Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=heck-corp.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 20, 2026
Valid Until
October 18, 2026
73 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F8:3D:E0:3F:40:C6:86:92:50:A3:3C:2B:08:84:D8:92:70:39:1A:D2:BF:3A:39:EB:EA:17:1A:65:D2:F1:C8:99
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
heck-corp.com
www.heck-corp.com
stock.akeno.in
patija.aq1.co
www.arcaestgames.surf
attendus.app
www.attendus.app
aviaryos.com
www.aviaryos.com
apiv2.beerpassclub.com.br
blackpepperswing.fi
www.blessedhandsministries.com
budynco.com
comunicazione.calvera.app
casadosaplicativos.com.br
stage.cendra.ai
stg.cinemaflash.jp
www.codestasher.com
www.clearnex.corenex-solutions.com
link.crime-cases.de
dandelia.io
www.dandelia.io
sheetmancer.digirunestudios.com
donjonsetdefinitions.fr
doripropiedades.com
www.dublikat77.ru
engineer.guide
enterseg.com.br
app.feb30beautysalon.com
feb30beautysalon.com
www.florafarming.in
fridgenotes.cc
www.fridgenotes.cc
www.ggyc.com
gpsakhi.in
grcbuddy.app
portfolio.harkerhack.com
harucode.jp
auth.hiraxu.com
w.hmb.kz
homebuildbuddy.com
services.hoosierplumb.com
www.infarfa.fr
inspiracaodefe.dpdns.org
www.jakabi-pitypangovi.hu
jkonecny.com
www.kalkanpad.com
samepage.kirbybach.me
pos.kyzpay.fr
kz-beta.pp.ua
www.leelauwestvan.ca
www.leelauwestvan.com
linguo.ge
mapalus-smatoka.site
www.midknitemagazine.com
myplate.site
www.myplate.site
www.navetteestrie.com
deceptor.nidlystudios.com
www.paardpas.nl
paha.ph
auth.placepledge.com
www.playbooksutton.ca
podcastclipmaker.com
www.podcastclipmaker.com
prestijinsaat.az
radiocpi.com
www.raed.ws
roostsleep.app
tokaen.saidan.cloud
app.dev.santoid.com.br
hckhote.sapinetra.com
monitoring-dev1.vks.secom.jp
www.senoltemur.de
seresolar.com
shueki-calendar.com
budget.sojka.cloud
www.sozy.tw
audioshu.spaikz.com
titano.suprun.ca
www.syftwarelda.com
www.tamilkaalam.com
www.taskopruadab.com
www.theravenlegacyproject.org
tonalpath.com
www.tonalpath.com
towflows.com
www.troto.co
trunecek.com
www.trunecek.com
tuodonto.fit
admin.unipla.eu
veterinarioraiz.com
www.vianapoli19.fr
vietduchaithuong.com
www.vietduchaithuong.com
www.whatifreadingcircle.com
board.x-logic.net
ynotconsultancy.com
zafirotours.vip
Other domains in certificate