Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=kidsfiredup.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 25, 2026
Valid Until
December 24, 2026
56 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
C3:31:98:7D:74:7C:66:97:3C:74:EA:50:41:E4:90:63:B0:3F:FB:01:6F:B0:0B:68:80:0C:9A:AC:3C:38:C8:9B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
87 domains
msn-problems.com
*.msn-problems.com
*.argo.msn-problems.com
*.controller.msn-problems.com
*.crm2.msn-problems.com
*.isphosts.msn-problems.com
*.model.msn-problems.com
blogspota.com
*.blogspota.com
*.bp.blogspota.com
*.zemeks.blogspota.com
dyptanaza.com
*.dyptanaza.com
*.staging.dyptanaza.com
*.www.dyptanaza.com
erc20r.com
*.erc20r.com
eurobahk.help
*.eurobahk.help
falconirondesign.com
*.falconirondesign.com
globalcloud.sbs
*.globalcloud.sbs
honestpathtravel.live
*.honestpathtravel.live
iedufy.com
*.iedufy.com
*.7aj2vetgxg.imageofnature.com
*.api.imageofnature.com
imageofnature.com
*.imageofnature.com
*.lmdlv5uxks.imageofnature.com
*.portal.imageofnature.com
*.public.imageofnature.com
*.share.imageofnature.com
*.wwww.imageofnature.com
*.xoolyno4vx.imageofnature.com
*.app.inove.my
inove.my
*.inove.my
iqhn.org
*.iqhn.org
jkhn.org
*.jkhn.org
jsh.co
*.jsh.co
karenstechreview.com
*.karenstechreview.com
kfhn.org
*.kfhn.org
kiacommunity.de
*.kiacommunity.de
kidsfiredup.com
*.kidsfiredup.com
llhn.org
*.llhn.org
nanite.xyz
*.nanite.xyz
nyfh.org
*.nyfh.org
paitosgp.ws
*.paitosgp.ws
*.1846m.paoadvertising.top
*.4kxnn.paoadvertising.top
*.4qwa0.paoadvertising.top
*.60t9v.paoadvertising.top
*.78z68.paoadvertising.top
*.95lw2.paoadvertising.top
*.ayfpk.paoadvertising.top
*.cg4o5.paoadvertising.top
*.kwid9.paoadvertising.top
paoadvertising.top
*.paoadvertising.top
perpfi.app
*.perpfi.app
pnhn.org
*.pnhn.org
quryrydo.pro
*.quryrydo.pro
rainweave.sbs
*.rainweave.sbs
registratsiya.com
*.registratsiya.com
roxcasino1009.com
*.roxcasino1009.com
softwarebynet.com
*.softwarebynet.com
Other domains in certificate