Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.sanjsobatisevalay.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 30, 2026
Valid Until
October 28, 2026
66 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F8:95:74:6D:1A:1F:9C:93:4F:C7:4A:A1:FB:0A:07:18:08:3C:4E:87:F7:E7:30:54:E1:55:68:B7:7A:C9:6A:F5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
intostory.kr
wichitabuildingsupplies.afetteknolojileri.com
www.alexespenshade.com
www.all-in-solutions.ai
ares.today
assetmkt.com.br
convidados.baconique.com.br
bassment.co.jp
portfolio.bgoktugozdemir.net
login.binxly.net
oznamenie.budetoslayada.sk
coordinator.businessenergyawards.ie
bartender.checkson.me
pay.checkson.me
confcar.com
teamtexting.cvstech.com
ddcai.dadoucloud.ovh
draftnode.in
auth.duefield.com
earlyacre.com
econbg.com
desdecasa.edad.tech
www.evnnovator.com
app.fantauzivanta.si
www.firstrillionaire.com
fleetbot.ai
gamesalotl.autos
www.gamesalotl.autos
gestionas.pe
kurumsal.getluvu.com
www.gmabogadostenerife.es
segurapp-staging.guarnic.com
iamidae.com
inertialwork.co.jp
intellectura.com.br
news.italkbb.ca
kichaibd.shop
www.krepska.com
softballslugfest.leaguesquare.com
firebeta.lightspearstudios.com
work.mcaststudio.com
mepsnehtaur.com
dicegame.mikelkamel.com
www.mindmatch.world
auth.mintvalt.com
missionekcrore.com
test1.mojetipovacka.cz
hub.multielectro.com
mychores.website
go.mydailydiscovery.com
nashvillelessons.com
nathan-wu.com
ops.nivesheasy.com
ondevoto.com
prompt.pikanet.pateldhvani.com
ps.peopleofthe.cloud
app.plenahealth.com.br
forms.plenahealth.com.br
pontofire.com.br
pricemirror.in
casadosfiltrosto.app.refiltek.com.br
softparaiba.app.refiltek.com.br
www.revolucaosolar.com.br
piloto.casino-uc.rflex.io
ricktaxi.be
rundevsolutions.com
www.sanjsobatisevalay.com
sandbox.rpc.sauvara.com
www.serflyzone.it
sergiosapps.com
smartspacio3d.com
solveint.com
ststudio.pe.kr
www.ststudio.pe.kr
superpizzavilareal.pt
www.superpizzavilareal.pt
www.synapticweave.com
syokuin-junbishitsu.jp
taksi.ltd
www.talentocuidado.com.ar
tebibc.com
www.techyspot.in
www.fall-stage.telehearportal.com
www.terre-et-flamme.fr
kick-check.theconcretegrp.com
auth.thepeptified.com
todorov.co
www.todorov.co
intranet.tracos.com.br
trainingplay.ru
trepez.com
vchat.trinayai.com
tuyero.com
uares.com.br
auth.voltlane.app
warblink.com
wqems.eu
emotee.xeldust.com
yourtable.in
painel.zayra.app
Other domains in certificate