Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=app.cometelapp.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 31, 2026
Valid Until
October 29, 2026
52 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EC:31:6E:0E:A1:63:B7:EA:6D:0F:BE:99:DB:77:5F:1E:36:F4:82:D0:8C:87:CA:5E:B9:9D:92:25:17:CB:12:D5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
criswings.com
proto-store-mgmt-demo.ai-linka.com
www.aigencypro.it
www.ajinkyaraj.com
baby.alexandaudrey.com
www.alphaandmore.com
www.arznei-und-haut.de
www.ashthomascode.com
carmela.aszendit.com
hive.atworkhmo.com
www.benimharcamam.com
l.bodynator.com
www.brainclippings.com
www.budfornow.com
byrab.com
cboonnag.com
www.chadz-gptz-minerz.com
www.cincogatos.com
www.classooka.com
app.cometelapp.com
cozycasasg.com
www.demoqrata.com
game.depthinkfy.com
www.dfpazevedo.com
www.app.direct-temporaires.fr
www.doctvault.com
ops.dxonline.co.za
www.dylomo.com
www.el-camino7.at
www.elitepartshelf.com
elliat.nl
emanandovidas.org
equilance.co.za
admin.exchange.art
entradas.beneficios.falabella.com
admin.falconcrms.com
test.farmexpert.ai
www.fiducialys.com
app-staging.fillerupemployment.com
flipsidetrade.com
futuretechinnov.com
fuzzymoos.com
gquattromani.it
santatereza.guiasaudemais.com
www.holisticrenewalcenter.com
homesz.jp
portfolio.hugebelieve.com
humlander.se
ideagalaxy.org
www.immpartners.com
influly.co
dashboard.kanban.inrvatemedia.com
www.integritykerala.com
razblokirovka1.integrolaw.ru
www.kalidavfd.lat
keskedo.com
kevinvillarreal.com
preprod-digitalchange-frontendapp.knolskape.com
krfholdings.hair
www.krfholdings.hair
dev.krikeyapp.com
account.editor-qa-3198.langsmith.co.jp
learn-markdown-game.com
www.letztok.com
librarycatalog.ru
links.lisach0w0.com
ludovinocollado.com
dontgooutside.lukeknotts.com
auth.luma.ly
makematch.uy
mandux-t.com
maureenduff.com
mavacoldbeverages.com
mcateerrecycling.com
meishako.com
messego.com
links.miaguila.com
www.michaelblonsky.com
app.milesbd.ca
www.mindelhotel.cv
ehon.monois.com
www.movetheworldoperations.app
multiviewforndi.com
mwmidia.com
myzoomlinks.com
tools.niagarastandsout.ca
www.nosuccessions.org
nutrilla.com.br
o2plantservices.com
app.ponz-web.com
www.productmaker-app.com
rachelferguson.art
hello-dev.rello.co
console.safecircle.africa
learning-suite-testing.seekinnovation.at
simpleyverdeok.com.ar
vna.thepetdoor.asia
carteiradigital.vrsoft.com.br
checkin.westlineschool.edu.kh
www.wplan.si
Other domains in certificate