard.vrhobbies.com
*.ww6.vrhobbies.com
0504.it
*.0504.it
*.notexistspostmaster.0504.it
*.www.0504.it
5phut.me
*.5phut.me
*.diendan.5phut.me
*.ww25.5phut.me
aibit.ch
*.aibit.ch
*.groundcontrol.aibit.ch
airesair.com
*.airesair.com
*.www.airesair.com
ampolle.it
*.ampolle.it
*.hostmaster.ampolle.it
*.webmail.ampolle.it
*.api.falchero.com
*.blog.falchero.com
*.dev.falchero.com
falchero.com
*.falchero.com
*.mail.falchero.com
*.sitemap.falchero.com
*.test.falchero.com
*.ww25.falchero.com
*.ww38.falchero.com
h-e-r-e.click
*.h-e-r-e.click
*.beta.ircing.com
*.blog.ircing.com
*.hostmaster.ircing.com
ircing.com
*.ircing.com
*.members.ircing.com
*.store.ircing.com
*.wiki.ircing.com
*.ww25.ircing.com
jayski.co
*.jayski.co
*.old.jayski.co
kewtrainingacademy.com
*.kewtrainingacademy.com
*.wildcard.kewtrainingacademy.com
*.hostmaster.lemonsde.com
lemonsde.com
*.lemonsde.com
*.test.lemonsde.com
*.cpanel.mindfullness.site
*.hostmaster.mindfullness.site
*.mail.mindfullness.site
mindfullness.site
*.mindfullness.site
*.cpanel.onlineinsurance.club
*.hostmaster.onlineinsurance.club
*.mail.onlineinsurance.club
onlineinsurance.club
*.onlineinsurance.club
*.webdisk.onlineinsurance.club
*.webmail.onlineinsurance.club
*.www.onlineinsurance.club
*.api.skye.bet
*.app.skye.bet
*.mail.skye.bet
*.sitemap.skye.bet
skye.bet
*.skye.bet
sryn.xyz
*.sryn.xyz
*.pepebsctoken.token2049.vip
token2049.vip
*.token2049.vip
*.api.venditalampade.it
*.hostmaster.venditalampade.it
venditalampade.it
*.venditalampade.it
*.hostmaster.xmovie.online
*.mail.xmovie.online
*.sitemap.xmovie.online
*.sitemaps.xmovie.online
*.support.xmovie.online
xmovie.online
*.xmovie.online
Other domains in certificate