Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=consumer-frontend.staging.hasselt.delcom.nl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 11, 2026
Valid Until
November 09, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CD:D5:97:A6:97:B0:53:78:47:5D:BD:30:A9:44:96:C3:08:86:DC:0A:20:8C:24:AF:A2:BC:50:0C:02:4B:04:F1
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
joinpie.app
adityamittal.app
banktest.alexfung.info
alfa-clean.info
www.asrisapari.com
www.astrocolt.com
bellaveda.org
berkstech.club
www.bobestyrer.no
brainclix.app
brendondugan.com
app.buddybites.be
stories.captureinnovation.se
carvosh.in
app.cashwise.finance
avalon.cidwarelabs.com
dev-pro.colavosalon.com
www.constructoramejia.com
col.cosul-bunicii.ro
culture.systems
link.daifukuyuso.com
www.dasboard55smarthotel.com.br
www.dascorp.ec
www.davidmendoza.org
consumer-frontend.staging.hasselt.delcom.nl
www.deseur.com
designfulltime.com
www.dontileplumbing.com
casa505.edsys.com.br
krq.emallstudio.com
ev2hand.co
www.facillitamix.com.br
a094.foodle.su
fridaydd.com
funxtion-svt.com
link.getkidcard.com
odoo.gets.cloud
gfisher.net
globallinkpharmacy.com
paypalsuccess.grandeurnoiretv.com
hasininb.com
haushofer-photography.de
www.henrymarkarian.com
www.hoxbycollective.com
www.huatluckn.at
www.jamesfergusonrigging.co.uk
www.juweliershuishenkbraam.nl
www.kardiowerkstatt.de
chat.karlachat.com
kcobj.com
nclex-admin.kingofthecurve.org
konnexion.co.kr
www.lacashora.com
www.lboap.com
www.likecomunicacion.com
lilisintelligencestudio.io
service.logmate.se
lordanco.uk
mamelli.ca
marjanwithibrahim.com
connect.medilit.com
michalmlejnek.cz
auth.koo.mintyapps.pl
tarjetas.mirinconcreativo.com.mx
shopfloor.tvat.motivate.nl
localbrackets.mrigank.in
mywifestamales.com
nekomi.app
www.newfamilyfarms.com
www.nexusprovas.com.br
officinacivica.com
recipes.pdxgrantc.com
pietroncello.com
apidoc.porsevej.dk
fbtest.preinfalk.me
remy-ranger.raveon.fr
app.rentor.ru
www.reparatuapplecol.com
www.rhodescre.com
rino.kz
www.sb24.co.kr
servizifunebrigrasso.it
form.sk-global.biz
presentacion.condoadmin.soport.site
cisssbsl.spaq.com
storepin-dev.de
gamificacao.targetmultimidia.com.br
tayyabpharmacy.com
www.shadow.terrific.live
www.thecolorfulcase.com
www.panel.thegentlemanstudio.com
admin.theorytest.im
topphukien.com
softsoulsfoundry.umd.edu
kris.undefined.wtf
vmathieu.fr
admin-labs.yodo.ch
www.yospanish.com.au
www.zajicova.com
zlatna-gora.com
Other domains in certificate