Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.slotonlineindonesia.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026
72 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
97:06:12:E8:3D:34:D9:49:69:D0:7D:9E:20:1D:93:D1:BE:2B:BB:EE:4F:5B:94:65:32:1B:06:6B:49:D0:82:FD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
halilyucer.com
ahrutech.com
www.atrapaelgift.es
staging-client.autonomya.fr
bartlomiejswierad.dev
belmontrunners.com
bio.bikestorebrasil.com.br
bitdefndraccount.com
boatersbaysg.com
bmoji.boo.chat
burn.dev
cardinalstepinacawards.com
chidube.com
bg.choshg.com
nakedlukas.clau.io
commutesaverev.com
blog.conomy.dev
app.contract-as-code.com
staging.docs.contract-as-code.com
coreimmersiveacademy.org
customtrove.com
www.datafolio.net
daysolenergy.com
lexsalgado.devbug.dev
www.dinamicaenlinea.com
tippspiel.domaehne.com
www.dominiondefensetech.com
dritsupport.com
droptaxivellore.in
www.durkal-surl.com
ethanalanbarnett.com
dev-app.golaxis.com
www.golfclubeventos.com.ar
growthfinsolutions.com
developer.hapihub.com
www.haul.club
hostmind.agency
mensa.igtcode.com
inaptic.com
nathaly.invigt.com
istdeveloper.com
blasfemia.itesa.ar
jaivikpots.in
www.javier.cl
www.kalpaccounting.com
keyfun.xyz
www.kimishaluxe.com
konkarin.photo
l5l3.cz
pharma.lapachoit.com
www.madrassti.fr
maskmedia.se
www.mhg-group.com
preview.mitemma.de
www.mouhssine.click
cms.muhriz.com
gassendi-le-relais.musartdeurs.com
nisea.co
oposicionesinformaticos.es
ups.optimum-transfer.hr
oxtxo.com
www.oxtxo.com
pgtf.pk
positorstudio.com
prakharsinghdhaila.in
www.protify.io
www.rah-group.com
app.rakiline.eu
realing.app
recordia-dre.cymru
redsailsoftware.com
app.reflex.cz
lfm.ronenjain.com
rouadiminetii.md
www.ryuzo.com.br
www.slotonlineindonesia.co
soluapp.com
sp4cew4lk4.net
babar.stemeye.com
alpha.app.sukarm.net
bodafloresmolina.swanmoments.lat
www.tanzraume.com
wpdemo.tason.com
teachersuite.online
telescaitconsulting.com
apptest.texolenergies.com
thedutchuncle.io
thegamer20081.top
appclip.theproductroadmap.co
burger-builder.thewordisbird.dev
timesla.app
www.toucanet.fr
my.wanderoo.it
weishuntrade.buzz
wewelcomeall.net
www.writeright.com.tw
www.yeeheng-foundation.com
yellowpizzas.com.br
yukke.dev
www.zensw.com
Other domains in certificate