Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=fotoshoot.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 05, 2026
Valid Until
December 04, 2026
79 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F9:A5:32:D8:33:07:8E:9A:A9:D0:37:9F:B3:59:9F:4A:A2:B1:5D:CF:81:B1:9B:91:0C:F3:F4:D2:72:8A:A8:15
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
aigenk.com
allenandroth-cert.3dcloud.io
www.abelgasque.dev
www.acolhersaude.com
www.adilakshmi.co
www.aiunifinder.com
colorclashinfo.appblick.de
link.asnan.com
www.bananaheist.com
user.test.bestathletes.co
parisvolley.deeplinks.bfansports.com
tracking.boldgal.com
menu.bonanzaaddishotel.com
www.bookingwarrior.com
queue.boroughmedical.com
info.boys-app.com
buttonsdyes.com
app.callwaiter.com
www.centerofai.com
dashboard-gary.commoadmins.dev
twenty.complex.com
coppincamps.com
tw.creatoradar.com
app-next.crosslog.life
currynaanhouse.com
danieldymek.dev
deeplink-stg.ddangkongschool.com
e2insights.com
easy-rating.com
entrepreneurgains.com
cv.eugene-blokhin.com
5ss.f2bportfolio.com
www.farpost.co.uk
firewerkzapp.com
www.fishbitetime.com
fotoshoot.com
eisa-project.funlifejapan.com
owl.galileojob.com
retro.gamzone.co.kr
gigaposts.com
giuseppecrj.com
go.go-pei.com
gut-haus.com
halvecost.com
www.halvecost.com
storybook.handtoy.com
www.hangsengmaster.com
humantatcat.com
www.hyandeaquino.com.br
tamupapirny.jiricech2059.com
keepyourcreditcardactive.com
khanhvynguyen.com
laclandestinapizzeria.com
control-panel.letsholo.com
licancura.cl
fbg.lyib.com.tw
makrmaniac.com
template-builder.mergo.app
covid.metrixdemo.com
mtech-automation.com
invite.myneibo.com
www.nova-jukebox.com
okclients.com
www.oposplus.com
padelkings.fr
www.pantsninja.com
dev.pocket-pet.me
pacchase.polngames.com
play.ponytycoon.com
admin.powerconnectusa.com
qe2sa.fr
app.qudo-app.com
raghanitrustcard.in
redrook.consulting
connect-ng-carrier-dashboard.rxoconnectint.rxo.com
www.saladjuris.com
shaaktdidactics.com
shovalfrymer.com
cdn.simsouls.com
snoringmind.com
solomonschariot.com
sourceweavers.dev
splitt-app.com
www.stronder.com.br
www.subbonline.com
swanepoel.dev
tallinn.dev
tallyyardpros.com
techdenovo.com
thehouseofspanish.com
ulfexxproject.com
www.unterhaltshelfer.com
www.untoldglobal.com
www.valetparking.fi
vividitcorporation.com
watradingcc.com
wheretheroadmapends.com
worqth.com
wren-games.com
zodedevice.com
Other domains in certificate