Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.samaysi.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 05, 2026
Valid Until
November 03, 2026
69 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FB:A1:75:C6:C7:89:48:C3:06:70:F8:99:D9:06:46:77:84:8E:65:CB:A3:3E:EF:4C:CC:96:3D:74:CF:FE:19:67
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
arin.fyi
kimball-modular-test.3dcloud.io
7jenglishcenter.org
abbotthmc.edu.pk
additive.buzz
beratung.ailentis.com
app.akademianowoczesnejkliniki.pl
aretelos.no
todo.arju.dev
askariapp.com
bajrangfurniture.co.in
bionicsale.com
bobbimonsta.es
bozolan.com.br
notepad.bytenbit.com
app.canalib.com
www.cellpm.org
cindylopezfornc.com
app.cleverpop.com.au
crystalarroyo.com
curtisstaples.com
d4aa.ch
danielareina.me
www.dettman.io
bestellen.dimo-pizza.de
cdn.easygolf.vn
eightstreets.online
elsastry.com
emaislab.com.br
www.emiratescargo.lk
foxo3log.com
www.freewayrickross.com
geninj.com
goextour.com
gritpulse.co.za
guigaetere26.com.br
www.healthon.site
www.heladeriafresayflor.com
highwaydroptaxi.in
i3software.in
iaido.info.pl
www.ibatica.com
halfords.invue-live.com
one-education-advisors-stage-5.ischoolconnect.com
libs.jacq.dev
jarsty.com
pixarraq.jocaagura.com
www.juniorsday.gay
www.kasfrozin.ru
kota.ink
a.lescon.com.tr
www.livinlifenstyle.com
lukeandgrey.com.ng
lumaeverywhere.com
link.app.marksandspencerfoodme.com
www.mathu.co.za
www.mitigater.com
auth.moneymind.cloud
www.mujahidgroup.com
www.muttleycru.co.uk
nearinfotech.com
nextintechnologysolutions.in
verify.nsicsm.com
onspotlocksmiths.co.uk
ozcelikgeridonusum.com
persiantranslation.info
pintsgames.com
expense.polycents.com
revstipen.ro
www.rfpneurology.com
auth.dev.ruckdelivery.com
suluuat.corp-internal.rxo.com
breadcrumbs.rysimapps.com
safetyforyou.in
www.samaysi.com
sean-smith.co.uk
relatos.severnet.cl
www.sfvinacab.com
smartphonewaiter.com
www.sogent.buzz
airwell.speakylink.com
lcpstrivia.sqwadhq.com
assets.stanhopefd.com
www.subsreader.com
app.sweet.tv
portal.wms.syncglob.com
app.dev.system2.fitness
www.tanyasnodgrass.com
taskerworkspace.site
teambahn.kr
telewaretech.ng
www.theagentivelabs.com
www.thegymstoreph.com
windsupkitesurfing.toomoosegames.com
aspirantes.transportesoro.com.co
portal.transportesoro.com.co
tridentassociates.co
acatar-redev.usp.dev
voidascendants.xyz
zanje.online
Other domains in certificate