Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.najdelite.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 12, 2026
Valid Until
November 10, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1C:97:54:41:A3:0A:01:E6:1E:FB:9A:BB:94:81:DF:5F:80:8B:6D:3D:B5:35:0A:C7:BE:3A:33:87:1F:FA:E7:C0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
admin-panel-dev20.qlub.cloud
vendor-dev20.qlub.cloud
pos.aadarshabashyal.com.np
abuzz.store
almarriboat.ae
amertafoods.id
www.arvastech.com
auroengine.com
www.auroengine.com
autordevida.com.ar
ayudarcolombia.com
dare.basity.net
www.beleagueredcastle.co.uk
binyardpro.ca
sipandu.bpafkmakassar.site
hemanathdev.bytize.in
cinderandcollective.com
mobile.cliniqx.pro
blockclock.crafnia.com
crewsideapp.com
don4fun.dk
efemiletisim.com
www.efemiletisim.com
www.engageintelligently.com
exxceldigitals.com.ng
fastneasy-solutions.com
finbench.io
flexi-mobile.co.za
www.florianisindicos.com.br
www.fordsulautopecas.com.br
ai.gamina.app
aiadoption.gamina.app
colony.gelion.care
staging.app.getkrest.com
www.getkrest.com
www.gtsegurancasolucoes.com.br
homebase-advance.org
www.honeyreserve.net
app.hostsassist.com
www.imssafeconsult.com
www.interviewgator.com
www.kaleblink.com
mafia.kevintonb.com
koshmitra.com
www.koshmitra.com
lab404.org
company1.ledgerpro360.com
khantrd.ledgerpro360.com
letex.vn
loukisushi.be
demo.lucass.site
lucass.site
www.m-emotion.tn
www.macedontaxiservices.com.au
www.masharadafacility.com
www.migasymantel.com
mosate-restaurant.co.za
www.mosate-restaurant.co.za
www.najdelite.com
ump.ngthinh.com
monitor.observatoriopyme.org.ar
peachy.golf
pettinaros-it-services.com
placetro.com
www.playdeep.in
playout.homes
polodream.com.ar
pololadu.ee
app.polskieradio.cc
www.prakashgyanoday.in
puresips.org
consultorias.rdp-investimentos.qitech.digital
rdp-investimentos.qitech.digital
medfolio.quizuncle.com
dashboard.reprocenter.com
roastrivals.ai
dev.admin.rupeescouts.com
sahariar.in
www.sahariar.in
shopinpocket.in
silenter.com.ar
woon.societics.xyz
www.srisriexports.com
panel.subakristal.com
app.lite.suprdense.com
aremulivingstonwedding.swanmoments.lat
issue272app.tam2000.com
www.tasuko.net
pubquiz.the-boutique-agency.de
flexray.thebunnylab.com
unnamedboy07.qzz.io
www.valdelsaprevenzionesicurezza.com
victoriabali.com
www.victoriabali.com
vitasight.club
www.westeastturbines.com
www.yumgo.store
yumgo.store
www.zaironinternational.com
wekdaal.zairussalam.id
Other domains in certificate