Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=highlandsdigital.au
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 27, 2026
Valid Until
September 25, 2026
32 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
55:20:C8:9C:96:2B:3E:AE:E0:B3:9A:1C:E4:72:25:E4:B3:2D:1E:32:E7:5E:57:95:D0:A8:31:8D:72:1A:E2:6C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
localsort.in
919app.net
a2dglobal.co.in
ablecount.cz
partners.alloz.bio
www.arjuninteriors.com
bartrobat.com
belleacroquer.ch
blockheight.dev
bootofcortez.com
camejuanm.my.id
marketing-page-a.staging.cantaio.co.il
www.cerrajeria-chia.com
www.certificatadministratifuniv-paris13.online
www.charitonmutual.com
auth.chumpypicks.com
dev.listing.cpoassist.com
au.creatoradar.com
www.davidedet.com
degoudenschaarvilvoorde.be
dolphain.io
www.dumpndone.net
egarkom.com.sa
student.elearning-miit.space
erroltech.com
roadmap-dev.fp-cameroon.com
freekoreanclass.com
testing.funpropertyfinder.com
app.georuta.com
www.gjggreen.buzz
m.gowo.tv
gransoftware.it
groupe-ek.com
groupe1chantilly.fr
admin.grupofuturo.net
www.gudlyfmobility.com
guicheng.surf
2026.gulfcoasthomesteadingconvention.com
hagertech.dev
highlandsdigital.au
humanproof.us
rkc.imagilabs.in
www.innovi.shop
tour360.jammedroom.com
www.jnissoftware.com
auth.jobaye.com
www.josephso.org
www.junqing.rest
kdejsembyl.cz
hotdog-nothotdog.kenyesh.com
kmmpalety.pl
www.koblenz-mit-baby.de
www.leokaiser.com
login.linsny.org
luce-app.com
luxphone.hu
manharan.in
eatsonbisshop.civicsociety2.maxentwickler.site
memorablecontact.com
mapa.meurefugioconsultoria.com
www.miaedu.tech
aichef.mikeweaver.dev
app.mysquad.live
pandeck.com
preone.in
exams.qadrah.com
ratoon.co.in
ro-garden.com
routemaster.solutions
www.reunion.salem.edu
servicentr.com.mx
www.skulls-ar.store
app.smartkasse24.de
www.smilesonmillions.com
smratnani.com
pixelwarlord.southbridgemachine.com
portal.ssvcrackers.in
vindico.swapp.work
www.syndilab.org
abacus.tbun.dev
techkids.com.ng
techzaken.nl
healthshieldsg.tenfold-ai.com
app.tfmasters.com
thelegalregistry.com
theofficequest.com
notes.thevv.me
www.threemosquitos.com
tjcastleman.com
www.tjcastleman.com
www.tk69.store
brain.topdrivegroup.com
gtmx.uas.aero
amazon.viable.jp
www.wahaproperties.com
warmorbit.xyz
wsglobal.in
xiangyuer.autos
xunduan.rest
app.hustleyako.zedsystems.co.ke
Other domains in certificate