Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=simponi.ponpesimammuslim.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 19, 2026
Valid Until
July 18, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
22:0B:13:CD:DE:60:E9:8E:A7:EE:0C:81:1A:FA:82:55:5D:7D:D1:93:45:3D:BB:0B:52:C7:7C:C6:C4:C8:C9:7E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
sas-jp.com
api.0xed.io
ngxconfirm.9lessons.info
abs-industry.ru
gage-connex-lhr.activ8games.com
www.agentkhalifa.com
agora-langres.fr
www.ahmedraja.co.za
www.angulararchitecture.com
www.apls.co.jp
applelink.co.kr
benvissotzky.com
biot.co.il
today.bmec.co
buildartind.com
pizza-test-ver-05-admin.bybe.co.il
www.canigetfibre.co.za
staging.chatwithsteiner.de
app.clickacasa.com
www.consertoptica.com.br
sisand.consultafatura.com.br
ngo.costalab.net
www.criticalshiftgames.com
beta.debtpanel.co.uk
designist.co.uk
vyspelost.digitalniarchitekti.cz
www.dispatchervtc.com
dygs.co.kr
dashboard.f2onsite.com
fineants.co
www.flaner.com
g-fit.co.il
monitoria.stag.gen-t.science
gigigo.hu
gridaxon.io
guestin.eu
www.hakanbogan.com
cse.hsyn.de
www.igglu.com.br
auth.innerly.org
blog.itamaro.com
itcloudx.com
www.jonto.ru
katzhardware.com
www.katzhardware.com
www.kcsam.net
www.kibervarnost.si
komakura.com
kurti-marinovi.com
www.kushpa.tel
www.leinumber.uk
www.loyaltyautopilot.com
maxbet99.asia
www.megagaming.co.za
app.messagefromsanta.com
www.mj-fj-wedding.com
mosul.academy
mototrials.lv
www.movitsport.com
www.neurozen.ai
northfieldchoir.org
www.numerodeserie.fr
oficinaenventacochabamba.site
oiiink.art
www.oreflow.com
app.palousefellowship.com
pbitla.com
perfumescomalapa.com
pesok.md
bot.du.phinxlab.com
phuire.com
zootopia.plavak.sk
simponi.ponpesimammuslim.com
www.qmuslim.com
chartpad.rabit.it
www.sarfaraztech.com
orbit-admin.saverpe.com
sbondabadance.co.za
app.smoothielemammouth.com
mn.snps.edu.in
solporno.com
www.sospapa-moris.com
stmtrade.cl
elg.surfpay.se
sweetbakery.co.za
mis.teknohama.or.tz
telluricsystems.org
thecharterpath.com
www.thecharterpath.com
www.thermodelchoc.com
helpdesk.beta.thsystems.net.in
tidelinehq.com
truereply.it
unitedautosports.com
www.volym.dk
www.xcape.in
subscription.yurulica.com
www.zampona.org
datengarage.zcircle.at
zen-tech.com.mx
Other domains in certificate