Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=kangoo-trekka-club.org
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 18, 2026
Valid Until
October 16, 2026
36 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
05:11:43:52:F0:2C:49:B6:E1:82:64:0F:D9:4C:01:94:CE:B5:05:31:BD:92:12:72:FB:15:C0:A8:D8:4B:CF:F5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
ev.tuscutilities.com
app.abn-network.eu
staging-1.acreom.com
services-fbcf-stg.alloprof.qc.ca
www.anjanadevibadrinath.com
www.basayarkia.com
auth.bctrevi.com.br
aws.bedsopia.com
fireside.blseclub.com
tde5.call1800messiah.de
carlaustin.dev
enfirebase.cdreader.com
ideathon.citrusbug.com
prod.cmeetit.com
constrategic.com
www.coursecrux.com
app.cuballama.com
danhgiatuduy.online
www.daniel-frederick.com
www.davidjefferys.com
chametto.dealplor.com
www.demon.quest
join.digiisocial.com
digthatgroove.com
dinoco.blue
dotvillain.com
psychology.drharkawal.com
www.dynfix.com
enterdobrasil.com.br
dev.estomatolog.com
admin.expressquote.mx
app2.firstchoicepos.com
ocpp.franacu.com
funkydraw.com
console.getreach.co
dev.cms.ghandicap.com
godsquad.church
staking.goldefy.com
h-anke.net
dev.beheer.hallovriend.nl
hdademo.com
herpstracker.com
hopaxi.com
horaexacta.cl
hpdreamlandadventures.com
hurtgirls.com
www.app.infoappen.se
www.intelliflowio.com
ishanicrackers.com
jennchance.com
kangoo-trekka-club.org
ktally.knesis.com
tarot.konahart.com
www.liam-watson.com
www.city-climate-trends.lobelia.earth
www.locate.fi
j.mahe.io
app.managemanufacturing.com
www.martinschafer.com
www.medgrocer.com
vn-devapp.mkt.city
expert-1e6e1.moovstudio.cc
test.accounts.multiplicu.com
szybkikabarecik.pl.niszogen.com
rendering.nkportfolio.com
dev.offerarcher.com
www.offthacharts.com
oguzhantuna.com
pacercreativestudios.com
www.palgo.io
www.pcgpopreport.com
pjbapps.com
webgl.dev.pochicon.games
www.pointtoshare.com
profelper.com
qifusan.autos
radontour.at
rafflespin.com
tm-superadmin-hml.redfox.dev
l.resdiary.com
rocket-duck.com
reports.rsamb.com
mta-sts.rsl.gd
safemission.net
timesheet.saparya.co.in
scopesociety.com
app.sharo.io
app.shipwithskcourier.com
shyfti.com
signaintermedia.com
www.sweetomengood.com
profix.synta.live
procon23.thangved.com
tools.themill.church
vcortexlabs.com
www.virtuosotrade.com
flow.waylar.net
www.weatherteller.com
www.wireless.coffee
wxaxrxp.net
Other domains in certificate