Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.lookatoo.fr
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 22, 2026
Valid Until
October 20, 2026
62 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
26:12:EF:16:D9:B0:1D:20:12:0E:79:38:CF:60:B9:D2:D4:9A:16:29:5F:2F:BE:BD:9D:6A:BE:76:40:1F:97:C0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
airmidherb.buzz
1920pvt.ltd
notifications.2dkit.com
web.5f.app
app.60granos.coffee
www.777jackpots.com
business.aadrikaenterprises.com
accountant.world
www.acquiroapp.com
allthatjazzsoda.co.uk
anchorpointmedia.ca
asesorias-contables.com
app.atiendelos.com
autrered.com
avgolemono.games
banzerbeads.com
prod.bioverify.app
blomfield.in
bukuinfinite.com
www.bukukita.my
cadmus22.ddns.net
www.canteramethod.net
chubbyswestpoint.lat
cleanics.net
microsite.criticaleye.com
app.cuadernodemonte.es
digience.ro
connect.downtowndenton.org
drinkhouseofmate.com
edisco-chl.com
www.englebook.com
gomarkets-uat.equix.app
farmherd.com.np
episeron.finovers.com
ai.flossy.com
www.gofundrobots.org
www.googleformstemplate.com
hisrael.info
hommealpha.fun
sit.ila.me
plan.incon.ai
www.indiancallerinfo.com
invernessridge.org
www.invernessridge.org
www.josw.in
k0in3.online
www.kellyncunha.com.br
forge.knightaiav.com
leesangdan.com
www.localfigurecomps.com
beheer.lokalebon.nl
www.lookatoo.fr
luckier.app
marketcontracting.com
marquez.mx
concurs-exposicio-flors.mercatherbes.cat
app.mismarapp.com
mocell.shop
motioniq.solutions
woodlea.myglobe.app
mysoccercoach.app
nadc.ae
naugachiataxiservice.com
www.nexusscript.com
www.niba1122.jp
odchq.com
patterneye.com
payrollpro.co.in
rewards.petalslaserlounge.com
www.pronapp.com.br
prox-core.com
e-smart-mpc.proxima-ai-tech.com
todoer.roslaniec.dev
www.rwjsantaclara.lol
sapc.in
setviontechnologies.com
www.soldnov.com
www.c4c.ssbyte.com
pix.starktech.net.br
proximity.strawhats.co.in
eu-app.swifter.ai
thefinditgame.com
thrifts.app
admin.tintlaunch.com
anayaespressoemenu.triggersplus.com
envoy.turnout.events
uboraconsultoria.com.br
ukowalskich.pl
cdn.dev.upnext.in
www.vaidebalyvaiporelas.com.br
veggiepro.dk
www.vescoinv.com
salem.vishnutaxi.com
app.vitalrev.ai
windoe.band
windowalls.in
wonderfuldeath.com
worldcouncilofeducators.com
zierolf.net
zzyzxservices.autos
Other domains in certificate