Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=moon-story.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 13, 2026
Valid Until
November 11, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
28:3B:74:AE:0E:9C:D3:09:5E:B1:F3:98:F1:9F:5C:A2:FF:FD:15:4B:48:0C:77:BB:35:DF:F2:BD:AE:A4:D5:12
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
epixprime.com
alvaro.948.es
docs.abhiyanpa.in
ah-habitat.com
www.archexplained.com
gas.astar.network
atacadaodastintasgyn.com.br
dev.atmasampanna.in
lots.bhaavdekho.com
staging.bitalpha.com
sub-docs.blackhilllegal.com
www.bluehousetech.com
bmsstats.cz
landing.dev.brd.so
brunacupcake.com.br
worldcup.calcutta.xyz
setup-dev.captego.com
www.cashooz.com
todo-li.charlie-richardson.co.uk
maacpreprod.cresclab.com
www.d-ploy.mx
www.didseagullquit.com
www.dpcyouthup.org
drivenstudio.driveniq.com
auth.dropmaps.net
www.dudejustgo.com
www.e2e2.org
ecommerceplaybook.io
www.eexchange.in
eleva.social
eliseetyounes.fr
app.farasatdesignz.com
app.fastgig.sg
findshadedparking.com
www.funlab.jp
getshrimpiq.com
www.glashard.com
onboarding.grata.life
the.guid.party
staging.billing.ipregistry.co
app.kaseron.com
kisfeszek.hu
kol-kol.de
kownzin.com
stg-admin.mart48.in
maykarelektrikinsaat.com
dev.daptest.mestergruppen.cloud
mh31buffet.com
app.mojbudzet.me
mojbudzet.me
sistemas.monegroenterprise.com
auth.montaalim.com
moon-story.com
app.mstable.org
app.myasfar.com
mydocify.in
mydreamwed.com
myfittrip.com
nguyenthanhluan2417161it2000.id.vn
www.ojaspote.com
omnetsystems.com
www.ongboonloong.com
osteopatagaialazzeri.it
www.pagoselrosario.com.mx
pdf-ed.it
personalchauffeur.pl
piggy-smurf.com
pmbdesarrolloweb.com.ar
pobonim.com
pramanr.com
app.prodflare.com
www.prodflare.com
pruvodcejaponskem.cz
radio-paper.com
www.raspsolutions.com
reclimeinnovation.org
europe.api.ridedott.com
bredenoord.dep.rosepetal.ai
connect-ng-carrier-loadboard.rxoconnectmain.rxo.com
shadeparking.com
mindstack.skader.nl
www.solararctech.com
www.stmeesummissionhighschool.com
cabinet.studiossolution.com
horizen.summit.io
cloud.test.sylva.ac
telivan.pt
www.thanhtam.ai
toqueaqui.pt
links.chargingservices.totalenergies.com
lite.tradepro.com.br
trocae.fun
fide.trustin.app
tyo.no
www.uecrear.edu.ec
vekstro.com
ponto.veloxgrupo.com
dev.vezinio.com
vsynaptech.com
appstaging.whooosreading.org
Other domains in certificate