Open
Cached
·
just now
86/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=ieltsvocabulary.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5A:5A:8D:05:4E:4B:1B:51:86:71:E0:22:6B:6D:24:BE:87:1C:FF:48:F0:DC:CC:CA:1D:2C:03:4C:28:88:8F:3F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
luminousd.top
1rtcomcorp.com
www.allmostme.com
ampaly.com
www.apacitalliance.com
arenaeducation.org
aroha-health.com
use.atpos.net
beetel.xyz
returns.bigblue.co
webostv.blackdove.io
www.bossbeagle1509.dev
dashboard.boulou.energy
www.centralspark.rest
link.clarodrive.com
clockworks.tech
app.cozy-house.jp
auth.curipi.com
api.czulo.pl
darkoriginsoftware.com
deltavel.com
www.dipyourtrip.com
dreamink.app
deeplink.earthchain.ch
elefy.com.br
entitybible.com
fiftyone.app
staging.app.flutterlocalisation.com
a09o.foodle.su
gdsc.app
globalcreativeawards.com
globalservis.id
www.guanyi.lat
devs.healthid.ai
www.hetmane.shop
www.horixons.com
buzzbingo.ics-digital.com
icss.lk
ieltsvocabulary.app
spartansdubaisouth.impactwrap.com
auth.incdecentral.com
cvforge.iplaydigital.com
izakaya-odashi.com
jackvm.com
jamynimport.com.br
www.johnnyplay.com
kalary.kr
www.koopoong.com
pet-playground.kreatewebsites.com
ksji-hse.org
www.lamaisonrecla.com
lcassessor.app
matyas.lefeyer.fr
care.lifemd.com
www.lionsbayconsulting.com
link.locusmap.app
auth.lubkita.com
docs.luminafeel.net
manuel-dasilva.dev
memeplex.app
cloudastienda.mimenu.lat
navyak.org
pic-rhino.mentor.neccton.com
nikao.tech
omnicarplay.us
www.openstillness.com
pearlbea.com
www.pgmet-cnc.pl
pirogforbeaverton.com
www.proshooters.app
www.ifc.qd.je
demo.reveknew.app
rowleyplumbinginc.com
rwouad.com
ryansmithdev.com
sakewiz.com
samueltroyer.com
www.sayonara-monotone.info
staging.aftersales.scinnova.com.ph
norwich.scouthub.app
www.selariaflorencio.com.br
www.serein.dev
links.splitpal.io
starterplus.net
referral.startingfinance.app
www.stickerworld.shop
dashboard.sunshinestarts.com
svtv.app
tbag.co.za
www.the-alchemist.com.au
thecodingsoup.com
timesplit.app
firebase.torifuku-kaiou.app
docs.tourlife.rocks
app.trustmile.co
umind.live
usepostr.app
www.ventis.ng
www.voxion.ru
app.zippyengine.com
Other domains in certificate