Open
Cached
·
just now
89/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=imperva.com
Issuer
C=BE, O=GlobalSign nv-sa, CN=GlobalSign Atlas R3 DV TLS CA 2026 Q1
Valid From
February 02, 2026
Valid Until
August 01, 2026
169 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B8:94:C4:A2:0B:D7:67:BC:54:D9:96:D1:B8:67:55:3A:CA:E1:C6:2F:76:59:80:54:D2:35:EC:F2:CE:1B:3F:AD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
Content-Security-Policy
Basic
default-src; script-src; connect-src; +3 more
default-src * 'unsafe-inline' 'unsafe-eval'; script-src * 'unsafe-inline' 'unsafe-eval'; connect-src * 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; frame-src *; style-src * 'unsafe-inline';
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Present
origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
142 domains
dc-cert.westjet.com
dc.westjet.com
dcci-cert.westjet.com
dcci.westjet.com
reservations.93luxurysuites.com
reservation.arizonagrandresort.com
reservations.bestloved.com
reservations.bloomhouse-hotel.com
reservations.boavistasurflodge.com.br
reservations.canaryriversideplaza.com
reservations.careysmanor.com
reservation.casalomalagunabeach.com
apigw.israir.co.il
ofakim.co.il
onlineskideal.skideal.co.il
www.ofakim.co.il
reservations.eleganthotelcollection.com
reservations.eriro.at
nokair-gcp-cert-stg1-ezycommerce.ezyflight.se
cts-cert-internal.getthere.net
cts-prod-internal.getthere.net
reservations.grandhoteletdemilan.it
book.gravetyemanor.co.uk
reserve.hammettshotel.com
reservation.highcountrymotorlodge.com
reservations.hotelbleucarry.com
reservation.hotelbowmannparis.com
reserve.hoteldownstreet.com
reservations.hotelfloridaparis.com
booking.hotelgreenpark.com
booking.idiliqhotels.com
imperva.com
reservation.laplayahotel.com
reservations.laposch.com
stay.makaremhotels.com
reservations.montaguarmshotel.co.uk
blackdesertresort.mynuvola.com
laquinta52706.mynuvola.com
uschotel.mynuvola.com
bookings-cert.omanair.com
bookings-stage.omanair.com
dc-cert.omanair.com
dx-cert-checkin.omanair.com
dx-stage-checkin.omanair.com
book-hotels.onni.com
reservations.palace.de
casapalmero.pebblebeach.com
arj.app.radixxcert.com
arj.appota.radixxcert.com
arj.dcs.radixxcert.com
arj.res.radixxcert.com
avo.dcs.radixxcert.com
avo.res.radixxcert.com
trs.appota.radixxcert.com
trs.dcs.radixxcert.com
trs.res.radixxcert.com
a3-1.avro.cert.sabre.com
aa-checkout.cert.sabre.com
ac.avfo.cert.sabre.com
ai.avro.cert.sabre.com
am.lm.sabre.com
ap-demo.avro.cert.sabre.com
api.hotelbooker.cert.sabre.com
asreporting-us-central-green.cert.sabre.com
asreporting-us-central-green.sabre.com
b6-1.avro.cert.sabre.com
bermudair-api-cert.ezycommerce.sabre.com
bermudair-api-cert.ezypayment.sabre.com
bermudair-api.ezycommerce.sabre.com
bermudair-api.ezypayment.sabre.com
bermudair-ext-api-cert.ezycommerce.sabre.com
bermudair-ext-api.ezycommerce.sabre.com
cert.lds.sabre.com
cert.marketint.sabre.com
cert.quick-gcp.sabre.com
checkinconfigmanager.messaging.cert.sabre.com
checkinconfigmanager.messaging.sabre.com
developer.cert.sabre.com
dms-tc2.cert.sabre.com
dms-ut2.cert.sabre.com
dms.sabre.com
dw.el.certintbox1.sabre.com
dx-dw-certprod.sabre.com
et.avfo.cert.sabre.com
g3.lm.sabre.com
hotelbooker.cert.sabre.com
hotelbookeradmin.cert.sabre.com
hotelbookeragencyadmin.cert.sabre.com
hotelbookerreports.cert.sabre.com
hotelbookerssl.cert.sabre.com
marketintelligence.sabre.com
merge-sheriff.cert.sabre.com
merge-sheriff.prod.sabre.com
quick-gcp.sabre.com
rx.cro.cert.sabre.com
sabremosaic-api-tc1-aa.cert.sabre.com
sabremosaic-api-ut2-aa.cert.sabre.com
tg.avfo.prod.sabre.com
va-2.avro.prod.sabre.com
weba3.ri.sabre.com
webet.ix.sabre.com
webgf.ri.sabre.com
webpmp.a3.ri.cert.sabre.com
webpmp.a3.ri.sabre.com
webpmp.et.ix.sabre.com
webpmp.gf.ri.cert.sabre.com
webpmp.gf.ri.sabre.com
webpmp.va.ix.cert.sabre.com
webpmp.va.ix.sabre.com
webpt.x0.ix.cert.sabre.com
webqa.a3.ri.cert.sabre.com
webqa.et.ix.cert.sabre.com
webqa.gf.ri.cert.sabre.com
webqa.va.ix.cert.sabre.com
webtest.et.ix.cert.sabre.com
webtest.va.ix.cert.sabre.com
webva.ix.sabre.com
www.2101.usc1.cert.planning-optimization.sabre.com
www.5601.apse1.cert.planning-optimization.sabre.com
www.a301.euw3.planning-optimization.sabre.com
www.f801.usc1.planning-optimization.sabre.com
www.f901.usc1.planning-optimization.sabre.com
www.nz01.ause1.cert.planning-optimization.sabre.com
www.qq01.ause1.cert.planning-optimization.sabre.com
www.tm01.apse1.cert.planning-optimization.sabre.com
www.uk01.apse1.cert.planning-optimization.sabre.com
www.va01.ause1.cert.planning-optimization.sabre.com
www.yw01.euw3.cert.planning-optimization.sabre.com
www.zl01.ause1.cert.planning-optimization.sabre.com
www.ts.sabretsapac.com
secure.sunbornlondon.com
reservations.theabnerhotel.com
reservation.thehotelcarmel.com
reservation.thelagunabeachhouse.com
reservation.thescottresort.com
reservations.thyme.co.uk
reservations.tortue.de
reservations.trappfamily.com
booking.unaitalianhospitality.com
reservations.unicohotelcollection.com
reservations.valleyriverinn.com
reservations.villacora.it
Other domains in certificate