Open
Cached
·
just now
89/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=kilage.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 19, 2026
Valid Until
October 17, 2026
34 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7F:A3:E4:6F:DF:39:55:17:E9:72:34:29:C1:1A:DA:16:03:74:59:3F:36:F4:15:6E:1F:75:D0:EB:82:A0:96:61
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
camera=(), microphone=(), geolocation=()
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Strengthen CSP by removing 'unsafe-eval'
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
firetap.app
9punk.dev
www.9punk.dev
aitruthx.com
www.aitruthx.com
alinthsystems.com
arabi.in
athreya.codes
bbpproperties.mom
www.bbpproperties.mom
www.bismilkaratasnakliyat.com
sunrise.botspring.in
buerweg.com
cape.fire.capefiregrill.com
www.cardandboard.com
log.cbstore.life
changeuu.xyz
testapk.clipboux.online
www.codematesdev.in
blog.coderoad.pl
codnamfede.com.ar
coloraturacollection.com
www.coloraturacollection.com
crucible.wine
registration.cwed.org.in
dande-wedincle.com
dars-goftarha.ir
saimarshad.dexvoa.site
www.dogmeet.at
games.dogonahorse.com
auth.domnu.com.br
www.dreamarq.pt
api.drivestic.com
eatablestories.com
www.eatablestories.com
enelgremw.com
unifiedportal.dev.evertransit.com
monitor.expedientecheck.com
filmerch.com
fitnessplate.in
shop.fixit.bike
ft365.kr
generation-eiffel-bm.fr
lms-sandbox.getfinstack.in
gokulisareewali.com
greenlightguideuk.com
auth.h8xesports.xyz
www.healthgenieapp.com
ibmuzik.com
www.ibmuzik.com
auth.iltersinan.com
instantech.com.br
jacobwale.se
www.jhguitar.co.uk
kilage.de
www.lglopes.art
maggandpartners.com
trip.maiyun.eu
malvixai.com
www.malvixai.com
cocoon.marc-wieser.fr
marval.app
medinalake.live
www.medinalake.live
deeplink.megaafiliado.com
mintedadvisors.com
www.mintedadvisors.com
moocowgames.com
mskd.jp
www.mybrighthaus.com
app.obacana.com.br
www.obsidianct.com
andrewlewis.paconottechnologies.com
www.pratikvaidya.com
productionbudget.in
www.productivitygenieapp.com
quehayhoyapp.com
quldo.hu
ragwapos.com
poc.ciiar.relu.app
auth.richmond-holidays.com
admin-staging.ridge-form.com
www.runopoolhavuzculuk.com
rutitest.cl
samschiedermayer.com
www.samschiedermayer.com
www.saveragraphics.com
sernorcaixilharias.com
www.sernorcaixilharias.com
openbible.thefallingscompany.com
tonyavmadden.com
cdn.tputrading.com
trishikharosalesservices.co.in
www.trishikharosalesservices.co.in
www.truquioh.com
www.vantrisgroup.com
auth.wcvote.com
whatifreadingcircle.com
auth.wizeenglish.com
zamieszkajwkamperze.pl
Other domains in certificate