Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.smartanalysis.com.au
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 11, 2026
Valid Until
December 10, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6F:F9:5C:DC:7A:E3:A1:2B:0C:6C:74:AA:C7:2D:C1:B0:FA:7C:C4:33:96:F7:3E:33:3A:58:32:F8:E3:8E:FB:93
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
muolaconsulting.com
rh360.preprod.1st.com
abigaillo.com
www.aboshconsulting.com
adrianmilandscaping.com
www.adrianmilandscaping.com
akademiakupunktursurabaya.my.id
almogem.com
frendia.nation.appnet.in
www.areuglobe.com
www.ashiqmuhammed.com
askpetbutler.com
digital-signage-api-staging.axiossoft.com
digital-signage-console-staging.axiossoft.com
digital-signage-fleet-staging.axiossoft.com
digital-signage-staging.axiossoft.com
www.azrasoft.com
baseddept.com
www.baseddept.com
bruceandsonslandscaping.com
www.bruceandsonslandscaping.com
api.buscuu.com
www.bygkon.com
www.camilacarnauba.com.br
www.cellupack.co
content.cliffgroup.co.il
www.cnmluxury.com
daomau.info
dashboardbeta.com
app.deductify.com
esteban.delamonja.com
care.depth-insight.com
importtool-ui-stage.emporix.io
jpf.envisageworldwide.com
www.eyecaptures.in
fahadziakhan.com
app.federicolanzone.it
dashboard.feltertech.com.br
filon974.re
www.filon974.re
fletego.cl
unexpected.gdgstrasbourg.fr
gokyletoursandsafaris.co.ke
goldenbiriyanihouse.com
www.grupoferreira.com.ar
www.helitaxii.com
heromight.lol
web.heronapp.xyz
app.ihracatkampus.com
www.institutoultra.com
kalaa.app
www.kalaa.app
appeduc.kmconecta.xyz
www.ktty.nl
www.liufamily.lat
www.lucentra.in
www.makhlink.com
stg-referal.me-group-application.com
mggcsikar.net
www.mivcast.com.br
monneural.dev
pic-fourwinds.mentor-na.neccton.com
pic-gimo.mentor.neccton.com
nihlahtech.com
obliviondh.com
sapheq.parceltracer.app
advertiser.playcred.ae
app.playcred.ae
www.app.playcred.ae
polskiekanaly.edu.pl
www.polskiekanaly.edu.pl
auth.pomophoria.com
corporatedisplay.raywhite.com
rockiefrancis.com
www.rubygreat.lol
salton.se
www.samirdev.com.br
senabebe.com.tr
go.seshtag.com
shelvinto.de
www.shelvinto.de
www.smartanalysis.com.au
snowdroptherapymn.com
test-monitor.squadytecnologia.com.br
starhometutors.com
syms.kr
tdfordfishandchips.online
thaientry.fr
thebuelows.com
thelifestyle4us.com
www.twinhertz.com
txtbypl.com
vo.uniti.life
www.uplikace.cz
viajesyturismocostarica.com
www.virtualstardust.com
volimdavet.com
admin.zerogravitygrub.com
www.zhouzhou.lat
zhouzhou.lat
Other domains in certificate