Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.highre.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 16, 2026
Valid Until
October 14, 2026
57 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
13:ED:9B:E3:FF:F6:22:BC:00:57:1B:82:7E:7D:6E:0E:E4:70:CC:ED:8A:4B:97:3A:FB:FD:5D:2C:C9:EB:61:7A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
internal-admin.eshyft.com
internal-fm.eshyft.com
testes.acareg26.pt
alapinta.art
www.apbingo.online
www.ayivon.com
baldissera.adv.br
authgoogle.bitexs.com.br
diagnostico.bussolaone.com
www.bybroenbolig.no
cabinsstmoritz.com
www.celesta.uy
www.centrodecorredores.com
caregiver.cherutel.com
www.chipsfamiliaexplosiva.com.mx
citicar.com.ph
cl-dev.tech
marketplace.cloudhubpro.com
pictorica.croc.media
www.financials.daacpa.org
www.diceso.com
digitaldhanush.com
www.digitaldhanush.com
direqtonline.nl
www.docotekne.com
enderport.in
agency.equisaas-bd.com
www.exserac.com
filmblack.com
gettrippro.com
www.gettrippro.com
www.getwindo.app
image.gleee.in
gridtech-guinee.com
growthboost.com.br
www.haritsangli.in
retool.hi2morrowsecurities.com
www.highre.com
www.hotelledger.com.ng
www.ifd.earth
impluviumsoftware.com
phoropter.impluviumsoftware.com
www.impluviumsoftware.com
inteligenciarural.com.br
app.jhsilva.com
www.joaoferreirataxispenafiel.pt
www.justtrydream.com
payroll.lakewoodnj-dpw.org
lightmyface.com
atendimento.lysa.tech
certiblok.mabiloft.com
www.mahen.lk
www.maxtrix.in
www.meteoriconsulting.com
mirux.cat
www.mobacenter.com
mosaicelectrical.co.uk
my-riyadh.com
n.naryu.ai
www.neuroish.org
www.nextsem.online
staff.ochrelshop.com
admin.officemail.site
officemail.site
www.officemail.site
www.onvitprotocol.com
opencpd.co.uk
orc.software
paulojacomelli.com.br
admin.pezconfiable.com
phocyclochandler.com
concert.pihai0202.com
www.pilldora.com
auth.pmurray.com
app.prepu.io
primeestatesai.com
cocoa.punto.media
rachacontabr.com.br
reru.ai
www.vivekananda.rvnirmaan.com
allgest.saciate.pt
www.saloneasypro.com
sithea.com
studio-la-forge.com
www.admin.supplycoreerp.com
xvsophiaraqueno.swanmoments.lat
taxcompass.ae
aljameel.uae100.com
amshaltat.uae100.com
usernamegeneratortools.com
vertoondinamies.co.za
www.virtualstardustinteractive.com
weddenskip.frl
www.workwithprrecruitment.com
what.xla.jp
www.yakupdiricanli.com
www.yogatmastudio.com
tools.yyoga.ca
qa.zytherum.com
service.zytherum.com
Other domains in certificate