Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=muftgo.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 06, 2026
Valid Until
October 04, 2026
51 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
08:A4:51:47:E9:66:58:F2:AD:4A:8D:84:1F:65:38:74:35:A1:8B:34:9C:7E:18:7A:AF:EC:65:C1:35:A6:CC:C4
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
26o6.com
portl.7b.au
www.adriene.shop
africket.co.zw
agenteartificial.com
scpsite1471.analyticacore.co.uk
iwatsu-k.anbi-reception.jp
anilkumardoppalapudi.tech
apmotors.rentals
hub.hml.arvohealth.com
app.assigno.tech
astma1014.com
flowsuite.auditra.app
avlatizona.mx
bakedbytammy.com.au
www.bentsukun.ch
www.bfgwing.mom
brocogoods.hair
callhandymandan.com
roi.cascade.app
morning.churros1988.jp
ciscenje-stanex.rs
cleverlandkdc.co.za
boomapetclinic.cloudskript.codes
dafajar.com
www.dropomino.com
eduarkids.com
expglobusiness.com
catalyst.fpconsulting.com.au
instantsaving.l.frequentvalues.com.au
glupt.no
handymandancorvallis.com
www.healthview.app
bazelet-group.highlander.cloud
hypertype.app
iapprenant.com
productreviews.informacion.my.id
www.investwithtuhin.com
stage.iqvc.org.hk
ratings.jespergundersen.dk
josecapera.com
keycorrect.com
www.keycorrect.com
khazneh.ai
gitstart.dev.app.konch.ai
auth.stg.lang-vel.app
basometro-develop.libcom.org.br
scheduling.liirn.app
lovecake-confeitaria.com.br
mapalytics.com.br
marcomarchionni.com
www.metrorosa.com
mindful-mountains.com
mlimacorretor.com.br
www.monrac.io
muftgo.com
mojezdrowie.nfz.gov.pl
nimestailor.com
www.ninna.tech
nosynews.com
www.nosynews.com
affirmator.ofoz.org
olsline.autos
hmgoneapptest.p-e.kr
orders.pacepharmacy.com
pasteweb.dev
pickstudio.kr
pitstopsystems.com
planc.no
probrasilmaisbb.com.br
www.proforextrades.app
eval-cluj.pssgroup.ro
qklca.surf
www.qklca.surf
remotion.rs
rifathossain.info
app.rustandlily.store
coach.sellwith.nz
curs-valutar.slash.ro
somafiziktedavi.com
www.spicehairbraiding.com
impressoras.starnavbr.com.br
parents.statscentral.co
steeltab.com.ar
sukhadamevents.com
theagridoctor.com
thinknestapp.com
tndrenew.mom
www.tndrenew.mom
tribecalullanagarpune.com
turborota.com
umairsacademy.com
vialto.uno
www.viuzz.com.br
xevoria.world
www.xunji.buzz
yamio.io
www.zenexaai.com
cdn1.zerothreat.ai
zsend.gr
Other domains in certificate