77/100 SECURITY SCORE

Certificate Information

Subject
CN=trust-pay.xyz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 13, 2026
Valid Until
April 13, 2026 70 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4E:55:EC:DB:46:9D:B3:7A:91:E4:EA:E3:16:89:4B:C7:F7:1B:41:A0:72:A8:83:0A:7E:CF:89:1D:00:ED:B5:45
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Increase HSTS max-age to at least 1 year and add includeSubDomains
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
data.uratech.life

Other domains in certificate

afriqueenprimeur.com
ownflow.ai.kr
andrewbonnah.com
angelbabydresses.com
asktheclass.app
autorepuestosdan.com
avskiltet.no
mta-sts.ayoa.com
bakedbylenablog.com
bruma.bistrosoft.es
calculhouse.com
chenheng.autos
driver-qa.chowin.co.za
www.christcares.co.za
cmi-hr.com
codaanalytics.xyz
rewards.drsskincare.ca
ibg.edu.br
app.esmeraldoimoveis.com.br
admin.eternityservices.co.za
panel.factea.mx
finquility.com
govpt.gabrielschubert.com
gadgetstudio.org
geminiaicollege.org
geracaofortebarcarena.com.br
edu.gesfiles.com
public-bw-gummi.gocad.de
www.halitozlu.net
www.ibdaa-alsahra.com
mta-sts.imindmap.com
induxo.cl
inselpro.cl
jeunesturcs.com
www.julservetter.com
www.karigoriai.com
www.kexin.surf
www.knwait.com
www.kron-os.com
kronostrategy.com
leeringit.nl
demo.libyanahub.ly libyanahub.ly
www.lossless.energy
lunamarketinglab.com www.lunamarketinglab.com
magnoliaartsstudio.com
maisondeparfumerie.fr
cv.manuelaraujo.com
auth.mawazenco.com
auth.uat.melodydojo.io
esfera.mercadodaenergia.com.br
mesuena.online
mirupo.com
convert.mochi.is
www.moontrace.in
muhammad-alsharafi.sbs www.muhammad-alsharafi.sbs
joesystem.my.id
gofit.n8nify.shop
nabasrockstone.com
observestack.com
ongelukje.com
mta-sts.opengenius.com
www.paniscope.fr
lp.stg.pbxx.io
pitstop-parking.tech
smartbooth.planckunits.io
psiholog-dariana-barbulescu.ro
receipt-maker.app
bloomie.renanhq.com
roofingprohtx.com
www.santaoverseas.in
l.signflowmedia.co.uk
vendorassessment.silentsector.com
suresh.social-status.online
sourdi.net
spelling-bear.com
srivenkateshwaraindustries.com
www.app.stipendly.se
sugarbuddy.app
dashboard.sumtv.org
bodamorangil.swanmoments.lat
www.techclash.in
mta-sts.thinkbuzan.com
staging.timhochstrasser.ch
trotting360.com
trust-pay.xyz
uniponto.online www.uniponto.online
vibecube.net
vshyrochuk.com
vulcaart.art
waiinuma.com
wojciechkrawczyk.com
lk.wompi.sv
year.ma
yiyebilirsin.com
app.dev.yolocash.com.ar