Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=prenotazione.dpi.invitalia.it
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
March 30, 2026
Valid Until
June 28, 2026
49 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CB:3F:F0:FF:7E:0D:64:75:E2:68:B5:A7:93:81:FE:A7:3D:B5:3C:11:27:D4:9C:16:CF:77:86:18:9D:73:6E:DE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
rules-os.com
adsentinel.tech
agentsoverflow.dev
alialbarran.com
asa.team
backchod.com
baiguniagro.com
play.bjcnews.org
byrd.run
www.bzka.io
install.canarymail.io
ccconnectapp.com
choreofit.in
codingadvisors.com
conceptpluseavestroughing.ca
coverbama.com
cutisresearch.in
dahp.io
baomin.dajiang-life.com
deskflow.app
dpmt.mobi
crm.eazealliance.in
www.crm.eazealliance.in
enigmahouse.jp
esgpracticetest.com
esthergen.org
www.evsecertifications.com
freeepicgames.me
future1005.com
giardinaintegral.com
selma.test.graphite.space
hdsai.id.vn
nt.hemisphere.digital
link.hopsticks.com
membresiasalud.inter.mx
interviewai.co.za
prenotazione.dpi.invitalia.it
iowabob.com
dispatch.iridecars.com
isksm.in
ux.jnip.com
k7-software.com
klaivox.com
kylehouck.com
www.laelboerdery.co.za
lamoutarde.io
www.laterlifeadvice.com.au
www.limoinsouthlake.com
www.lo-beam.com
luxoraorganic.com
www.maguro-uokane.com
www.mashoun.com
www.mattgould.works
maximgladkov.com
merakiaca.com
metricasistemas.com
mobileboost.io
www.nationeye.ai
v1.newsprovenanceproject.com
niyantrix.in
ogbuildingsupplies.com
staging.ogbuildingsupplies.com
www.ogbuildingsupplies.com
pujcovna.ohhappyday.cz
www.olsiodobashi.com
dindigul.onlydroptaxi.com
pamirmusic.com
peeporders.peepolabs.com.mx
peerpop.io
www.poker501.com
kiosk.prodiversapp.com
ruhvastu.quickdemo.ca
raabta.app
racconsultinggroup.net
fleury-wise-stag.redfox.dev
referralcode24.com
sagulabs.ai
www.sagulabs.ai
sandleflower.com
planner.sathwiktadivaka.com
sathwiktadivaka.com
probono.savvysuit.com
ppa.sconsole.com
www.shannonleahwatson.co.uk
auth.i18n.siroenoyosui.jp
parent.devw.skool.sg
spacemap.space
stlnetservices.com
bodamenjivaraltamirano.swanmoments.net
thichtruyenchu.com
triviabang.com
127.0.0.1.uplevel.team
vanhakorpi.fi
project.vatsalmpatel.online
vhws.online
virilis.be
vishnucarsdrivingschools.com
vitasapp.vitas.com
visitorlog.waterside.tools
weeklyflick.com
Other domains in certificate