Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=taxationbuddies.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 19, 2026
Valid Until
December 18, 2026
72 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A3:16:C6:8F:7F:7A:70:F1:8F:08:3A:29:04:85:10:31:B6:4E:6A:75:AF:CF:E2:28:AA:28:BD:BB:98:E7:C0:74
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
auth.arcade.software
aashnapriyamvada.com
adsportswatch.ae
www.afaqtek.sa
ahmsolutions.nl
app.alemdamala.com.br
admin.algodriven.xyz
alphabetica.world
www.anna-sharp.com
anvarat.com
www.appedu.nl
dev-partner.appointme.net
e-clinic.azimuth-iraq.com
chat.dev.azum.ch
use.beachbliss.app
venue.beachbliss.app
beemind.ai
admin.blacktechtalent.org
bleuplan.com
auth.bloggingfordevs.com
portal.bringoz.com
ceto.us.com
tools.ckapps.kr
colourssystem.com
poc.craftyourtaste.com
gdc.curtisfraser.com
elements.datagee.com
www.datajungle.co
new.datavision-online.eu
desertpatrolmen.org
footwear.dlumebiz.com
dmsounds.nl
dpinc.com
edinaleckovic.com
www.eduygun.com
admin.enhearten.io
uatims.finncub.com
www.firstpickstudios.com
funmoney.hk
kimojo.fyzo.link
www.gaelicwizard.net
www.gasons.in
goalskeeper.io
groenepoint.com
hadinsolution.com
harkaenergy.com
harshtonschools.com
helluwurld.com
mumbai.imacoco.world
investigacionesloja.com
l.jgu.edu.in
jnanashrunga.in
kalitraders.in
admin.kbi.works
sakhua.khampat.com
kovenso.com
lauragarciahernandez.me
leadhub.su
legalfactory.in
luki-link.lukb.ch
mbavidya.in
mltechnology.com.my
tickets.mymoons.co
myzahltag.de
stg.nannyme.love
naturalisation.live
nourishedsoul.space
dev.admin.novacarecr.com
testing.admin.novacarecr.com
noza.in
beta.nurseid.io
www.ohiobobcatscamps.com
app.ooowl.jp
staging.paco.cool
pickleballgl.vn
www.bhs.procad.pl
saianandfarms.in
www.saintleocamps.com
www.savipal.es
www.sdfdfggjj.surf
sensoryapparel.in
servidorariel.com
ofertas.soft-g.net
splatstat.com
app-staging.ssgyms.com
www.ssmotorsportscars.com
stategroup.cl
11521139.stratics.io
studentsolutions.in
tabledecoratingideas.com
taxationbuddies.com
teebuddygolf.com
galaparol.thefuckingfatcat.com
timeary.com
www.udprimajaya.com
welcome.upnext.in
admin.vipapp.com.br
visitmap.in
www.wattion.es
www.whgsales.hair
Other domains in certificate