Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.umangkumar.me
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 07, 2026
Valid Until
October 05, 2026
44 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6E:2C:0B:5A:C5:1C:F8:08:BA:61:F8:88:C3:6E:BD:71:55:49:E2:37:6E:DE:D4:21:30:1D:ED:96:6B:6E:7D:2C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
adsumpater.com.ar
ads247.live
develop.app.aeru.party
alltimestowing.com
amorpoderoso.site
staging-chatbot.autonomya.fr
bookfind.io
www.cafetrespalmas.com
caregrade.de
carejob.org
copotential.com
www.copotential.com
copyme.guru
doni.uz
www.duosys.gt
www.e-laborate.jp
www.e-present.ru
elitedesignerbags.vip
entrepreneurship.nexus
isms.ez.be
www.filotax.in
www.firstdollarstory.com
fitnessarmor.app
friendshipevent.com
www.fulnath.co.in
mta-sts.generateideas.ai
www.gocarbonblack.com
www.gowc.jp
gray-corp.com
app.groovr.live
harviai.com
recipedb.heidenblut.eu
herfistory.com
www.heydella.com
www.himsonepat.org
huama.my
kevindjeradi.fr
knwoodwinds.ca
knwoodwinds.com
vv.lazyrasp.com
legalit.lt
lucasfront.dev.br
magesfrozen.my
matematt.app
admin.movagomz.com
shop.mrblais.com
laufrechner.nils.re
kakomon.obunsha.co.jp
www.orthodoxbibleonline.com
cdn.outgrow.us
paul-legall.com
links.picks.com.br
picloud.llc
shwenyiko.piticommerce.com
breakthrough.pittster.co.uk
pulcri.com
auth-parking.quantiful.io
reaicoach.com
admin.reci-pro.com
www.renalworldhealthcare.com
www.renatomilano.it
robberbaron.tv
w3.live.run.plus
webmd.live.run.plus
web.ryzenmail.com
my.sealsense.co
salem.selvitravels.in
shiba-tools.com
portfolio.siks.me
soundcloud.su
www.storymetro.com
www.storymetro.net
www.syngens.ai
tools.tabsquare.ai
www.farming-services.techaeon.org
technicalcatalyst.org
admin.tennisclubgolkrath.de
terrormaniacos.com
tessredburnconsultancy.co.uk
auth.thegamemusic.me
themattlabs.com
themuses.pro
theremodelers.in
stgapi.thisisanya.com
topccc.com
menu.tostaderowellington.com
www.umangkumar.me
vaqa.vakilspremedia.com
braindump.vila.haus
vizorithm.com
uatuser.vnmrental.com
www.wafe.io
www.wevois.com
www.worldcouncilofeducators.com
anie.xeze.org
yapayzekapanel.com
portal.yathit.com
link.zar.gg
auth.zatoplan.com
zhaozi.buzz
Other domains in certificate