Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=app-dev.platingo.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 22, 2026
Valid Until
November 20, 2026
73 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C8:20:BA:17:0E:C3:33:8A:D9:E8:61:71:2B:C6:4C:EA:67:25:53:B2:AC:28:E6:BF:09:3D:CF:05:23:10:97:42
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
gametimeos.com
21stcenturysextherapy.com
www.53bells.com
a2bworldwide.com
www.abhirajkane.com
www.abiria.co
acromwell.com
dev.stt-gdc.acuizen.com
www.aerofreedom.com
www.allmedi-socialmedia.de
aloapp.live
stg-shop-redirect.any-creator.com
dealer.arioso-records.com
artemissustainability.tech
www.autotaloampeeri.fi
awardmatcher.com
baawebacalar.com
www.baburangarajan.com
www.basiliskka.com
binatrix.com
fb-dev.bitkipi.com
bjjscrubber.com
www.blnautos.co.za
boonyongyang.com
bscarbrough.com
mybupa-nonprod.bupa.com.au
calcorbin.com
setup-feature-prod-eu.captego.com
www.chemistryshark.com
cloudinfra.co
www.codeofeverything.com.au
parkerchronicle.column.us
pro.conciertolive.com
apptmgt-i.dev-ltl-xpo.com
devhack.co
www.devqsoft.com
www.doggle.app
dogonahorse.com
dolgomvan.hu
archive-2020.edusystem.co.za
www.emilypotts.coach
cleanenergy.energia.app.br
www.eventshook.com
extantpublishing.com
partner.fastlin.com
api.doc.fieldpro.com.br
figpeople.co.uk
em8160.globalcarecenter.co.uk
glowpuzzle.co
www.holds.digital
dpp-demo24.idtwin.org
imsolver.co.uk
mozaikplay-stage-5.ischoolconnect.com
parttime.jaouan.dev
jeyhid.com
kaipo.dev
letudom.hu
mcdonalds-cloud.livestore.global
mindmakersproject.org
mtfridge.com
musicraynmall-capsuletoy.com
app.openeng.ai
www.oxchibus.co.uk
app-dev.platingo.co
plomberiepeltier.fr
www.pomodoros.me
prajapatinexatech.com
www.psycare.jp
www.pushcut.io
qikstitch.in
www.qikstitch.in
apply.salem.edu
shoks.net
admin.soleopilates.es
portal.soundac.io
specialti.com.mx
www.stellarglobal.org
crm.sutrasync.com
svenmoon.com
tanyak.in
tasketball.app
www.techcoordinators.com
docs.theananta.in
www.thesilverbackway.com
www.thilaksanadroptaxi.com
links.totalmei.com
www.traction.app
trademoreleads.com
demo.trayn.com
tuanhung1426hust.id.vn
u4k.turnosweb.app
static.unicornsurvey.com
unipark.com.au
universityavenue.capital
wepolitics.us
www.whiteout-climbing.de
wigorwitaminy.com.pl
xissors.com
yasjewellers.com
growingfamily7.ynet.co.il
Other domains in certificate