Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=best.rozliczenia-online.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 25, 2026
Valid Until
September 23, 2026
38 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D9:CD:E3:6D:8A:DE:EF:82:FF:F1:4B:EC:3F:39:8C:8B:E9:C4:68:7C:E0:D1:4D:30:3E:1F:7F:C2:22:46:99:6E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
sklink.capular.world
websummit.apolus.ai
apuappi.fi
ardaacar.xyz
app.avino.aero
www.bluemoon.ng
boursa.me
www.businessrpractice.co.za
carecart.org
www.carecart.org
invite-test2.careease.kr
app.clivexi.com
cloud8shop.com
www.colatino.com.br
www.crossfithex.site
www.designdeponta.com.br
kosariv.dragon-mist.com
eduardorocha.dev.br
www.eppytech.com
estimeai.com.br
partner.events6.com
www.expressotecsalvador.com.br
a0g4.foodle.su
www.futsie.app
getlogs.name.ng
www.goose-architecture.ru
www.iamzakir.co.uk
polis-appen.infosynk.se
jenniferandgabe.com
pulse.kanalia.io
yogaday.katiesyogacollective.co.uk
cad.kindercode.com.my
linkriot.kisline.com
krisara.in
laglanz.com
lakecomedo.com
safemaster.lfv.jp
invite.lunchd.uk
meemees.ee
www.mohamedmetwaly.com
www.moja-go4tv.com
msacademysalem.in
my-lego-minifigures-collection-nk.com
www.nicodema.cl
niepodlegla.pl
app.objslice.com
obstruo.ai
www.obstruo.ai
beta-qa-employer.offerdox.com
equastar.palmexus.com
vip.personalitytest.co.kr
www.philiancleaningservices.ca
pinnacleclothingny.com
pragnovalabs.com
sos-infortunistica.praticapp.it
stats.ps575vbclub.app
puresumptankcleaningservices.com
demo.quetzalmex.com
reciproitsolutions.com
birthdays.rekhansh.com
www.rent-sell.cl
best.rozliczenia-online.com
www.sanghance.com
shakami.com
oew-dev.shipskart.com
staging.shipskart.com
www.humecsc.snu.ac.kr
spark.com.ly
app.specialt.co.za
stampler.nl
stawd.dev
www.stawd.dev
www.street-e.ch
noralinaandalejandro.swanmoments.lat
szechuankitchen.buzz
auth.tashkentparks.uz
www.teksperimentet.dk
termo-hub.com.ua
www.thepluskorea.co.kr
trent.sa
quota.arts.tu.ac.th
www.unity4education.uz
dev.brand.urbanlyfe.in
www.dev.brand.urbanlyfe.in
www.usegrox.com
super-beka.vako.dev
voice-changerai.com
www.volejbal-sokol-benesov.cz
app.vorinfo.com
www.wsnautica.com
yexii.com
kamukuywa.zaoletu.com
bita.zenithq.co
account.zltco.com
apps.zltco.com
legal.zltco.com
maps.zltco.com
resources.zltco.com
zltco.com
zsharplabs.com
Other domains in certificate