Open Cached · just now
77/100 SECURITY SCORE

Certificate Information

Subject
CN=www.elephpant.ir
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
October 06, 2025
Valid Until
January 04, 2026 41 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AB:D8:F2:CC:26:C9:59:65:E7:41:22:16:E9:B9:79:A5:A7:5C:5B:F1:F4:09:A4:15:BF:90:19:FC:80:CF:40:5C
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
bleiwrites.com

Other domains in certificate

ai-swe.com
captions.aihearu.com
alijafri.dev
prd-firebase.amuse-beaute.com
analystak.com
autohaus-hesse.berlin
mannereclass.auxswot.com
recovery.behaivior.com
shop.bhavindesai.dev
www.bigzigprinting.com
birdsoftwarellc.com
www.bishnughimire.com
help.blujedi.com
ywvm.bmgomg.com
cdn.boscofreshfest.com
brprocess.com
candy-cards.com
iciparimpora.co.in
integrity.weget.co.th
colinwilson.dev
proteinfoundry-orders.crispnow.com
www.cyall.de
dorjeeanddom.com
dreamtechworld.com
account.easytap.co
echojournal.ai
secure.elephascare.com
www.elephpant.ir
endingeverything.com
rib.library.ethz.ch
fashionmejen.com
feedbackrig.com
feelfirsttest.com
app.freundundreiter.com
dev-app.froged.com
8ball.gamezapps.com
gestandoenmovimiento.com
refgen.groupe-abed.com
habilidadescognitivas.com
handballapp.io
hanzigraph.com
www.heavyzone.ca
homeopaticasanrafael.com
hubotik.com
app.imobiliariauniaoumuarama.com
mirain.impactwrap.com
www.indigenouscareer.ca
intaxtech.com
mozaikplay-stage-4.ischoolconnect.com
juhispeaks.com
jupiterdocs.com
www.jwn.gr
www.kathrynaholston.com
kaweapps.com
keevii.com
kotwalcommodity.com
promo.lapsnap.app
www.larson.works
www.littleblackmutual.com
www.logistic4.com
api.masasgames.com
links.memrise.com
mightyllamanft.com
poogatype.minglunshao.com
app.mucky.com
invite.mybeb.com
links.carecognitics.mycareplan.health
mygoaltrack.com
www.naminesbakery.com
navidmx.com
preview.neoufitness.com
emr.dev.ophelia.com
patilsuraj.com
yvis.piticommerce.com
portlandmainetabletennis.com
pythongym.com
rainmaker.rarepetro.com
lp-measure.remodela.jp
dev.api.rendr.delivery
pricing.resquare.co
public.roboflow.ai
runnerapp.in
www.ryanlightart.com
santtai.com
blog.scottwittrock.com
www.searles.co.za
seeingredevents.com
sgcardbros.com
pandc.sid426.dev
control-ui-qa.skykit.com
www.smcw.dev
but-sfg.speakylink.com
www.stevendbaker.com
www.trainproapp.com
staging.lobby.uveye.app
web.vidon.ai
y-k.cloud
picante.ymapp.co
ewallet-demo.zotapay.com