Open
Cached
·
2h ago
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bonelldoriga.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 09, 2026
Valid Until
November 07, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E6:51:CB:51:7E:6E:4E:A2:EA:EA:0A:57:27:D4:76:64:1D:D4:29:C6:26:62:1B:61:A5:32:B7:8D:1C:D0:0E:78
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
dgconstruct.ro
findme.28east.co.za
3trade.markets
www.3trade.markets
www.4pics1wordle.com
mancala.alignitgames.com
www.almatrafi.studio
app.amazing.dev
atlsalsacongress.com
dev.dashboard.azzle.com
www.bailin.com.tw
gstmitra.battutheboss.com
www.beansworkshop.com
r.bemypass.com
bestellen.berlindoener-chicagoburger.de
www.besprouts.com
binaida.kr
www.bipolar-mood-diary.com
bitemeimspicy.io
www.bloc-hub.ro
dev.blushedapp.com
bonelldoriga.com
www.brandon32.com
bukipe.com
call.me.kr
codesearch.calyxhealth.com
roi.captron-solutions.com
wx-sim.causeyaviationunmanned.com
panic.cbnw.co.za
cts-staging-api.closedcaptionconverter.com
www.survey.commb.ca
portale-parma.consulbrokers.it
www.crastap.com
www.dailystayfit.com
danielmingey.com
diasmorato.com.br
dicratch.jp
pokemon-go.drewterry.dev
dylanjmcdonald.com
echodydx.com
www.elh.com.ar
www.elsalamegypt.com
faisalbasheer.com
geabrasil.com.br
whereitwent.grow-motion.nl
azubicon.hentschke-bau.de
digital1.india1.co.in
configure.innore.eu
www.jaspil.com
www.jmservices.com.co
app.keyplay.io
canvas-demo.klarway.com
ipp-pretest.klarway.com
api.koobify.com
www.koran.center
link.lab78.com.ar
app.lareco-bornem.be
lazyworkroom.com
legavest.net
sub.luutuanhung-20225131.id.vn
comingsoon.magnesconnect.com
maiq.app
www.malnadsarogya.com
www.markia.mx
link.meetnow.in
meutercodiario.com.br
shop.monkeysleeps.com
www.monkus.in
nelequaas.de
nohavolley.it
www.onestopmedia.se
www.piletasq.com.ar
storybook.plant.se
demogratia.platfor.ma
auth.prepqube.in
pukingrainbows.io
quantaken.pl
app.questionable.io
villela.quitapay.com
www.redhoundsolutions.com
pwa-drivers.revoolt.me
www.sabinanordell.se
santamarialiners.com
www.shanebrechmann.com
admin.showmego.io
www.sujihairandmakeup.in
www.sukhadamevents.com
supercolor.sk
bombercup.terzotempo.app
login.thepro.io
www.trendwellanalytics.com
vokar.treq.me
primocar.veiculosnovos.com.br
versesrpg.com
vistadigital.rs
wipes.org.in
wizsofts.com
shop.woodproject.top
www.xinghegu.shop
www.zsofiandgergogettingmarried.com
Other domains in certificate