Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=mugsdn.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 26, 2026
Valid Until
October 24, 2026
72 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
08:55:33:BA:45:E8:4B:79:83:B6:EC:FC:94:5C:4B:51:64:40:87:A4:E3:DC:12:00:DB:91:B6:40:B9:FD:8D:6A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
hornvin.com
static.9232.work
www.absoluteresorts.menu
adamklimiuk.com
ai.vu
anhct.id.vn
appycloud.fr
arthurjrutledge.com
autoecolebouharat.com
www.orientile.bmgomg.com
staging.app.botio.io
bridgewapp.com
mobilog.console.bringoz.com
bullantapps.com
canlyai.com
casa-arroyo-blanco.com
www.castorena.us
catzboatclub.co.uk
cestaurbana.com
cherrycrispgames.com
basic.chocopython.org
christopherogdenfilms.com
aura.cloudanvil.net
git.codebase.org
watchit.cubequpe.de
bestellen.dalalo-bottrop.de
app.deventor.io
www.dhresen.de
digitalnerds.io
xlab.dispatch.digital
www.dsanco.com
dubreach.com
online.edumapcollege.co.za
engineroom-ai.com
fabianmebus.com
beta.developers.finqware.com
recruitment.flairboat.com
fntauto.com
galileogiordano.com
portal.h460.org
halaszadam.sk
kyoninka.hatakeyama-office.co.jp
herttatalot.fi
www.ilshincorp13.co.kr
staging.imaginakids.com.br
www.img.tips
swan-driverportal-test2.ingogodev.net
open.iproov.app
kaazl.com
ljsnconnect.com
locali-app.de
lpadgroup.com
lukumadesigns.com
ios-support.luvzy.mobi
app.meetvolley.com
www.momsandtots.biz
mooflux.com
m.mozaic.earth
mugsdn.de
mundolytala.com.br
auth.mysdg.info
rpgassist.nexus-forpeople.com
nikazhvu.in
odrstatus.com
hitachienergy.parkalot.io
switch.playground.xyz
www.playvj.com
staging.prosperme.in
link.psiu.mobi
streetbangkokpigalle.order.pulp.eu
quicknet.club
ruta.ba
chess.sberbom.com
www.sdvx.net
segurlock24.com
www.segurlock24.com
seniorvigil.com
shuo.jp
www.simms.dev
app.skonnect.io
smokeyloops.com
sombrasdeduvida.com
app.ss.hr
streetshops.co.uk
starlynx-test.team-tristar.com
thecommonfront.com
app.thematical.com
app.thrivey.co
a.trackconnect.net
admin.app.tripp.com
troop370concord.org
ubihex.com
dev-mobile.vitafyhealth.com
vsude.org
trainer.we-workout.life
www.woningwaardekaart.nl
www.wordofhope.tv
xfactortechnologies.com
tier.ygotools.com
www.zeeshanaamir.com
Other domains in certificate