Open
Cached
·
3h ago
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=kharon.es
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 01, 2026
Valid Until
June 30, 2026
56 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DA:ED:22:63:71:93:72:F0:64:F8:62:C0:82:15:9D:7F:C3:35:EB:0E:DA:83:D3:7F:14:2C:D2:44:FC:55:7F:29
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
kuranchat.com
www.abuelink.cl
www.aircutt.com
akhtarandsons.store
aminmarblepolish.com
www.aminmarblepolish.com
www.arbeitskraftdeutschland.de
bb-experte.de
www.bb-experte.de
bcwsolicitors.com
bein-formed.info
bizwizhub.com
admin.carrio.qa
carrio.qa
cdjholdings.surf
www.cdjholdings.surf
auth.cliqs.app
www.codhub.ro
costkey.dev
gateway.craft-pixel.in
next.date-fns.org
beercreator.djupfeldt.se
droptaxioneways.com
drusitec.com
drusitec.es
www.eastbridge.co.in
eatrhsweet.live
www.farmaciasettimomiglio.it
fimnews.live
fushaco.biz
gccgamblers.com
beta.gentlegrove.id
scadmira.gfoehl.at
www.scadmira.gfoehl.at
goldagent.co.za
hal.net.tr
infty.it
servis.ios.edu.rs
juliiasolodova.com
junaidjamshed.website
kharon.es
khell-impressions.com
leads.leadonist.com
ledosolar.ro
lflonsdc.lat
lisseni.com
www.lmit.in
www.lunadairyfarms.com
messagingstudio.com
www.milduragrand.com.au
archive.misl.org
mlelieveld.com
www.mlelieveld.com
mnemonio.com
mylet.in
www.nikuinternet.com
nurxian.site
app.oikuramemo.com
dashboard.omnifit.in
app.orderease.show
app.staging.orderease.show
www.orvynhq.com
app.patellers.nl
peere.network
app.pollenair.com
priesto.in
monirmobilelab.pro.bd
app.proprio.com.au
www.qwikspeedtest.com
rajdentalcare.com
reachsolevo.com
www.reachsolevo.com
reachstepix.com
www.realtime.nu
regelife.bio
joycove.reinf0rce.com
roboserve.ai
www.royaladventures.in
academy.salarybox.in
www.sipet.com.mx
shoebox.sjc.co.za
www.sparkhousedevo.org
sprzedamgastronomie.pl
www.stonebravooutpost.com
www.storyhouseagency.in
studiodeyogavajrapani.com.br
sweetlivinghomes.co.ke
tiethegifts.com
meshi.try20.jp
www.ublegend.com
www.unverhub.com
www.usa-mimi.jp
www.visiomatix.in
worlddisciplinaryfoundation.com
xabreo.com
www.xup.cat
xup.cat
www.yarktech.in
www.yosergio.app
zahida.web.id
Other domains in certificate