Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=li-av.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 20, 2026
Valid Until
July 19, 2026
72 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B0:36:F6:5B:B4:1A:85:7F:33:DE:1B:A2:10:28:92:45:06:3D:DD:05:22:83:9A:C3:12:69:16:A4:2A:0E:16:96
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
caique.site
www.45s.co.nz
www.6thmanapps.com
shabib.addin.web.id
aiasanta.org
dev-hra.aiqahealth.com
alcubiq.com
neuronpulse-admin.alienbrains.in
altintopsarraf.com
vcard.analauracouto.adv.br
anaselkamali.it.com
link.arkd.games
asiantigers-indonesia.com
askwhileyoucan.com
e-services.barreautanger.ma
karma.blackcurrantlabs.com
www.borrel.app
bracesguide.com
www.breakfarm.us
www.caarya.in
plan.cashrichapp.com
cbdata-dev-loyalty-web.cbdata.cz
www.ceramicworlddestinations.org
www.conectarhenegocios.com.br
auth.crochetbyplabita.com
cryptocurrencypatterns.com
link.cuci.id
www.daanvankempen.nl
portal.cao-mdos.darivault.com
www.dienifer.com.br
divinerebelrising.com
discoverhansa.dutchrosemedia.com
emce.dev
fgssserv.com
www.frommeadows.com
functionall.io
www.getthalamus.ai
english-kids-adventure.igcon.es
livequiz.ikeyedutech.com.my
joeysorkin.com
kermiteradio.com
se417.kyleg.dev
dps-oms.lecien.com
li-av.com
liegebeest.nl
cdn.pathika.litedevs.com
applications.longleigh.org
www.lpcbandeira.com
admin.luvpunjab.com
www.makemoredigital.com
www.marcomarchionni.com
martinrouede.com
microgigabyte.com
export.minkauntobis.lv
qchallenge.mka-karate.org
mlinkgo.com
mltea.morninglavendercafe.com
app.mrach.it
business.myreshn.com
neverjp.com
www.noblemetals.co
onvarise.com
storyteller.oot.blue
pasteleriakarolay.com
patpath.org
camping.pears.me.uk
playmetrics.io
okamoto-hp-auth.pocketkarte.net
prototig.com.br
velvet.redorb.net
remembrance.nz
www.renli.tw
logistics.robot-valley.com
ronari.com
www.rowanhockey.com
safadi-puzzler.com
samin.life
www.sanoberconsultancy.com
shandellejensen.com
instalogix.shipdelight.com
sjdxcontest.com
snapmentor.no
app.solarsales-pro.com
www.solenechiche.com
spacefox.app
speechnotes.com
speedread.fyi
support.synobian.com
t7even.com
www.tekletics.com
cartoon.theorygenerator.com
staging.studio.thetraverse.co
tititi.app.br
pro.tooddoc.com
transplantdynamics.com
app.usewhisper.space
visualcode.co
withatwistmobilebar.com
fc.ysstechservices.com
fstaging.zobaze.com
Other domains in certificate