Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=sendmebox.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026
78 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0C:5F:F8:1C:E5:7D:91:E0:DC:42:E3:7A:44:95:03:8E:3A:08:F9:D1:12:A6:88:45:31:59:81:0E:21:30:48:CB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
bawoat.com
d.acheckin.io
www.adieu.wtf
aimission360.com
andamp.net
www.aspen.style
astitchintime.cc
cdn.at593.org
authivate.com
azizai.uz
bartoszgrabek.com
www.bartoszgrabek.com
beesaregood.com
www.blacklub.net
art-appreciation.bsignal.jp
bslpublicschool.com
ceroto.com.tr
damotools.eu
staging.webtest.oab.debolso.com.br
blog.docsie.io
bolsa.eetp465.edu.ar
elmasdelapizza.com
app.esunfinserv.com
fadhaeng.com
dev.fix.claims
fufudirect.com
fullyin.app
getmassly.com
gminds.com.br
grainfull.in
fb.hive.properties
trainer.icabody.com
whatsapp-push.universal-assistance-ar.itx.ar
jlh-animalhealth.com
keabot.fr
dl.dev.kin.me
www.kinky-spice.com
deeplink.kiwiplus.io
guest.lasoxp.com
sprucepointinn.app.lasoxp.com
letterstart.nl
lex-laser.de
luminasims.com
link.marble-app.com
www.matisseverduyn.com
meinheim360.com
merliniumaiot.com
test.mimiplan.com
www.moraviantours.com
www.mototaxi2001.com.br
www.mpishi.co
www.musicblobs.com
mvskiran.dev
www.mygunplacollection.app
narede.app.br
bpm.oesa.nclabs.dev.br
neevbytaneesha.com
users.newsware.com
nissansip.com.br
www.nollie.net
numms.co
www.ob-360.com
www.outfitadvies.nl
app.payoutlab.io
games.playchamps.com
analytics.portfoliolink.co.za
analytics.qa7-raksul.me
radhakrishinaraasgarba.com
www.rankifyme.com
rayelus.es
rbvalpo.cl
rcbgroups.in
portal.rcinteligencia.com.br
app.runningstars.com.au
safe.is
sendmebox.com
www.seouldental.ca
skiplaundry2day.com
games-dashboard.squarecircle.app
link.stellartickets.com
svas.business
www.telodije.club
testtube.app
themarryingyourselfjourney.com
theresidencespompanobeach.com
seaspotter.theseabay.com
www.thryveslt.co.za
thunderjungle.com
dash.tooq.me
trevorsdndgroupmeet.com
admin.tsebo.app
turkmenelispor.com
www.turniermanager.app
www.utr8-group.com
woodscape.valeo.ai
www.vengaimobiles.com
live.vidtao.com
vokablo.com
parceriabv.weme.nu
sign.work.am
Other domains in certificate