Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=prana.qzz.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 17, 2026
Valid Until
November 15, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D6:14:40:9E:73:65:FF:8E:EC:27:92:E6:74:00:D1:AE:A8:30:D5:1E:98:22:8E:B0:AC:F5:1F:77:B4:C6:43:1C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
nudge.core-ethos.com
mitoa.1tsu2tsu.com
3i7.net
45s.co.nz
aeshyd.com
analysiszero.com
ancientpathcm.org
atomforge.com.br
avaris.games
beyondlimit.autos
finanzas.binga.cl
auth.bioloophealth.com
www.bitfera.dev
fireship-english.bjarnimax.com
www.br-zhou.com
bravecompass.mom
bribegame.com
kit.buhalbu.com
www.bulk-comm.com
bymorayo.blog
admin.chandify.com
www.chesslens.org
cloudhop.travel
www.colorantibottoni.com
gingerales-orders.crispnow.com
admin.app.cristofoli.com
auth.crowdlinks.jp
www.cuckoofi.com
app.cursocem.com.br
www.dekaandassociates.in
englishsir.discounser.com
dokov.bg
permatahati.dokudigital.my.id
dugancodes.com
dunyatech.com
qa.cap.e-mov.cl
qa.fleet.e-mov.cl
enenmony.com
presi.f255x.de
freshlycut.ca
c2p.go-games.gg
user.happic.io
www.hoodooware.com
hyperlink.lt
ibgroup.vn
imperfectlyvertical.com
mailer.inferna.dev
www.innerharbor.lol
jlmaja.lv
jordanaminutella.com
karrangupta.com
kitchencrops.com
lakehurstselfstorage.com
laspanchitasfood.com
leavittmt.com
levelx.tv
lobabschool.com
mapofthedead.com
mhserigrafia.cl
mltoolchain.com
mojibox.cloud
edit.myatelier.style
mycalorietarget.com
www.mycalorietarget.com
mck-demo.neap.co
www.ommdijital.com
www.onoctopus.com
assistec.ontimeautomacao.com.br
www.osdata.es
outsideapps.co
pac-det.com
pastoralconnect.com.br
www.pathwayspa.org
prana.qzz.io
precisiontrack.app
saythat.primeposts.in
proapps.cl
quranv.com
rakasiwisurya.my.id
assets.rebalance-center.com
richcore.surf
www.richcore.surf
dash.roboscouter.com
ruangkerja.cloud
samueljh.com
lessons.smailes.xyz
app.solven.jp
sorteaju.com.br
susanlangbooks.com
links.go.synamedia.com
www.store.syssmart.co
sdk.tapntrak.net
testhubpro.app
theplayground.love
rescisao.totalicontabilidade.com.br
www.vibeglossary.com
nrdb.vksl.uk
www.wellnessscriptpod.com
www.willowinnsuites.com
www.willowmoorhead.com
Other domains in certificate