Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=alumaxdesign.pl
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 14, 2026
Valid Until
October 12, 2026
32 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B0:30:32:B3:77:96:DF:0E:25:C5:49:0D:45:DB:23:7C:6D:D1:E3:48:7B:65:A9:DD:F9:C9:4A:F7:2A:29:14:FE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
play-stoke.com
pickem.acadarena.com
www.acharyaashram.com
midas.acuizen.com
aiknights.work
alumaxdesign.pl
aluscorp.net
appcemanda.com.br
www.aquearte.com
architettobertuzzi.com
www.atraves.net
audiobiography.com
baerro.app
batch15studios.com
www.bergerkitzbuehel.at
biosphera.pl
www.biosphera.pl
blanca.cleaning
www.blanca.cleaning
www.bohotrail.com
team.bondvet.com
brandvolv.com
feedback.braverangels.org
breez.com.tr
www.breez.com.tr
bscaudio.com
nww.chattahoochee.org
chrishampshire.co.uk
clicker-cs.com
climate.id
curiouslabacademy.com
dimagagt.com
www.dlouhy.io
promisefornow.dotface.kr
drumblocx.com
ecmusinagem.com.br
tavern.edotm.net
clasificados.elsoldeorizaba.com.mx
enterpage.com.pe
familybank.live
app.familyconnectors.nyc
app.fitvitfitness.com
gaylecordes.com
gmverse.studio
gradiapp.com
auth.financas.grex.com.br
guestreadyrva.com
app.ccrcd.hyphae.net
www.icrossinguniversal.co.uk
inakilanda.dev
intalentcy-privacy.nl
it2102.id.vn
jimy.io
jochenmeyvisch.com
joshtrains.com
kodexlogos.com.br
longdistanceisajoke.com
mateoburnichon.fr
expense.maxyspark.me
www.medhavionline.org
mizani.co.ke
www.mojizai.com
morkor.studio
netgotiate.pro
ng-kenya.com
www.nonprofitsherpa.org
check.novu.eu
marioplan.onlinewebapps.ca
app.parkbot.ph
pintarkids.com.my
pixbytech.com
plannprep.ca
prime-vision.kz
probilliard.club
reelifymedia.com
rivingpris.no
rpaypix.com.br
sadbar.net
staff.silverlinetrailers.com
stututu.io
tecno-galpoes.com.br
www.theusualsuspectsflyball.com
titard.click
www.titard.click
www.travalris.com
tsmtechnologies.com
www.uranusapp.com
vannskadepris.no
vault41.org
vioops.com
mobile.vizzn.ca
vkctech.com.br
www.walcorg.com
waldsee.consulting
auth.walken.io
emails.webcat.app
wordoff.app
ww2wingsstories.store
booking.zionhills.in
admin.zorrock.com
Other domains in certificate