Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=test.controlplus.ai
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 09, 2026
Valid Until
November 07, 2026
80 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1E:B1:32:D8:8E:B8:1C:19:BD:E2:01:AE:39:04:22:41:2D:1C:4B:D2:24:03:3A:2A:F7:1B:6A:1B:81:9C:B1:80
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
inavi.ge
www.inavi.ge
aerstore.in
airotor.in
informationsecurity.analyticacore.co.uk
aurexmine.com
badlevier.fr
app.bayat-catering.tech
beeyestravels.in
www.beeyestravels.in
staging.donut.benguelacollection.com
www.benjnz.com
www.bgit.hu
bmvtattoo.es
boardnest.dk
buraksenturk.net
www.codelov.com
www.colmena.pa
test.controlplus.ai
crossthebridge.com.mx
dailystories.fr
reaplayer.disign.tv
play.easyarcade.net
emchrisengineering.ng
sleepmask.entertech.cn
famitry.in
app.fanatics.cr
feetwedding.uk
genuinedatasms.in
songle.gwnayden.nl
www.halalliving.info
esodoc.htsolution.sk
h9hud.podb.incentable.com
auth.indiapolls.com
intellimesh.net
iwish.you
www.iws-digital.de
ixchel.io
kingdomoflightinnovations.tech
kitudoflavours.com.au
admin.konnektdigital.space
demo.layersmade.com
www.lenn.ie
www.lioraxis.com
lorysvoley.online
lytho.co.in
manati.jp
matildahaneling.se
www.medaxperts.de
documentation.motapi.com
www.nickgaroufalis.com
nunu.li
scrumpoker.oakraw.com
visit.omnevu.com
ordjakten.com
party-ti.me
percepta.group
www.pixcelrox.com
playpitchonline.com
powerhousefitness.app
prateekshagk.in
prestfacilapp.com.br
order-staging.pubq.se
purewaveapps.com
mitest.quikpago.com
qwikqrcode.com
www.qwikqrcode.com
app.radenhor.com
www.rapiddimension.com
clientes.reclamalia.com
reyespizza.mx
india.rocksmart.in
lp.roomwith.jp
auth.savebasket.com
scholarshipslens.com
score-counter.com
shaylahisawesome.com
shibinshetty.com
www.shibinshetty.com
www.shoppingtech.shop
www.smaugblog.com
snanipro.fr
solsticediary.com
sonivo.ro
spartafitness.lk
www.spindl.in
2020.subaruquiz.com
tada.vote
taycanai.com
theheadfamily.com
admin.tieupfreelance.com
deeplink.tinychef.ai
www.tnydwrds.me
app.todozero.com
www.trenzix.com
wangee.in
webrezosolutions.com
www.xai-demo.de
youf.one
zingcabs.com
Other domains in certificate