Open
Cached
·
just now
81/100
SECURITY SCORE
Detected Technologies
PayPal
Adobe Target
AWS CloudFront
YouTube
Google Maps
Google Tag Manager
Bing
Axept
Google reCAPTCHA
Braintree
AppNexus (Xandr)
HubSpot Forms
Adyen
DigiCert
Google DoubleClick
Google Analytics
Microsoft Advertising
Google Conversion Tracking
Adobe Audience Manager
Tealium
New Relic
Datadog
Imgix
Google Static File Front End
Google API JS Client
Google Fonts
Bunny Fonts
Hotjar
Contentsquare
Adobe Experience Cloud
Stripe
Google Search
BootstrapCDN
Adobe Dynamic Tag Management
Facebook
Mouseflow
Snapchat
Adobe Fonts (Typekit)
Shopify
Cloudflare CDNJS
TikTok
Vimeo
Font Awesome
Sentry
GeoTrust
jsDelivr
Google Cloud
Certificate Information
Subject
CN=*.recommerce.com
Issuer
C=US, O=DigiCert Inc, OU=www.digicert.com, CN=GeoTrust TLS RSA CA G1
Valid From
April 07, 2026
Valid Until
October 22, 2026
65 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7D:38:E3:70:1B:17:CE:31:76:50:2D:F3:2C:DD:88:EA:7A:03:84:4F:ED:4B:CC:B0:B7:56:16:6E:59:7C:D9:C8
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
Forward Secrecy
Limited
(Check cipher configuration)
Warnings
- • TLS 1.3 is not supported (recommended)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=3600, max-age=31536000
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports