Open
Cached
·
just now
95/100
SECURITY SCORE
Detected Technologies
Gravatar
LinkedIn
Google Trust
AWS CloudFront
Google AdSense
Chili Piper
IPinfo
Google Tag Manager
Bing
G2
SalesLoft
Google Hosted Libraries
AppNexus (Xandr)
Active incidents
PartnerStack
Fullstory
Reddit
Comeet
HubSpot Forms
Capterra
Azure Blob Storage
Google DoubleClick
Google Analytics
Microsoft Advertising
Google Conversion Tracking
Google Static File Front End
TikTok Analytics
Google Fonts
Wistia
Twitter
Cloudflare Web Analytics
Stripe
HubSpot Analytics
unpkg
Lottie Player
TrustRadius
Google Search
Navattic
Facebook
Amazon S3
Impartner
OneTrust
GitHub
Adobe Fonts (Typekit)
Cloudflare CDNJS
Taboola
Vimeo
TrustArc
ipify
Akamai
HubSpot
Intercom
Quora
YouTube
The Trade Desk
Microsoft Clarity
HubSpot Live Chat
Sentry
jsDelivr
Google Cloud
Google Cloud Storage
Certificate Information
Subject
CN=lusha.com
Issuer
C=US, O=Google Trust Services, CN=WE1
Valid From
March 23, 2026
Valid Until
June 21, 2026
54 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA256
SHA-256 Fingerprint
0B:0E:31:28:7E:79:4F:44:04:AD:CA:72:C8:90:D2:7F:7F:E9:A4:64:14:B2:F6:76:0E:9E:BB:56:D6:DF:D8:92
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Good
max-age=31536000; includeSubDomains
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
no-referrer-when-downgrade
Permissions-Policy
Present
accelerometer=(), camera=(), geolocation=(); +5 more
Recommendations
- • Consider adding 'preload' to HSTS for maximum security
- • Improve CSP by adding more specific directives and removing 'unsafe-inline'
CAA Records (Certificate Authority Authorization)
CAA Records
Configured
(Restricts certificate issuance)
Current Issuer
Authorized
(Matches CAA policy)
Recommendations
- • Consider using critical flag (flags=128) for stricter CAA enforcement
- • You have authorized 8 CAs - consider limiting to only the CAs you actively use
- • Consider adding 'iodef' records to receive notifications about unauthorized certificate issuance attempts