Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=open.beefeed.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 20, 2026
Valid Until
September 19, 2026
47 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B8:FF:8D:97:F8:E5:29:B8:24:4D:3A:85:69:91:48:7C:27:DE:CC:E0:FE:63:3B:A9:B2:0F:C5:0D:60:9A:ED:54
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
budgey.money
adh.do
agendabox.app
portal.ages-gaudium.org.br
www.aiculstormy.es
almaisoon.com.ly
ambiduckstrous.com
anitaeducare.in
dashboard.ankerias.com
www.arcueil-cachan.fr
www.atmozstudio.com
bazeny-minab.sk
open.beefeed.de
bfu-pary.ru
storypointer.bhumiksoni.com
bruinolympiad.org
www.brunodevs.com
admin.campliq.com
chaytan2024.com
rimobel.configuradordeco.com
constelatuvida.site
app-stage.dewizgolf.com
domotic-control.com.ec
steadypilot.dstteam.com
transformers.emallstudio.com
www.episkevastiki-golfinopoulos.gr
trackingapp-sdhl-test.esports.cz
www.redime.fanarmy.promo
farmy.life
admin.fbvest.com
felixxpensioen.felixxgroep.nl
color-master.fuwariworks.com
fuwari-diary.fuwariworks.com
testbed-smartmenu.gupshup.io
ids.htbx.gr
denuncias.imop.es
portal-bradescard-pruebas.inter.mx
beta.iopsmobile.com
www.jardindejany.net
kandyangem.lk
fsummit-invitation.kerzz.com
keyfastsolve.lat
www.keyfastsolve.lat
keyjoyrealty.hair
www.keyjoyrealty.hair
www.kiaservisankara.com
slidesync.leadup.guru
legacyconsulting.ae
lexdoks.com
vantagesales.liberte-mode.com
linjiabai.rest
dev.frame.lokalebon.nl
lulucitron.com
app.mapleadspro.com
www.master-designer.com
algo.mayamd.ai
www.mentorgram.org
meupar.com.br
www.residencial.meuplanoclaro.com.br
www.michelbureau.com
naw-plasma.com
login.netliss.com
www.netsolxperts.com
nexahealth.es
app.novaterim.com
onegoodprofile.com
kyc.onehypernet.com
www.osir.io
www.pamusha.com.au
www.perspectify.net
phillyresearch.com
www.professionalwomensleadership.com
tools.psalterapp.com
auth.psifi.app
verify-beta.ratingit.app
rodrigobastos.dev
college.ronenjain.com
www.rongtai.lat
www.rtpadventures.com
www.sanderschnydrig.ch
saqoralsahra.com
scoreboards.app
auth.sendy.app
global.seller.sglcertified.com
boxlanding.slappar.nu
festa-destaque.solution-sp.com.br
www.sonarbangladigital.com
office-dev.sovoro.kr
springofjoyrecovery.org
staceyforklsd.com
agency.staffshift.com
www.sumitchouksey.com
swadeshivitta.com
transsmeta.com
www.travelsingh.com
wohnmusik.com
web-demo.yantralive.com
yichallenge.com
www.zackthompson.com
auth.app.zivora.co
Other domains in certificate