Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=sonphan06.id.vn
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 27, 2026
Valid Until
November 25, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B7:D7:9F:4C:92:32:9A:1D:3E:81:85:82:85:19:2A:9D:AA:7B:E7:59:E8:8C:DF:98:A1:5F:7A:91:87:3C:51:17
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
marcelinfast.com
auth.abdomedi.com
agalabs.net
cate.andreagiulianigarden.it
angul.ai
testen.apollo.ai
www.arole.jp
atportfolio.online
bandagarasi.com
mybls.belgiumlimousineservices.be
besttriplea.com
app.blockmap.dev
lessonlog.ckarch.kr
app.dealsign.ai
www.dna-coding.com
birthday.tsthai.dstteam.com
www.dzoaccess.es
lana.edolabs.dev
eventos.api.br
everlyqr.com
giltrip.kr
www.globaldealhunt.com
www.gpclinicgroup.com.au
handynest.us
hedef.agency
www.heexsah.com
coswara.iisc.ac.in
ilovedrones.shop
intellabizz.com
portal-eci-qa.inter.mx
mayafert.jbconsultor.net
jsonviewerr.com
www.kerron.dev
www.klaaslandsman.nl
lawofficeofsyns.com
info.lealklub.gt
www.info.lealklub.gt
alpha.letjob.net
maixing.lol
app.mypropguard.co.uk
www.myunion.us
www.nation04.sg
mvp.ndexio.com
nexopine.com
lobby.no1math.com
noleggioincloud.app
oanacozycandles.com
okulskor.com
ownrange.com
www.parkyonet.com
pittsburgh-ai.com
auth.player2niteroi.com
www.pliconsulting.it
mahjong.potatopg.com
prajak.com
www.pratobrasileiro.com.br
www.presentpals.com
ribiskus.com
www.rtxperience.com
www.rxbillingsolutions.com
www.saberframes.com
sandboxdc.space
seaflowershell.com
pokreg.seggev.xyz
www.serisync.com
sintergic.ai
auth.smartapartments.ro
socratesgames.com
www.sonicrocket.be
sonphan06.id.vn
www.sourcessolar.com.br
speakmeettravel.com
www.speakmeettravel.com
pepsiccarolinascratchadmin.sqwadhq.com
srmmill.com
zotto.sskplay.com
streamotion.app
app.styleforce.in
app.tankai.in
www.taxi-oka.fr
teslabatteryfailure.com
thanhdoan.id.vn
one8commune.thediners.in
thesisalpha.com
thewayofscripture.com
mirai.thruffle.cz
www.timeceramicsbajio.com
link.timetrek.co.kr
trishtrash.app
trustnursery.com
www.vaibhavsathe.in
viadoexperience.com
viago.cl
vnkmns.com.br
wepic.co.kr
wfm-pro.com
wilson-trading.com
wouldcoin.meme
yunabite.ai
zerobroker.net
Other domains in certificate