Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=whats.thehives.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 21, 2026
Valid Until
December 21, 2026
52 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
66:65:73:7F:28:CF:6A:03:26:18:6F:42:DC:2B:36:38:07:39:59:AB:9D:13:C5:B3:7A:F3:A5:1C:5D:52:E2:67
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
aqkey.ru
www.180agile.com
40xleaves.in
anonymouschat.live
apexcashsolutions.com
www.apexcashsolutions.com
atelier44.fr
www.aurnamcollection.com
www.baddatapush.com
binitmishra.com
connect.blockboosted.com
www.bloopcubes.com
grandefamilia.bmenu.com.br
www.world.carterbury.com
chuffedwith.ai
dev.login.cog-selfcheck.jp
www.cylencemedia.com
dailynewsreport24.com
www.darline.com.sa
www.doordrink.app
www.dotachieve.com
dyad.tv
invite.ecoe.vn
webdev.endrf.com
stage.familysage.co
concept.fanworks.ca
etikabunga.finlup.id
business.dev.first-iraqi-bank.co
www.geitaberget.com
shout.getviral.me
gizemafyonluoglu.com
www.guaraniexecutive.com.py
guidefintax.com
hanikatech.com
www.hanikatech.com
www.happilyeversikes.com
whatsthatdo.haurwitz.com
www.herizon.ee
lp.hibikore-days.com
www.howtogetfreecrypto.com
huseyintutar.com
app.invoicebillity.com
jeraldpamugas.dev
admin.jgangulylab.com
www.jmlinteractive.com
toridev.jolbax.ch
dailybudgettracker.karimnagarupdates.com
elaringsportal.kompetansenorge.no
app.kosharot.co.il
os.levelupby.design
link.loopnews.com
mandircare.com
bdblitz.mangonese.dev
staging.matchsetpoint.co.za
manage.moscadesign.com
mouniitservices.com
www.mrright.net
neuraldota.com
nextdigital.it.com
www.nirwantechnologies.com
notestamp.com
myomnes.omneslegal.com
admin.dev.oraldata-preprod.net
www.oryzabd.com
pacemaker.press
www.pascalraszyk.de
patriciaandkutlaywedding.com
permitfoundry.com
phamtrungkien-hust.id.vn
polianacaxias.com
votaciones.presbiterianacentral.org
puhoitea.com
www.puyufarma.com
www.quaternary.co
www.raultapia.com
rbtexamtest.com
rhzo.io
staging.app.satelligence.com
www.scams.tips
shakasales.com
www.simonleviev.com
smart-lend.com
srigowripackersandmovers.com
ednasearch.successacademies.io
blueprint.thedata.ai
whats.thehives.app
www.thevectragroup.com
www.tradingview.to
turbox.com.bo
twinhillspartners.com
firebase.ueno.org
v4ault.com
www.vargas.com.br
demo.veero.ai
ticket.web3intravel.com
www.staff.portable.wellon-sol.jp
wedding.wisedev.online
app.zapwaste.com
zoe-lambert.fr
app.zuluchess.com
Other domains in certificate