Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=quicollage.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 27, 2026
Valid Until
November 25, 2026
70 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C1:CA:FA:53:47:3D:1B:2E:C7:42:79:C0:12:19:18:29:06:36:B6:16:CC:BC:20:2E:F4:FE:C1:5A:E1:7B:E7:E0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
roya-profile-dev.roya.marketing
solar.aa-team.com
world.adesign.work
amorpheus.ai
andreasberentzen.xyz
awdvi.lat
jamie.azzopardi.com.mt
www.belmontsbannermen.org
www.benefycare.com.br
bggames.lat
www.bugmedia.io
byteledger.io
ca-manager.fr
vista.cee-uk.com
link.chapterbyepisode.com
www.colors.com.sa
creativemuseai.nl
daw.dagodev.com
davidrigueira.dev
admin.diablos.com.mx
www.elenaharford.com
elitepartshelf.com
agent.elx0.com
salespaces.entropyspaces.com
eueduca.com
app.eventhallebern.ch
familyadvisor.co.za
www.faststatement.com
www.filovo.online
app.flowtask.tech
servitztesthomepage.fritz.co.il
www.gksaihomes.com
collegeapphelp.goldenpeel.net
tadmin.heptone.io
www.incugamecon.media
login.itliq.com
catring.kaogrill.com
food.kaogrill.com
auth.knipping.nl
longines-primaluna-202509.net
lorgartshillhotel.com
deeplinks.mafin.ru
marriagematerial.info
medicalclaimspartners.com
minarul.online
www.mlyk.consulting
www.mousse.fr
multizillionaire.com
travel.mywep.site
needoh.top
app.neovault.com
nextgensoft.tech
calculator.nie.edu.au
push.notif.nc
auth.nxi.sk
www.onewirelessservicesllc.com
own24.app
business.parki.ch
www.business.parki.ch
super-tana.patrikatana.fun
test.pcmb.qzz.io
pickeringpower.se
accounts-test.pictoria.world
dashboard.piki.com.br
playmtt.xyz
demo.pocketrag.app
www.ponnivalamfoundation.com
ponnivalamfoundation.org
haze.postmedia.co.nz
www.qubicom.agency
quicollage.com
reach3dcad.com
auth.dev.rentle.shop
app.rotacredoficial.com.br
wegrow.sherp.uz
shriramawelfare.org
www.shriramawelfare.org
www.sickteck.online
www.sip.io
smartberry.online
staging.storyque.app
www.swingli.app
tcfinancialmanagement.com
tendercalc.in
dev-testpartition.thelevel.ai
thinkcoral.com
staging-app.thumbz.com.br
time4class.fr
www.touchee.com
buyer.rajmandir.tradix.co.in
vendor.rajmandir.tradix.co.in
www.unioniz.com
vantagemgenuinavaltra.com.br
www.viewcovid19.info
www.wedobits.ie
auth.xcoder.org
www.yuanshiren.shop
yuja.kr
jovicbiralo.ziontechug.com
www.zitongman.buzz
Other domains in certificate