Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bestellen.thefood-junction.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 23, 2026
Valid Until
September 21, 2026
47 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DB:70:61:8C:6E:AD:9D:5A:38:D1:26:AF:16:DE:DE:B6:87:7E:71:A7:DA:8A:35:93:5D:CB:E1:67:58:96:A2:99
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
auth.what-inlet.com
100voivodi.com
24hrwork.fun
jjokji.64bit.kr
www.abwc.shop
km.advokat-t.no
services.amareva.ai
ashleightan.design
www.ashleightan.design
atlassio.co.uk
www.atlassio.co.uk
auteur.one
mta-sts.aventi.no
bellinahome.online
birliktaksi.com.tr
brainrotstudios.co.in
en.brewhouse74.com
www.brewhouse74.com
buzzardgraphics.com
capopropiedades.cl
capzoneduke.com
www.casteng.com
bonver-uat-backoffice.cbdata.cz
booking.chandify.com
www.daoc.org.ua
homes.discoverdallasproperties.com
ditakubiskova.cz
www.ditakubiskova.cz
dkglobalai.com
dovetail.dating
dtactical.mx
ecmbudownictwo.pl
enginetronicservice.com
factorinnovacion.mx
app.festivaldelvalle.com
findam.xyz
finuseselect.finance
www.glampinelpinar.com
goglite.com
gripenberg.dev
www.gripenberg.dev
guideuplearning.com
panel.hilofamiliar.com
inceptionforge.com
www.inceptionforge.com
joshvista.hair
retencion.k-9apps.com
www.retencion.k-9apps.com
conversations.kaskadrinks.com
www.kenromley.com
www.komis.co.kr
konstruct-ci.com
admin.linguatracks.com
m2.co.ua
marr.name.ng
massimize.aero
meharix.com
mobmodulado.com.br
molinoburger.com
nexuzai.net
noria-studio.com
nv-tax.com
www.nv-tax.com
www.onserv.app
app.oodgo.com
aa.iotbit.otobit.com
poppuntodeventa.com
trade.pran.co.in
pushdigital.surf
www.pushdigital.surf
quinth.se
guides.renatoaguilar.com
www.rhdwood.lol
mail.rymex-systems.com
sabrina.odo.br
quiz.salespat.com
setiq.lat
join.shapeupwithgabby.co.uk
www.shastid.com
siddharthdhawan.com
simongagnon.ca
chat-gcba.smartmation.com
smartmoveparaguay.com
mta-sts.stamcelleklinikken.no
vendor.sustay.in
bestellen.thefood-junction.de
tams-qa.thinkninjas.co.za
www.todes.org.tr
trivogroup.com
www.true-north-adventures.com
www.true-north-advisors-llc.com
auth.umaycodelabs.com
auth.valientemk.com
vizhinjamsummit.com
timetable.wafprs.uk
accounts.wavetraxstudios.com
wavetraxstudios.com
www.wavetraxstudios.com
www.zaifibooks.com
zaifibooks.com
Other domains in certificate