Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=duda.staging.ampify.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026
78 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
61:68:6A:87:F4:DD:F5:34:67:0A:62:4E:8A:1F:54:92:9F:C7:18:05:DA:20:CC:34:47:DE:91:D9:AC:01:1B:DD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
scrambledbuddy.com
duda.staging.ampify.io
sigma.cao-sport.appdashboard.nl
comunicacao-develop.arco.org.br
arcondicionadoonline.com
www.atomtech.cc
www.battersby.io
dev.client.controladoria.beehus.com.br
bejtula.com
www.bestpack.cz
binnyiao.com
assets.boleto.cloud
www.boonjiproject.com
cocvuong.buitientuan.com
c-perez.com
app.chauffeuradministratie.nl
news.cignafinans.com.tr
channel-dr-nimesh.cloudskript.codes
auth.cn-dev.link
auth.app.contextual.live
cvg.co.in
www.dawidr.pl
htv.dejohn.dev
application.delihealths.com.mx
staging-app.digitaldistrict.ph
eeffoc.coffee
www.portal.eshlearn.com
exatemplate.com
filterbloom.com
flupke.dev
fork.software
www.galwomin.com
livraison.hausvalet.ca
hobe-kibondo.org
cld.immigratic.com
intellivoxai.com
jswwministries.com
lamaisonrecla.com
lanf.ca
www.les-trente-terribles.com
linx.cool
staging.m.x.loplat.com
lopthaybinh.site
www.maggielidesign.com
www.mantreshkhurana.com
mateabags.com
www.meusociotech.com.br
movieladder.com
musepic.com
www.myndatech.com
www.networthy.live
link-pdr.nibo.com.br
nikklet.com
time.nilear.com
noeldrieghe.be
www.noodleandsprout.com
oliviahs.ca
olu.form.olu-it.com
nhsa2020.ondagoapp.com
l.onoe.dev
palaismobile.com
inu.pepalog.com
pingwheels.com
pluomedia.com
www.portela.dev
preppinmed.com
www.priorit.ee
quarklabs.io
www.rebelprognos.se
recap.bio
www.remincalendar.com
www.rhmixcontabil.com.br
roja.au
romario.top
rprandt.com
www.sanosociety.com
www.santeri.consulting
monitor.schild.com.br
admin-stage.serveedo.com
sintegra.kz
softsyncsolution.com
www.sunderdeepworld.in
help.taptapwin.com
texaspropertyrisk.com
tcg-links.thanhcong.vn
tharik.dev
thepartridge.net
www.thrststudio.com
www.thynkering.com
www.tourde4.com
transcedia.jp
www.umtaijung.com
www.unrupt.io
vazarnofoundation.org
wahlanalytics.es
www.wirke.se
wotanomi.com
www.ytwertrade.autos
tasks.zacharyjbaldwin.com
www.ziliochurrascaria.com.br
Other domains in certificate