Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=kzaqrp2tguutcb5y87yo.smartimob.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 21, 2026
Valid Until
October 20, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5B:B8:5F:95:E1:2D:59:1D:F3:24:01:AE:CF:CA:93:F7:65:8F:B0:4A:51:0A:95:DD:F5:F3:A4:EA:17:2D:61:1F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
gestaopj.cloud
test.aall.app
api.staging.activitystreak.app
aimbrosia.com
www.aimingpro.com
www.airobotics.im
albuquerquesbabyblue.com
allentplastik.com
www.amith.co.in
www.arcsin.se
www.armarium.jp
www.automotiveinsanity.com
bluehuelabel.com
blog.blueish.me
hansa.app.brahmaa.ai
link.b-dev.brd.so
bugarray.co.za
app.candor.org
caspians.se
app.choresly.com
dispatcher.cleantie.com
afro.column.us
creativetechstudio.dev
cuinuo.icu
daoquangthai.id.vn
demo.flexcards.darwinz.ai
trabajaseguro-ai.datascope.io
www.designi.co.uk
share.member.digskill.net
ec-play.com
ir.edanat.com
v2.fabiankachlock.dev
demo.face2faceweb.com
fairhavencookie.com
www.fnbtrainings.com
www.fortlabstudios.com
registry.frontdoorai.com
gargpaperindustries.com.np
www.geneinspections.com
ghostsi.de
gritclub.app
docs.homehabit.app
www.hpnwbbb.org
ianhellstrom.org
bestpractice.immodigi.app
api.incendi.io
simulatore.iniziativenergetiche.it
kadimstudios.com
secure.kens.app
dat-admin.kingofthecurve.org
letscodeapps.com
plazalowyat.macritchie.io
leagues.mahnuser.dev
www.menofmetro.com
dap.mestergruppen.cloud
modeling-snap.com
share.mysmartplatform.ai
admin.nafeesapp.com
inventory.niceloop.com
app.noticeable.io
api.panl.co
sallemni.parceltracer.app
parthpadhiyar.com
link-dev.picso.ai
pincard.ie
app.pixlyn.me
plia.earth
prepyourphd.com
prismatic.org
protung.de
ramendrakumar.in
qs.redsols.us
rising-ent.jp
www.sanierung-hamburg.com
www.sanierung-hh.com
sc01.scalecloud.jp
www.scand-inab.se
seedforgood.fr
seriously.fail
infosindical.sistemafaeg.org.br
dev-examai.skillupai.com
kzaqrp2tguutcb5y87yo.smartimob.io
socialklick.com
dev.srdanstanic.com
ssalonpick.com
staigr.me
stepbystepcare.qa
theakashigroup.com
themurphywedding.net
dallas.truthlypro.com
uikore.com
vigor-witaminy.com.pl
agile.wanax.com
apps.weberlolz.tw
www.webspacein.com
dashboard.wizzapp.com
wsfenterprises.mom
hostifi.yac.com
link.yodo.ch
yogidigitalservice.com
Other domains in certificate