Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=thoughtbait.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 30, 2026
Valid Until
November 28, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BB:4C:99:60:4B:3A:03:48:C7:6C:3B:4A:44:FF:84:1C:FF:54:22:DE:73:BC:57:B1:DB:DA:CB:62:94:C4:64:26
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
nalamzap.dev
os.1ne.com
agripinamontes.edu.mx
amarjalokare.com
aptixlabs.com
assetbloom.in
audexiq.com
www.app.ayibamedia.com
bardisyon.com
bcrm.bhsgroup.vn
www.cltstudy.com
www.clubfeast.autos
www.cogniqube.world
cuantoalcanza.com
ar.dd-workshop.com
ruangnumerasi.dhanymath.my.id
app.dinarte.beauty
dolukazan.com
elremansoezeiza.com.ar
portal.equipment-service.eu
estudiosandoval.com
www.eudragent.com
wms.feat.cl
www.fluxfwrd.com
www.goodridesla.com
gta6-timer.com
staging.imaakola.com
iposcout.in
radio.jkv.tw
www.kiwicode.net.nz
libyanoo.ly
www.liketechsolutions.com
lmdtexel.nl
lokalbites.ph
www.matchely.com.br
mc-coaching.be
mcmilitello.it
www.mi-estilo.cl
indeje.muhanji.co.ke
www.mushrankhan.com
signs.mwaalabs.com
www.neonpuzzles.com
ngbao2903.id.vn
dashboard.notiqoapp.com
auth.ondokun.app
www.oneup4real.com
openfeed.co.za
www.orientalhoses.com
osts.com.vn
otgruzchiki.kz
www.paarly.app
auth.pagespeedify.com
office-dev.pokerboss.dev
pitang.prompt-pitang.com
wedding.psangwoo.com
jira.punyapat.me
puppypalette.jp
test.quest-bc.com
quytrungnguyen.id.vn
raizle.com
rapinnohealthcare.com
fund.realtimeaf.com
www.remittance-service.com
rezaplus.com
rnagai.me
link.rootletapp.com
app.rumusku.id
saldoofin.com.br
zoom.salesq.app
samuelru.com
www.savintsev.ru
secure.serviceguru.app
tajhotel.seventeense.com
sexologtania.se
x.shocode.com
solutionflowlab.com
www.studentachievementtracker.com
client.sushiscribe.com
www.tackleboot.com
thanh1307.id.vn
theyoungshakespeare.com
thoughtbait.com
tnbminhpersonalsite.id.vn
travellytrips.app
huntlab.try.ee
uhub.app
app-ryc.uniboi.co
valmircamposadvocacia.com.br
www.vantorogroup.com.au
app.viewsundays.com
vitadomus.cloud
www.humani.voidstudio.com.br
waayout.com
contact.wag.watch
www.wanabee-score.com
websantequera.es
www.whiteknightsensemble.org.uk
wizzwebb.com
zeitstilla.com
zensorlab.com
Other domains in certificate