Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=wwwparamount.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 29, 2026
Valid Until
January 27, 2027
83 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
79:30:21:3E:8B:31:9F:50:0E:B1:DF:6B:A7:09:D2:45:DE:3B:AF:89:5A:CD:11:AC:CE:A3:EB:AE:F5:EE:A9:24
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
88 domains
wwwparamount.com
*.wwwparamount.com
*.92659d31-f346-4718-be5d-805e1da3327d.wwwparamount.com
*.ww12.wwwparamount.com
*.ww25.wwwparamount.com
agriculturetech.online
*.agriculturetech.online
*.ns2.agriculturetech.online
*.upport.agriculturetech.online
ayushimishra.com
*.ayushimishra.com
*.cn.ayushimishra.com
*.lfitp.ayushimishra.com
*.mqb.ayushimishra.com
*.www.ayushimishra.com
*.ace-cash-express-jacksonville-fl.goholygirl.com
*.best-fixed-rate-home-loans.goholygirl.com
*.early-mortgage-payoff-calculator.goholygirl.com
goholygirl.com
*.goholygirl.com
*.random.goholygirl.com
*.springleaf-financial-west-first-street.goholygirl.com
*.title-loan.goholygirl.com
lookmovie2.ag
*.lookmovie2.ag
*.report.lookmovie2.ag
*.blog.nobodybeatstheking.com
*.cmspic.nobodybeatstheking.com
*.demo.nobodybeatstheking.com
*.e.nobodybeatstheking.com
*.hotfix.nobodybeatstheking.com
*.mobile.nobodybeatstheking.com
nobodybeatstheking.com
*.nobodybeatstheking.com
*.preprod.nobodybeatstheking.com
*.sitemap.nobodybeatstheking.com
*.store.nobodybeatstheking.com
*.support.nobodybeatstheking.com
*.trabajo.nobodybeatstheking.com
*.web.nobodybeatstheking.com
*.ww17.nobodybeatstheking.com
*.ww25.nobodybeatstheking.com
*.admin.restare.it
*.api.restare.it
*.app.restare.it
*.bi.restare.it
*.console.restare.it
*.internal.restare.it
*.redash.restare.it
*.report.restare.it
*.reporting.restare.it
restare.it
*.restare.it
*.staging.restare.it
*.status.restare.it
*.superset.restare.it
*.api.summerscar.me
*.app.summerscar.me
summerscar.me
*.summerscar.me
*.2123b75e-635c-46a3-86cb-b704c593f48f.tablets.schule
*.mediatek.tablets.schule
*.no.tablets.schule
tablets.schule
*.tablets.schule
*.32.tirrilee.xyz
tirrilee.xyz
*.tirrilee.xyz
*.1mgmg9.vh497e.mom
*.2dm1yw.vh497e.mom
*.4or6eh.vh497e.mom
*.4wi0yo.vh497e.mom
*.6b1e7d.vh497e.mom
*.8dvs2i.vh497e.mom
*.ahwt2i.vh497e.mom
*.b2dc0q.vh497e.mom
*.c2z0d9.vh497e.mom
*.jfw0tt.vh497e.mom
*.jfzg41.vh497e.mom
*.jlb8og.vh497e.mom
*.k1gdx2.vh497e.mom
*.l2lart.vh497e.mom
*.rqa7a2.vh497e.mom
*.s.vh497e.mom
vh497e.mom
*.vh497e.mom
*.z0aexk.vh497e.mom
*.zdmvks.vh497e.mom
Other domains in certificate