Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=app.ahlan.menu
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 21, 2026
Valid Until
July 20, 2026
70 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DB:26:0E:AF:59:77:08:1A:41:38:CC:8E:C5:81:32:0A:D5:24:27:7A:0B:F1:56:8C:F4:8B:16:D9:4E:84:E1:7F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
carflow.cl
proposal.108.ua
32.1tsu2tsu.com
lplate.26agents.com
aaloclinic.org
www.ablecan.surf
app.ahlan.menu
www.aiunifiedconsulting.net
hms.andoresudevs.com
arinbot.ai
asc-services.nl
aureliatrail.top
kanban.beyondvision.dk
pixelart.bluelabs.in
brand-one.kr
buycheckpaperonline.com
link.byqian.com
www.bzz.me
casperdesign.no
clevaminds.net
clicktaketech.com
www.clicktaketech.com
build.coachai.finance
commissiononlyjob.com
commissiononlywork.com
admin.dadacabs.com
dairyvalley.hair
www.dairyvalley.hair
suport.escola-ege.com
www.escola-ege.com
www.salaprof.escola-ege.com
feiraomotos.com.br
fin-tara.com
app.firstswipe.co
footpassionrun.com
www.hidobae.com
about.hooqle.com
prod.ibazar.co.in
mcp.idealofsweden.team
decryptor.jj-automation-solutions.online
joyyield.buzz
www.joyyield.buzz
blueprint.kandr.io
www.kikoscript.org
app.kizuki.or.jp
lawanison.com
linewatch.vip
livesaudemental.com.br
www.lucky-playground.com
luminabrowse.com
lupopizzeria.com
www.lupopizzeria.com
www.maasbodev.com
mastrolonardogames.com
megamobileaccessories.com
www.metalsuits.com
mistrypartyrental.com
jtaxcob.nablasol.net
nashidtk.com
event.obsidian.com.vn
www.oksafespace.com
dev.olapili.com
one-room-studio.com
front.osle.co.kr
padelia.io
pethousepremium.com
masters-camp.pictureclub.io
dev.sp.pinggo.co.za
www.playa365.com
partner.playplanet.co.kr
pmstudio.co.in
pulsesales.in
quanlysale.vn
rbenergy.com.br
rlcappsolutions.com
saltlightbrothers.com
client.short-video.jp
shreeitsolution.com.np
socialityperks.com
perfiloepersogno.sognifrancescani.it
sohow.sg
event.lotteimall.soylive.net
bakrid.speedzy.shop
swiftguard.autos
www.swiftguard.autos
staging.app.taperzone.com
staging.taperzone.com
www.the-ark.ps
www.topfloridabrokers.com
trinityvows.autos
www.trinityvows.autos
live.u-events.com.ph
wedding.unicornaxe.com
www.vaklabai.com
admin.volkscompras.com.br
www.wehavesolutiontradingenterprise.co.za
www.xandria.be
erode.yazhdroptaxi.co.in
www.younggrasshopper.co.za
www.ysqllc.com
Other domains in certificate