Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=login.sastiwebsite.in
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 16, 2026
Valid Until
November 14, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A4:A2:D2:BC:82:7F:5D:8C:2F:C3:97:AF:CB:36:51:06:F5:E8:FD:04:E1:4C:CC:1B:3E:EE:5D:6C:B7:80:74:58
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
auth.lorealise.com
auth.test.lorealise.com
qa.mfe.service.aathisoft.com
aethonlearning.com
aicvstudio.app
alexanderscharity.com
www.amirdahan.com
anaesthetistweb.com.au
home.anand-creations.com
www.andievandy.com
cifra.apolosolution.com
apophis.es
aqua-vela.com
portal.atlasdealer.com.br
axeaurum.com
m.bgame777.ws
binahsystem.com
bookmytat.com
www.capp.fm
cascara.app
cedula.cl
qr.cedula.cl
challenges.social
www.chrishenke.us
observability.cloudstrategy.ai
www.convertgence.fr
www.cos4duns.eu
couplequests.de
curabix.com
test.dersmarteheld.de
dollartechnologies.in
www.drivelinkdms.co.za
xa0qx.easyapp.co
www.ekoinstal3d.pl
portal.entero.io
factoryopsai.com
fallatapiole.com
fbicacademy.co
www.fe.app.br
find-tree.com
fortectaccount.com
www.fortum.lt
alert.fusus.one
www.gdgmelbourne.com
getcorpus.ai
ib.gitbank.com.br
www.gmailbox.app
grantduck.com
web-qa-dev.hamajima.co.jp
assets.harveststack.co
dashboard.hellomuse.io
sotreq.hrestart.com.br
innerharbor.lol
agnluw-de-testing.input4you.be
invitame-invitaciones-digitales.com
kasirkonter.my.id
keplertrust.org
kirjanpitopalvelutoivonen.fi
knowstash.ai
kufanyi.com
www.lexicount.in
www.coretalk.lotusbluecore.in
luisrc.gal
admin.lushmorrow.com
www.mirtravel-ks.com
auth.mobibubble.uk
www.moonlist.app
moxodesigns.com
mtmlogistics.com.au
dev.namonaki.info
nexusgv.ca
www.palamurubricks.com
palota.co
www.petardzepina.net
pizzaprofil.de
player-roots.com
diuat.policysmart.in
receipt.li
resumasters.com
www.santeweb.ca
login.sastiwebsite.in
www.sitehunter.vn
siteshield.co
www.siteshield.co
sla.ng
live.experiments.standards.site
fourpager.stelath.site
studiodijk.com
taibahvalley.com.sa
tingangacatholicdispensary.org
www.triplenotch.com
varuj.sk
vdualeyes.co.ls
app-develop.video-matching.com
vunzagroup.co.za
auth.weberlolz.tw
www.werepairdryers.com
onclick.xscientist.in
www.zredi.com
zvijuk.com
Other domains in certificate