Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.onframefilms.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 21, 2026
Valid Until
September 19, 2026
44 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
9F:04:F6:EA:A4:07:8D:30:D7:F2:36:7E:6D:32:C6:A6:04:BB:31:18:FF:64:48:35:7D:24:17:D4:65:A8:24:AF
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
pointtoend.com
www.7sachen-freiburg.de
www.academikmente.com.ar
status.airshot.io
attraction.test.fpui.ameroservices.dk
www.arttege.sk
password-change-dev.ashirase.com
www.babysafepro.store
www.bimoficinacriativa.com
xm.coplay.io
google.corq.studio
danubiuscorabia.ro
disfoil.com.br
dvazivotyvjeden.sk
empatichealth.com
ac-services.eslamashour.com
www.fagbrev.io
auth.flickyfinance.com
fumenbook.com
g-p-f.jp
gasflowhn.com
golfparalavida.org
haqtech.net
open.hookle.net
fulfillment.hotwax.io
houseoforphelins.com
hust-cv-nguyenvannham-20215105.id.vn
institutobenessere.com.br
interestingmachines.com
itsafeatureitsnotabug.com
www.itzallwright.com
blog.kaceres.dev
www.kainos-solidarite.com
www.kainos-solidarite.org
www.kanguru.mx
www.kibytes.com
lepaapp.com
www.leran.surf
lifebeat.pro
www.loopinc.co.kr
www.ludenaria.com
luxoombd.com
www.luxoombd.com
lytvox.com
malahovsky.net
mandaringlobal.org
manifesthr.com.tr
www.mantenimientoenalturasbrago.com
mesbro-advertisements.mesbro.in
auth.mockrocket.io
force-us-app.moj.io
rummle.mrsheep.co.uk
www.mrskimsgrill.com.au
classroom.mynotes.org
dev.nearestschools.com
nemesmarcus.com
www.neuroishpsychotherapy.com
site.noprofits.org
portfolio.northshoreschools.org
swap.nothankyounails.com
nvwrestling.org
www.onframefilms.com
www.outfitterr.com
paravoxia.com
www.paravoxia.com
www.pauldelourmel.fr
kaizen-profile-dev5.pbcd.net
positivemovement.co.uk
inforef.psiworks.pt
www.psykologlouisemunk.dk
rachit.co.in
career.realworks.com.tr
renthero.io
rocketnft.xyz
romain-fertillet.fr
chronomatica.rootdynamicsllc.com
ropework.gr
www.ruchitsawalkar.com
www.merchant.scriptbox.ca
www.sdestate.surf
smilecaredentalclinics.in
snrk.me
bodasdeplatafranciscoyveronica.swanmoments.net
omnikage.syntos.net
drawoh.techfloater.com
techsolid.io
www.tejascoretechsystems.com
thijsvanlienen.nl
www.tjung.my.id
todo-md.com
www.tolapp.fi
tas.tplus-asset.com
www.trakkar.in
www.twyfordroundtable.org
app.vecinova.mx
growth.vetterview.com
www.wanax.com
wastedtalent.rocks
connect.xccelerata.com
test.inmujeres.xprtcoders.com
Other domains in certificate