Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=helios.flitter.fr
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6B:79:AA:3C:73:37:71:63:C7:FC:A8:B8:71:49:C3:AF:6D:4D:10:16:4E:4A:B8:19:02:5D:5E:97:AA:F5:2F:E6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
farrstone.uk
3vocal.com
a10dence.online
abdullahcheema.dev
www.adaconsultants.dev
aivionllc.com
app.allpwd.com
api.alobutton.com
cmsgc02.andiprojects.shop
andrewkrippner.com
annaagutespel.com
apex-living.com
arithmeticgame.com
artechvert.ma
aseguratufactura.es
parking.astre.fr
atranstech.com
www.aureum.ai
www.autonoma.lu
www.availeapp.com
beauty-column.jp
bekelectricaz.com
renthashsimulator.blockwaresolutions.com
www.bluewhale.systems
app.bookapps.co
bosvita.com.au
admin.commerce.botio.io
brendasdogspa.ca
brinshandymanservices.ca
bsalzberg.com
www.btdevs.com
moncompte-outils.cafedemarie.fr
api.craftnote.de
dentalrobotics.co.kr
dentlabdemo.dentdesk.ch
testing.adminportal.ecoe.vn
app.dev.favo.jp
helios.flitter.fr
frontex-coop.com
www.fstck.com
www.gdg-vilnius.lt
dev.greco.fit
dashboard.growupfund.com
hangqin.surf
www.herveluna.com
hintcatcher.com
www.hxarp.com
www.integer.cl
agenticaiflow.kalisi.dev
kfxgroup.buzz
klaudeyun.com
www.klkindustry.com
kspdplus.co.kr
my.leelalife.com
lexwin.es
www.liquidity-flow.com
livescaper.ca
luadessens.com
www.matts.biz
mehulkapadia.in
app.mfaunderwriting.com
movieguesser.com
mycloudtank.com
myintros.xyz
l.nais.pl
maged.neetechs.com
nomastoc.cl
www.photar.co.uk
phucnguynn1301.id.vn
www.prabin-karki.com.np
www.proxytraders.com
psi360.com
recflow.co
dlh-hayati-kotim.rinjani-parahita.com
riteshsaxena.dev
www.robinhoodspace.com
connect.rolanddg.com
auth.selfie-circle.com
www.singinglessonsaberdeen.co.uk
dev.skyview-app.com
www.snuheme.org
spacetrip.agency
www.sportshack.io
streetdeals.pl
www.tailoredmediaplus.com
app.tasbelgium.com
gonnelli.thetislive.com
list.tief-blau.net
tilstack.me
tinekejelsma.nl
forms.treasuryviewer.com
www.trestlesystems.com
www.triangleendocrinology.com
www.unorthodoxstudio.ca
www.v8app.com.br
www.veritystudio.co.uk
visiblewomenagency.com
volleyproapp.com
volli.com
www.vrikshanova.com
Other domains in certificate