Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.dodoapp.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 16, 2026
Valid Until
October 14, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
58:BC:9F:67:FE:0F:CA:CF:77:08:E9:79:3C:79:9D:E9:AF:02:0D:9B:77:4B:91:F1:D9:52:F1:F2:30:3E:92:A2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
commissioningtracker.gvav-utilities.com
4health.is
bing.51tk.net
awwwardsconference2020.adoratorio.studio
advitad.com
www.albertovaldez.com
voicecontrol.ambihome.net
www.ancient.life
bin2dec.aneko.fr
arigatosushi.com.br
askstellar.co
avoidsociety.app
baic.co.il
bazo.com.br
test.beeplus.id
bodybmicalculator.org
babyapp.brainfitstudio.com
byteping.co.in
caazam.com
canadabridge.pro
www.chainamb.com
sms.demo.chance-store.jp
burger.chouinard.me
daftarerp.codebook.store
expensetrack.constructivedesignsinc.com
countdoko.club
www.crowdpoint.io
www.cyberschijfvan5.nl
darycortezweb.com
www.devakinandan.co.in
www.dodoapp.co
www.drilldown.online
www.e-kitchen.com.mx
admin.farmnhand.com
api.financekit.app
gps.fusioniot.in
www.garretteckl.com
glambel.com.br
globalhikes.com
www.globalhikes.com
www.googify.net
ikjunekim.net
isinvest.ro
purchase-web.k-fleet.com
www.kahma247truganina.com.au
karthikhegde.com
www.koriemconsulting.com
aleatica.lernit.app
macokay.com
www.makrofag.no
masarsoft.io
www.matelas.com
www.maxpaulson.org
mf.mcode.dev
moja-pobuda.si
www.moxieman.fi
aplp.msgcoe.info
mudoku.dedyn.io
n1fighthouse.com.br
leziria-sustentavel.nersant.pt
www.nexil.co.il
nomu.app
referrals.lawnlo-dev.noomlo.com
paw-safe.uk
peaksapps.io
visionary.pilotstream.co.za
staging.planama.net
app.profilepicture.ai
www.proscriptum.de
rc-dms.randy.ltd
rascal.app
rent-link.jp
restyleai.co
www.rubiconic.com
sanjibani.org
auth.sessionhub.app
www.soaringdragon.art
sreenivasadpgc.in
stillwatergo.com
streducation.in
legal.studdybuddy.app
td.tkst.kz
dl.trulearn.in
www.uegrp.com
www.upoharshop24.com
zakelijk.urbancollect.app
veredu.com.br
www.vibexapps.com
www.vitalsignals.com
walcorg.com
www.wankyo.jp
collegeintel.weisblatt.me
www.wesaconstruction.com
wforteservices.com
www.windzaloft.com
www.yourcall.in
zaskapp.com
map-addin-dev.zendu.one
www.zeugnis.codes
www.zippyprints.org
Other domains in certificate