Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=boxingcentertoulouse.impactwrap.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 17, 2026
Valid Until
November 15, 2026
65 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A8:CF:FE:C5:A2:B4:63:DB:B8:DE:DC:A8:71:66:6A:34:28:31:C7:65:5E:50:6C:A2:20:71:49:16:63:F2:23:7F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
joinwellnex.com
www.agatestudios.com
agrophyl.com
nobel.alpwcm.com
www.altajir.li
ardyghoorchian.com
athlenergy.de
avi.automatadg.com
beatspace.app
www.beed-app.com
app.betologik.com
bfgm.eu
console.billett.no
www.brightenergy.com
christianlopezcarretero.com
www.codeguppy.com
storingsmelding.gcp.connectcare.nl
app.corretoraideal.com.br
createbotaiagent.com
www.danielpatnode.me
propiedadesalbanecich.dataprop.cl
drinkhappy.app
www.ecocropglobal.com
egalanis.gr
www.egalanis.gr
ekhtaberni.com
www.escaladaterapeutica.es
evenca.es
link.curveup.expertrepublic.com
fencinghub.net.au
fhqm.ai
link.fondeadora.app
friendcasts.net
admin.glassoflearning.com
glime.app
www.globaledgeuk.com
soe.gnkitm.ac.in
staging.golden-ratio-united.com
app.growithai.in
www.habitdaily.app
staging.tinylog.iandco.com
admin-steamhub.idealabkids.com
wiki.igrovoystol.com
boxingcentertoulouse.impactwrap.com
jabboxingyavne.impactwrap.com
resume.it4b.in
www.itqan.app
joslin.fr
www.learn.ci
www.levincouleaflo.com
lfconnect.net
auth.dokovisitor-dev.lo-beam.com
chortle.lorintackett.com
lucident.app
farmlands.beta.m2x.app
memesmachine.app
www.mimzy.co.in
app.minpokei.com
www.mykos.app
suggest-demo.naughie.com
www.nawalgroup.in
recipeas.nexus-forpeople.com
nma-bankruptcy.com
novisiq.com
novuaplatform.com
dash.osfe.art
www.pensioeni3groep.nl
pn2.app
praxisagencies.com
pushups.no
guestlist-backoffice.qeerio.com
www.referfire.com
reskillmax.ai
orders.staging.restoplus.com
ryandea.me
www.scontipage.com
shiningstarsperformingarts.org
app-live-score.smartcricket.com
pwa.smellslikeart.org
adisyon.songulekici.com
workspace.sovereignhq.cloud
adnetwork.spaceeight.net
sslmalta.com
dashboard.rfh.strass-app.com
admin.styreportalen.no
barcode.t-express.us
verne.tocodev.com
aliados.tonelaje.com
live.ultrastark.ch
dev.undock.com
www.upendocares.com
auth.upfeel.com
www.vzz.me
answers.wavatec.fr
www.wedotranslate.me
www.westalbilling.com
www.whizzytales.com
wisdomtreasure.buzz
workdays.app
zmix.org
Other domains in certificate