Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.saudi-growth-app.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 04, 2026
Valid Until
November 02, 2026
56 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E6:0B:E5:F0:6A:B6:A6:27:99:A2:5F:D4:D6:ED:18:3D:ED:5F:B7:70:7E:1D:30:9A:68:EE:FD:DB:66:22:68:3E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
binfrix.io
www.app.168mfg.com
admin.a360.tech
abebbrasil.com.br
admin.internal.accessablescot.com
my.internal.accessablescot.com
www.active-generation.org
actual-labs.com
adda4lyrics.in
portal-b2b.aircasa.in
www.amiriscostapsi.com.br
www.arfniia.com
arkixr.com
www.assignmentplanner.app
lq.order.atena.life
demo.admin.bezwaarmaker.nl
unified.bikers.co.ke
partner.bizzowl.com
www.blackewhiteparrucchieri.com
teambonus.bondvet.com
cardshop.tech
www.carmelyonaportfolio.com
www.catchawavessettlement.com
catinaboxgames.com
churchilassociates.com
www.cobweb.me
cosense-onderzoek.nl
checkout.craftjerkyco.com
www.crify.in
cydneykrone.com
domingapp.com
www.emkkozosseg.hu
corona.enra.app
erayaras.com
api.acme.esad.pt
f-medapp.com
ipa.f10.com.br
fensibl.com
firebase.asia
momoshiki.fujin-nara.com
auth.garageopsapp.com
gerardogameros.com
www.hodldek.com
www.hohlederlowen.com
store.ilmsg.in.th
www.indradhanugroup.com
iris-salon.in
pl-reverser.jagpotato.com
www.jordanperez.dev
baby-brunaferrari.kevincampos.dev
www.kudla.dev
lifenavigationu.ai
lightsync.app
lingea.store
madcry.com
marcyeo.net
margrietprinssen.nl
mariekeversleijen.nl
minced.io
moderna.world
wird.mutqinapp.com
nakongsolutions.co.za
netherlandshousing.nl
assistant.nextinline.io
nguyendinhkhoihust.id.vn
nicholasledwith.com
nithusan.co.uk
avax.nmarket.pro
files.nulabs.it
testapp.onre.finance
shortlink.openeyessurveys.com
matrimonio.pantinelli.it
labelz.pindaz.com
pontofacemark.com.br
wiki.projet-prism.fr
www.riderhub.com.br
mentorias.rzr.ar
www.saudi-growth-app.com
shedou.lol
www.sketchingworkdesign.com
api.slyck.app
www.superwordle.com
app.tangia.co
www.tanksafetech.co.za
www.tapandrise.com
taskva.app
meet.teamprove.de
thedealhub.app
tigerresiliencepress.com
transcelestial.space
grazi.tukozaki.dev
upliftnow.net
wattlayer.io
auth.wishzep.shop
link.wooriwoncar.com
xtable.co
www.yanfei.surf
kiosk.staging.your.vet
www.zeptos.jp
zeptos.jp
Other domains in certificate