Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.kfkbattalion.ca
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 05, 2026
Valid Until
November 03, 2026
58 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FB:FB:28:26:AC:C6:84:85:2D:D5:6C:40:C4:70:EC:5A:7A:AF:32:5E:9B:C4:5F:68:95:3E:54:75:05:FF:57:D7
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
obround.com
app.1112delivery.com
metacore.12traits.com
dndbattle.aadu.dev
shop.aasaan.app
dev.above.health
morgan.adet.app
adressel.com
www.ai-gijiroku.com
alexandrearchambault.com
anusha.dev
archipel-content.com
arena64.io
arkazeem.com
as-bauelemente.eu
beaudoinolivier.com
admin-test.beonlegal.pl
betlianaff.com
www.bodhi.consulting
www.boobfeedr.com
budgepro.com
ccfcollective.org
clinicpeu.es
closearound.com
comunidad-vecinos.com
courtneyabele.com
distritoderecho.com
e4u.pt
elevcont.com.br
dev.fluttermasters.dev
www.gavrilovic.ca
www.geceleyin.com
hetworks.fr
pvs.infocentre.app
jflorchi.ca
juniorlessons.com
links.portal.kaitsolutions.com
www.kfkbattalion.ca
dl.klynf.com
broadcast.kripzen.me
auth.kurobi.app
letspost.club
basometro.libcom.org.br
loyalday.com
lunarchain.net
cal.mackree.se
www.marcenarianoseular.com.br
martinamasarovicova.com
nuxt2.maxentwickler.site
megamindfxsignal.com
tut-requests.mightybest.com
voucher.miguello.app
link.mimble.app
moneylovingmonkeys.fun
morphosis.app
mp360.app
mailing.nemus.app
glassdoor.neoufitness.com
dashboard.nextknowledge.ca
oceandatapool.com
oldowan.uk
tups.omuraisu.dev
partner.openhandwerk.de
11521419.peerly.app
www.platora.app
go.playpoint.app
poetical.design
prodentalperu.com
www.psychiatrie-nador.com
www.publicfilings.co
app.quick-ev.com
spinbux.rbxadder.com
www.rightsource.global
rizqana.uz
samaxengineering.com
www.sarditable.it
appv2.searchviu.com
app-staging.shopnoshable.com
sitesbybrandon.com
social-pilot.ai
www.sole-e-mare.com
sphere-etudes.com
www.spkholdings.org
stab.ai
kanye.stevemaguire.dev
www.susunails.co.uk
bodaarelyyalex.swanmoments.lat
www.syaau.com
www.tamekomu.app
the-meet.com
share.truetour.app
www.ufclivechat.com
console.simulads.dev.ultraimpression.dev
unvinoaldia.com
usecasemapper.com
residencymatch.usmlesarthi.com
veratechsoft.com
vollit.ca
link.zalora.com.ph
zenithcore.ai
Other domains in certificate