Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=pulse.neurologyca.ai
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 04, 2026
Valid Until
December 03, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A8:B8:99:02:6A:01:71:DE:ED:F6:17:EB:38:1A:6A:20:AA:B5:60:BF:B8:18:47:4F:50:DB:A9:AD:E1:1A:03:81
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
phone-pay.site
080-080-0070.com
openpgpkey.2xist.com.tw
a1khandeshi.com
adcinvestors.autos
admprivatesolutions.com.br
portal-us.agilite.io
aiqrcodes.app
www.aisoftstudio.cz
amylpuno.com
www.arsintlco.com
claude-guide.autoarticles.net
app.bevwerk.com
signage.boldlyforge.com
ps.c2dinc.ai
stg-shop.casting-asia.com
www.conectoservicos.com.br
www.corsolegalgroup.com
portal.cpyvone.com
dianalearningportal.com
echofish.app
app.staging.enimas.co.jp
ies.exascale-ai.com
www.fabtradingjournal.site
www.farcebook.com
auth.fcbadge.net
fixit360.co.ke
ops.flovi.io
followthrough.quest
gamenightbuddy.app
www.gamenightbuddy.app
geocoreinfra.autos
www.geocoreinfra.autos
staging.germankraft-wallet.com
vms.ggm.kr
globallearningalliances.com
admin.graspd.ai
greatatires.mom
qiblatours.habytet.com
md-junayet.iplaydigital.com
jhgchahal.buzz
dev.joyho.net
gauth.kiliee.in
kimeltun.app
kisandana.com
kovacore.asia
www.lanjing.hair
app.learnchildrights.org
sim.learnxcode.com
auth.develop.left-right.jp
g-star.lfv.jp
lisnoti.com
lovetagpet.com.ar
dodotecakes.lupi.delivery
manabijaponca.com
www.medyafor.com
mklauto.lat
www.mklbusiness.lat
admin.moteev.store
www.muss-nicht.de
myplc.app
namnposter.se
www.necory.com
pulse.neurologyca.ai
nomion.ai
www.nouba.app
7a91d3d0e8.nozharov.me
onetap.design
www.onetap.design
bestellung.online-cnc.com
peakleads.agency
picview.co.kr
www.pigmentaarbetsplats.se
pokerelay.com
qr-pay.club
quantstudio.tech
sawadeebkk.org
makeqr.senaskat.com
parkcheck.snabb.xyz
demo-en.snapmentor.no
soniqube.app
tripsplit.spirit2tech.in
pono.startwiselab.com
startwiselab.com
pre.stavario.app
www.stov.io
tghfreight.mom
auth.thetreasurenauts.com
www.tinytoolsbox.app
tutoriel.tolkeo.com
www.trymonjiz.com
vantumsolutions.com
auth.volleygo.app
voxelwall.app
vusa.cl
www.writeit.ai
authdev.wyshlist.io
www.yingyang.rest
www.yojani.com
zhenxin.rest
Other domains in certificate