Open
Cached
·
just now
85/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=honest-scoop.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 29, 2026
Valid Until
October 27, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
23:24:C0:0D:D3:3E:41:3C:80:6C:2D:43:E8:CE:2C:AC:03:99:5D:76:6B:34:32:DA:30:60:69:02:BC:E2:FC:9C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Present
camera=(), microphone=(), geolocation=()
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
knasoftware.com
talentkaki.aimalaysiakaki.com
aleksandraszwedo.com
analiticaseguridad.com
www.arts-fluence.com
raja88.autopartout.com
pipo.barbizo.com
barbourvillefumc.com
bo.barbrick.com
bhejjo.com
billbeacham.ca
2627.breilan.no
www.buddhistische-praxis-gemeinschaft.de
chordmastertrainer.com
commsconnected.com.au
danielmatei.dev
www.danielmatei.dev
report.deliveryman.co
ui.devmrtnv.ru
digisociety.in
dinamed.cz
spsignup.eemerg.com
enma75.vip
esterotech.com.ar
vcash.finanzero360.com
fruitcom.co.za
getming.com.ng
getprotract.com
gestpro.groupeamani.ci
haddadi.ca
www.haddadi.ca
hktradetech.com
honest-scoop.com
bssa-auth.ibep-staging.com
suriname-auth.ibep-test.com
incapturing.co.za
integrityairandheatingsolutions.com
www.ipboavista.com
isabellafreitasarquitetura.com
www.isabellafreitasarquitetura.com
filmtrick.jimsfilms.com
jsginternational.com
kadmarketingsolutions.com
keola.dev
leaflog.info
charchat.leonardolemos.dev
ligadebarra.com.br
fb-demo.liveb4buy.com
pepsico-food.logivan.com
macoapp.es
margadeshaka.com
matterwardlabs.com
auth.microtrends.org
misenterprise.lol
mosaicndi.com
motimhahl.shop
www.moto4rent.lv
mycheapapartments.com
www.myenglishprep.com
www.nd-grid.au
neonblobbattle.com
foto.nsbp.dk
cash.odevtech.com.br
parrotinsights.com
pedroalvarezfernandez.com
www.pethealthkit.app
www.phaedracharles.com
phaseapps.com
www.pinman.hair
plfproperty.lol
www.plfproperty.lol
meetings.pockt.com.au
halo.poligontech.com
dossier.quelatierraseaelparaiso.com.ar
quequieres.ai
ralabiz.info
refing.id
relaykey.app
naot.retailnexus.co.il
app-dev.ca.setkeeper.revolutiones.org
staging.rostanza.com
www.saveme.bg
solidacarclub.com
www.solidacarclub.com
www.staggerdigitalmotorsports.com
steticdentalcare.com
auth.tafitaribhi.com
www.tcomapts.com
www.tfginnovations.co.za
the-developer.co.za
thedotsjets.com
www.thedotsjets.com
auth.trading2grow.in
travel-luke.com.ar
vaurallc.com
vq-sys.com
vtrexports.com
app.vwws.io
yildizkoprusuanaokulu.com
hayabusa.zweispace.com
Other domains in certificate