Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.highpuppet.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 22, 2026
Valid Until
October 20, 2026
77 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8A:38:5C:39:38:8E:79:BA:6C:82:21:14:00:25:B6:9B:39:9C:38:91:6D:94:82:66:BA:15:75:4E:3C:42:54:D2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
app.lhegap.mx
abaauto.ge
adwokatbenc.com
www.alaturka.fi
achat.aoneahsan.com
sepa.areandina.edu.co
www.atlascechu.cz
avamgo.com
new.bbparam.com
www.bhallislife.com
campuson.childcareon.com
clearpath.fit
cockroachjantaparty.quest
drishyaganitham.com
drnidhijain.in
www.drohnenservice-waeldin.de
droppin.org
www.eroul.ro
www.eternisgroup.com
www.ettnollproduktion.se
www.fishfacts.fo
spijker.flockim.com
www.fugacontrol.com
gamegrit.in
getdevour.com
goldtradexdigital.online
goye.ai
bestellen.greekpizzahousewendelstein.de
www.hannibalnow.co.za
headman.by
www.hidden-chat.de
www.highpuppet.com
www.ictsuhashi.com
panel.ifilo.com.tr
ifuturespark.in
www.intelligentactuaries.com
junkymail.com
jgovh-menu-admin.kards.fr
notifynews.kartikeybhardwaj.com
simplenotes.kartikeybhardwaj.com
tmobilemasterclassoffer.kasparovchess.com
higherlower.kgbp.de
admin.lea.co.bw
staging-chanel.lefty.io
liamsecurity.com.br
wokamon.listopic.es
confirm.lockone.dk
luncher.com.ec
fixedasset.maksellent.com
www.manunana.at
www.milindpanwar.com
erp.nas-ksa.com
coimbatore.onewaytravels.in
othli.quest
app.ou-sketch.com
kurandili.pamuk.us
quranic.pamuk.us
parvatiprep.in
bestellen.pizzeria-monami.de
dev.booking.plan2win.be
drepfeed.portocripto.io
sistema.proseinet.mx
apalab.proyectoapasionados.com
www.qbquiropractica.com
platform.quickprotect.com
rashidnk.in
registrdluznikuknahlednutizdarma.cz
playdhunn.rkcmsstudios.com
www.roadcast.in
saeloc.com
tracker.sailorchiasson.com
saludjusticia.com
sampath9.in
sitelogpro.app
www.skwila.ma
solera-api.solerabank.io
lutrivia.sqwadhq.com
stackshire.com
www.stackshire.com
qa.starkeytelehear.com
auth.stick.education
crm.studiocapitalmanagement.com
suitescreen.tapacenter.com
taskaid24.com
thecolorfulcase.com
thewaysoulcare.com
tigerdojo.io
toddbsmith.com
mfe-load-manager-qa-nocf.truckstop.com
ccwidget.vdelic.dev
veltronahub.com
www.veltronahub.com
vik-sdmarinovi.com
volvowearos.com
www.washgox.com
wavewear.io
www.wekicards.com
portal.zealth.io
storybook.zealth.io
test-docs.zksync.dev
Other domains in certificate