Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=sonitrace.de
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 07, 2026
Valid Until
November 05, 2026
83 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
99:9E:30:F0:07:60:A1:2F:A5:49:71:C7:13:6A:E7:A5:0E:15:16:72:57:F2:24:C1:7C:5B:E0:98:34:85:96:68
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
lab78.ar
mf.auth.200.ninja
support.moodpomo.abcdigital.io
public.acho.io
aklam.online
studioz.appshare.com.br
platform.archileven.com
pagelinks.atheer.dev
baceera.com
www.baceera.com
audio.birdapps.org
bluelagoonpools.in
bonjiujitsu.com
auth.casinitostage.com
old.casperzandbergen.nl
cheikh-al-rouhani.com
clothme.app
clowryai.co.uk
www.collabnow.buzz
mindnsoul-cw.confido.health
cyclopsapp.org
doctorateresa.cl
www.doctorateresa.cl
dycepher.com
www.emarsonindia.com
www.ennuestramemoria.com
epressbanca.com
ergo-straif.de
www.fame-it.net
fisiomotionlab.com
rl-dev2203.fluics.com
galleon.so
p.haoqi75.qzz.io
b.helloring.jp
www.hoptripgo.com
umich.hublee.io
hynt.co.in
imaxis.com
www.imaxis.com
arroyo.informacion.my.id
cimas.inframetric.ca
www.isaac.life
jetwashlaundry.com
www.jimmyveglounge.com
jobilo.io
jujitsuschool.net
nudismeinterdit-admin.kards.fr
kokuhaku.co.jp
kukuzaailab.com
lab78.com.ar
leonorgaetan.fr
www.linkedglobe.in
loomgrowth.co
www.loomgrowth.co
www.lorenzobertazzoni.com
lpage.my.id
video.lugal.xyz
matchbuddy.online
www.meetnow.in
mitecrodri.online
www.mkstrojkalodz.pl
musitate.com
mykaze.org
mylastweek.app
www.mylastweek.app
naeaura.com
promoboard.nikoserves.com
app.niman.com.br
nimvolt.com
onefull-ios.com.br
console.openeng.ai
docs.openeng.ai
releases.openeng.ai
cloud-mgmt-modules.cdn.fed.apps.paloaltonetworks.us
primecarecontabilidade.com.br
www.pwned.report
www.qpdauto.rest
www.qrcode.chat
rastechkorea.com
reward-lift.com
rhghosting.com
www.rhghosting.com
scafflow3d.com
auth.scan-support.com
www.selfmadeacademy.se
sonitrace.de
portal.spielgruppe.online
www.studiojjung.com
szmaragdowa10apartments.com
teuhub.com.br
science.theorygenerator.com
www.thesotergroup.com
gerencia.tiziubebidas.com
merchant.beta.trexity.com
www.unyleague.com
urbanenigma.net
www.whatsai.org
react.shopping.wubbwubb.de
search.zenda.cloud
www.zenreki.health
Other domains in certificate