Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=11205.top
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 17, 2026
Valid Until
August 15, 2026
61 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FF:14:10:F0:67:D4:7E:2B:CA:30:DB:A5:6B:50:E6:EE:09:B3:C8:6C:EB:AE:8B:41:62:FC:19:A8:3E:4E:9A:FD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
xpj847.com
*.xpj847.com
11205.top
*.11205.top
1177rpt301.top
*.1177rpt301.top
1179dmy301.top
*.1179dmy301.top
33303hh.tv
*.33303hh.tv
350ii.app
*.350ii.app
350kk.app
*.350kk.app
568169.win
*.568169.win
8359311.cc
*.8359311.cc
913568.click
*.913568.click
913933.click
*.913933.click
91495.me
*.91495.me
916-3.vip
*.916-3.vip
amppb8.com
*.amppb8.com
aoudg.top
*.aoudg.top
aspenimportauto.com
*.aspenimportauto.com
assistance-impotgouv.com
*.assistance-impotgouv.com
bola08.loan
*.bola08.loan
bomberdrone.com
*.bomberdrone.com
bonafidebotanicals.com
*.bonafidebotanicals.com
bondsbtc.com
*.bondsbtc.com
earlpecueinjurylawyersgroup.com
*.earlpecueinjurylawyersgroup.com
elizabethdante.com
*.elizabethdante.com
fangpi8.com
*.fangpi8.com
hallucinogenicx.org
*.hallucinogenicx.org
imoutotv.com
*.imoutotv.com
lakelandobserver.com
*.lakelandobserver.com
luxewind.com
*.luxewind.com
luxmurni.com
*.luxmurni.com
luxnemo.com
*.luxnemo.com
luxuryecoresorts.com
*.luxuryecoresorts.com
luxuryestatessandiego.com
*.luxuryestatessandiego.com
met-a.net
*.met-a.net
museumafrica.org
*.museumafrica.org
parramatta.lawyer
*.parramatta.lawyer
perfectedvision.com
*.perfectedvision.com
petraxp.info
*.petraxp.info
q638zbhg6.top
*.q638zbhg6.top
themoonworks.com
*.themoonworks.com
thenamingfirm.com
*.thenamingfirm.com
tomcb3.cc
*.tomcb3.cc
topclicks.top
*.topclicks.top
topresult.top
*.topresult.top
uaczi.town
*.uaczi.town
xn--mgba2fc3a.com
*.xn--mgba2fc3a.com
Other domains in certificate