Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=getepisodic.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 08, 2026
Valid Until
October 06, 2026
48 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
05:CE:95:65:AE:6A:78:54:C9:43:89:B1:4D:B5:7D:01:9D:88:45:6F:90:64:7C:B5:6C:EE:45:05:65:EB:A1:43
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
bobobaby.app
www.blog-stage.airesdigital.com.br
alphaits.tech
ticket.ampliva.com
anvilskills.com
download.anvilskills.com
aoe2rms.com
aylapedrarica.apexsales.com.br
applyordeny.com
docs.appox.ai
asenterprise.ind.in
auround.com
bingo.info.vn
mopi.blaustfaust.house
budhq.app
design.byldup.ae
www.catalogodomlaser.com.br
citylinecarfix.nl
clpassociados.com.br
www.clpassociados.com.br
eco.consumer-rights.org
www.cornerswaps.ca
cosmosfireart.com
procecs.costasol.com.ec
www.countbeer.se
www.dayones.info
dgbudget.dgapps.ai
implantes.digital-dent.cl
dukecollarandleash.com
xtrelz08c342v66u.easyapp.co
fhmarzamost.in
vanguard.foundry1867.ai
dev.fridaytech.co
www.frozenmusic.in
getepisodic.com
giacomocolosi.com
www.giacomocolosi.com
heru.app
connected-automations.lectonia.dev
dashboard.lexmindpr.com
mann-erz.de
app.marilyngarrido.cl
www.marketdominationsystems.com
maviconstrucaocivil.com.br
dunder.mifflin.xyz
welovemoons.mymoons.cl
student.netotech.eu
neurourbana.com.br
9circles.newtonfinancialengines.com
nickreitnour.com
www.nickreitnour.com
coramdeo.noblecollective.org
norlansolutions.no
octoquizpus.com
outorgadigital.com.br
outorgaeletronica.com.br
pedpanel.com.br
lab.pezconfiable.com
playthe.show
policycollege.com
powersthenics.com.mx
proway-im.co.za
qr-unlimited.com
shokuhin-hokkaido.quest-career.jp
raviol.is
www.redshift7.co
rentbay.in
robuilderz.com
rooxcare.com
savecycle.net
saveragraphics.com
secretsentinelca.com
www.secretsentinelca.com
skycash.autos
www.skycash.autos
solucaoconsultoria.ia.br
solvinglobaltech.com
streamify.lat
swimset.app
tabletoprally.com
www.tabletoprally.com
admin.tamimglobal.com
tamimglobal.com
accounting.tempostreet.com
tlupro.com
tovachi.fun
tradingjournal-dashboard.com
onetv.tunacorp.app
useserre.com
valuesavant.com
www.venser.ee
www.vexlo.in
vilevro.com
www.vilevro.com
www.warrior.fyi
whaleybros.com
advsilvania.xbyyy.top
cosplay.yasgamingfestival.com
onsite.yasgamingfestival.com
tournament.yasgamingfestival.com
Other domains in certificate