Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=whats.thehives.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 21, 2026
Valid Until
December 21, 2026
53 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
66:65:73:7F:28:CF:6A:03:26:18:6F:42:DC:2B:36:38:07:39:59:AB:9D:13:C5:B3:7A:F3:A5:1C:5D:52:E2:67
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
rhzo.io
www.180agile.com
40xleaves.in
anonymouschat.live
apexcashsolutions.com
www.apexcashsolutions.com
aqkey.ru
atelier44.fr
www.aurnamcollection.com
www.baddatapush.com
binitmishra.com
connect.blockboosted.com
www.bloopcubes.com
grandefamilia.bmenu.com.br
www.world.carterbury.com
chuffedwith.ai
dev.login.cog-selfcheck.jp
www.cylencemedia.com
dailynewsreport24.com
www.darline.com.sa
www.doordrink.app
www.dotachieve.com
dyad.tv
invite.ecoe.vn
webdev.endrf.com
stage.familysage.co
concept.fanworks.ca
etikabunga.finlup.id
business.dev.first-iraqi-bank.co
www.geitaberget.com
shout.getviral.me
gizemafyonluoglu.com
www.guaraniexecutive.com.py
guidefintax.com
hanikatech.com
www.hanikatech.com
www.happilyeversikes.com
whatsthatdo.haurwitz.com
www.herizon.ee
lp.hibikore-days.com
www.howtogetfreecrypto.com
huseyintutar.com
app.invoicebillity.com
jeraldpamugas.dev
admin.jgangulylab.com
www.jmlinteractive.com
toridev.jolbax.ch
dailybudgettracker.karimnagarupdates.com
elaringsportal.kompetansenorge.no
app.kosharot.co.il
os.levelupby.design
link.loopnews.com
mandircare.com
bdblitz.mangonese.dev
staging.matchsetpoint.co.za
manage.moscadesign.com
mouniitservices.com
www.mrright.net
neuraldota.com
nextdigital.it.com
www.nirwantechnologies.com
notestamp.com
myomnes.omneslegal.com
admin.dev.oraldata-preprod.net
www.oryzabd.com
pacemaker.press
www.pascalraszyk.de
patriciaandkutlaywedding.com
permitfoundry.com
phamtrungkien-hust.id.vn
polianacaxias.com
votaciones.presbiterianacentral.org
puhoitea.com
www.puyufarma.com
www.quaternary.co
www.raultapia.com
rbtexamtest.com
staging.app.satelligence.com
www.scams.tips
shakasales.com
www.simonleviev.com
smart-lend.com
srigowripackersandmovers.com
ednasearch.successacademies.io
blueprint.thedata.ai
whats.thehives.app
www.thevectragroup.com
www.tradingview.to
turbox.com.bo
twinhillspartners.com
firebase.ueno.org
v4ault.com
www.vargas.com.br
demo.veero.ai
ticket.web3intravel.com
www.staff.portable.wellon-sol.jp
wedding.wisedev.online
app.zapwaste.com
zoe-lambert.fr
app.zuluchess.com
Other domains in certificate