Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=traffic.photos
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 12, 2026
Valid Until
November 10, 2026
79 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C2:72:3A:1C:E4:2E:3D:CC:04:35:21:68:70:52:A7:AD:6B:AB:C4:E9:8E:4B:5A:2A:F8:A9:BB:71:B8:7B:D9:23
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
amplifybillboard.com
pulse.1990.agency
ttconnect.28east.co.za
www.5pixtech.com
aceofclubs.fr
identity.airstate.dev
allobyte.io
mn.alpiniahealth.com
provider.alpiniahealth.com
www.alpiniahealth.com
answerthephone.ca
dynamic.appduvido.com.br
www.asistmi.com
www.astrolokarma.com
links.athlyts.com
b2bfactory.net
www.battlefordandysworld.com
app.beeding.com
bernydemay.fr
app.bloomcalendar.io
www.burrito-ordering-app-project.com
www.bustamante.autos
ignite.bytekast.io
caitykronemusic.com
www.carlosracosta.com
cfaglob.shop
gravity.chriscaruso.dev
staging.web.cliprio.app
collegeroi.app
www.comeonline.tech
www.cyncitycate.shop
www.dathanguc.com.au
dietstartmonday.com
dolunaylounge.com
www.dolunaylounge.com
constance.ec3.tech
estudoativo.app.br
www.evoluo.software
filipearruda.com
www.filmbykv.com
www.foundryits.com
guidepal.com
gulftechbm.com
gygo.pet
ayushspinecare.habitbasetreatment.com
hanalife.in
www.huelvaenelmapa.es
iamusamaiqbal.dev
incp.tv
contact.infinitystreets.online
seco-demo-kw4tasc2.intrinsic.nl
kareetravel.com
kermannsmb.hu
www.lacarracpa.com
hawkweb.lamensajeria.mx
www.matchradar.co
mdptconnect.com
mobula.com.br
mutantai.org
nocentsapp.com
notpad.org
nuvantys.com
ordelo-admin-staging.ordelo.io
paceful.ai
picturepairs.com
app.stage.provisoevent.no
roberthoanca.com
appiz.rozana.in
rtlfashion.in
salaradel.no
www.sasandha.in
saurogas.com.mx
www.scottsdaledancerlawsuit.com
seal.wtf
searchhfyp.com
link.smarp.com
www.snowflakecreator.com
qa.spatialthink.com
whitesoxcalltothebullpen.sqwadhq.com
sreeakshayam.in
www.sreeakshayam.in
www.stacconsultants.com
staging-mobile.stme.church
tac-tek.co.uk
anchovy.tallyfor.com
techionad.com
edu.tecsub.online
thirdtext.app
tiendaticket-admin.com
togel279b.webredirect.org
www.torneariaveracruz.com
dev-faq.trackdmusic.com
traffic.photos
www.truebluetech.in
www.tummysafe.com
utuhr.com
www.utuhr.com
www.virtualix.co.uk
career.wycoaching.com
gp.znoj.cz
Other domains in certificate