Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.yourshoppinglist.net
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 04, 2026
Valid Until
November 02, 2026
64 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
41:E6:C6:ED:7F:0E:07:02:A0:75:50:25:6D:12:44:4D:72:53:9B:9E:7B:C2:16:3C:71:4A:05:6A:7C:ED:26:15
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
pixelo.cloud
abdulkadirmohammed.com
alittlebit.co.za
wp1.apresh.eu
www.wp1.apresh.eu
www.arfis.lt
www.artbasefilm.com
artisans.com.br
hanab.assettwin.nl
asteyatechnologies.co.in
projects.autolight.io
ayvaliklavas.com
dev.app.bemoved.com.au
calculadora-ia.bestrateo.com
bishoplay.com
www.bourbonandbubblestx.com
bussoladopescado.com.br
buzzbank.social
admin.cliqestimatebuilder.com
cricsquad.in
www.cricsquad.in
crossswords.link
dev.cuppazee.uk
www.dontre.co.ke
www.druidz.fr
elena-ransom.com
felipenipper.com
www.felipenipper.com
cms.homolog.fieldpro.com.br
auth.fivehub.fr
fmhub.bg
portal.friendsfoodexport.com
chefpick.gajaebada.com
growthmanch.in
ha-osef.com
hapifoodstuffs.com
www.hc-ec.com.tw
hqm-office.xyz
www.itclub.ro
www.encuestasalidas.k-9apps.com
kesher-works.com
www.khmoviehub.site
kingindiabakery.com
www.kings-premiumauto.com
leaderwise.co
lesperanceuganda.org
lyricallifetherapy.com
magicmirror.it.com
www.magicpass.co.kr
app.medhasacademy.com
merachesscoach.com
merrycat.uk
www.mikhel.in
www.milibrosorpresa.com
minhcuongmth.id.vn
api.mobilizei.com.br
www.monsuivibat.com
murafi-sa.com
nandarodriguesoficial.com.br
auth.neetcompanion.com
app.noblestarrealty.com
dev.noblestarrealty.com
www.obround.com
amso.openesrilanka.org
www.otoatalay.com.tr
overwind.co.za
www.overwind.co.za
payforma.de
wero.payforma.de
pdf2kit.com
www.pdf2kit.com
app.pegasusapp.com.br
pianogarden.com.tr
www.pianogarden.com.tr
pixalerta.com.br
prasidhhirahing.in
promizy.com.br
pulsenetsolutions.co.za
www.rastrofleetsolutions.com.br
resafe.io
www.ridifyapp.com
account.rj-translations.com
www.rotundahq.com
royallinensglobal.com
rustikaeventos.com.br
seed42.games
auth.shimcity.app
cdn.sitenav.io
talk-aicheck.com
theartisansworld.com
doc.toilab.com
www.unlock.com.qa
valdesrefrigeracion.cl
vanitech.com.br
www.veloview.eu
vgitsolution.com
br.voa.tools
app.xonanosmartfoam.com
www.ymmbulentsezgin.com
www.yourshoppinglist.net
Other domains in certificate