Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=costruzionimdb.it
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 13, 2026
Valid Until
September 11, 2026
31 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E8:CD:94:99:C3:15:C7:BA:04:61:6C:42:B2:CE:65:5C:28:20:EA:53:79:E6:06:EF:43:38:C8:AD:73:DD:25:88
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
cwflabs.com
3rm.fr
aanaadu.com
aikidoepinay.fr
aiwithsuraj.com
anchor.com.ua
apprythm.com
arisayuki.ddns.net
www.artpull.net
asw-office.at
helpdesk.bioassist.eu
lattice.bornwest.ai
www.bravesprout.mom
projects.bushburg.com
careofkeya.com
castc95.org
www.castc95.org
chingching.app
www.chp.zp.ua
resto.cloudas.com.co
tienda.cloudas.com.co
codindle.codin-it.dev
costruzionimdb.it
decorin.ai
ag.devent.no
digipinfinder.com
www.entreprise-enveo.fr
erametrics.ru
eyelashshop.top
democenter.facturante.com
firtensol.com
www.fizyotakip.com
fjzdemons.it
flowerarchdecor.hu
getluminaryapp.com
dev.handoapp.com
haridhun.in
heal-app.live
www.hessteepharmacy.com
www.heymention.com
www.link.hicity.world
www.holibonny.com
hotelzagrebcrikvenica.com
infinityli.live
instantar.tech
ivoca.ai
kalkale.org
www.knowlium.io
www.llynfiholidaypark.co.uk
luarai.com
bio.mayurgangasagar.com
mgmassoterapeuta.pt
my3dwishes.cl
mygetsupport.com
auth.myuzika.com
navio.by
nectarfarm.in
nerds.sh
webflow-cdn.nutrisense.io
mta-sts.nvmailbox.net
ocantherapy.in
parareefgroup.com
www.phscmedicalcenter.com
staging.positrack.app
www.postacilaryapi.com
power-consultancy.com
auth.prepbite.com
www.proviene.com
desktop.qrbloomsuite.com
rd1c.in
rexmax.dev
www.ryanpliske.com
www.sander-lunchbox.com
www.scarlettvox.com
gib.parking.smartsys.io
socialpiper.surf
torrance-dev.soraschools.com
steadycompass.lat
studyprep.online
app.subs-manager.com.br
www.sunspica.com
syntaricanetworks.com
taihao.rest
talmeha.com
www.teunspithoven.nl
thanhtam.ai
www.tommalletennis.com
tpqnurulkaromah.my.id
ventanaspro.cl
veritic.ai
vethelper.com.tr
vflschoenberg.de
viranchi.ca
temp.vridit.com
www.warmbake.lat
www.wowhaus.sa
app.wrapwayuae.com
sensors.wwla.kiwi
hq.zizzlelab.com
www.zoodlebug.com
Other domains in certificate