Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=claritytravelnexus.live
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 06, 2026
Valid Until
September 04, 2026
75 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DB:78:C1:F6:BE:96:B1:80:CF:E4:D5:08:CA:62:CE:C0:2B:26:39:AA:D5:C5:D6:53:8B:01:31:43:AF:4F:FB:44
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
turnpal.com
*.turnpal.com
bbfgo.work
*.bbfgo.work
bom888vip.com
*.bom888vip.com
bruceboltsale.com
*.bruceboltsale.com
business-courses-in.today
*.business-courses-in.today
car-in9.today
*.car-in9.today
caregiversjobs.sbs
*.caregiversjobs.sbs
claritytravelnexus.live
*.claritytravelnexus.live
clarivisionz.info
*.clarivisionz.info
cleaning-services-near-me-aus.sbs
*.cleaning-services-near-me-aus.sbs
cloudtonic.xyz
*.cloudtonic.xyz
cvhys.work
*.cvhys.work
dollarz.com
*.dollarz.com
e-scooter-ro-2025.today
*.e-scooter-ro-2025.today
environs.xyz
*.environs.xyz
excavator-ind.today
*.excavator-ind.today
explorejplaw.info
*.explorejplaw.info
fleursdhivers.com
*.fleursdhivers.com
funeral-cremation-jp.top
*.funeral-cremation-jp.top
fur-in4.today
*.fur-in4.today
gadgetnest.sbs
*.gadgetnest.sbs
gate.mobi
*.gate.mobi
get-brandifycrew.com
*.get-brandifycrew.com
gulyqe.pro
*.gulyqe.pro
hr-outsourcing-services-gb-ar.sbs
*.hr-outsourcing-services-gb-ar.sbs
iigncinsurance.com
*.iigncinsurance.com
in-dent-dentistry-vn-01.xyz
*.in-dent-dentistry-vn-01.xyz
integratepulsepostai.com
*.integratepulsepostai.com
main28cdn604.xyz
*.main28cdn604.xyz
medsservice247.life
*.medsservice247.life
nursing-degrees-ind.today
*.nursing-degrees-ind.today
nz8gi2.sbs
*.nz8gi2.sbs
openclaritygrid.xyz
*.openclaritygrid.xyz
ouroneworld.org
*.ouroneworld.org
outreachrentalsde.com
*.outreachrentalsde.com
portlandsewerrepair.com
*.portlandsewerrepair.com
poverty.clothing
*.poverty.clothing
publicityforgood.net
*.publicityforgood.net
qoqee.work
*.qoqee.work
rerrr.work
*.rerrr.work
restaurantzilla.com
*.restaurantzilla.com
rete978.sbs
*.rete978.sbs
rl49nu.my
*.rl49nu.my
solar-panel-installation-de-de.sbs
*.solar-panel-installation-de-de.sbs
tigerx1.com
*.tigerx1.com
Other domains in certificate