Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.fizyotakip.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 11, 2026
Valid Until
November 09, 2026
83 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
87:3A:E9:40:9E:21:79:03:7E:87:1D:EB:BB:5D:4D:67:3C:B7:DB:3B:5E:40:3A:1B:01:A5:B2:EA:65:16:44:DC
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
splitz-it.app
3rm.fr
acsosasaima.com
advocad.app
aikidoepinay.fr
osklen.appshare.com.br
www.ashutec.com
www.atulyainstitute.com
backchats.net
app.bahadirakin.com
beefypotatoes.com
www.bharathway.com
bigclock.party
www.bigclock.party
helpdesk.bioassist.eu
www.blakemcmullan.com
www.breakfasttherapy.ca
bring-k.com
bxcoach.team
agency.carttext.com
cbu-project.com
www.conexionberlin.com
danielherbert.ca
easyimpex.ca
clip.even-my-dogs.com
fieldtracker.app
www.fizyotakip.com
fjzdemons.it
flowerarchdecor.hu
ems.admin.flyhighgroups.com
www.fritemos.com.co
stage.studente.futuri.education
galaxyfusionai.com
www.geracao.dev
girnax.com
studio.granaquest.fr
grupovalle.pe
www.habitedge.app
haroldinho.com
open.hourlyjournal.com
www.imcool.do
boxoffice.informacion.my.id
institutemt.cat
admin-app.inzpire.me
online.jikabi-ai.com
prayer-times.jiwar.co
www.jointrusty.com
client.stg.ekyc.knoxpo.com
theme.kor-ui.com
design-dev.licon.no
makoto-investments.jp
staging.motoverse.games
oklacourts.com
link.omena.app
mackbear.portal.orwi.app
sdk.overlayy.com
www.paloorkottapark.com
www.pioneerlakemutual.com
www.profx.app
progressflooring.com
qudak.se
coimbatore.rainbowsdroptaxi.com
rd1c.in
romadadigital.com
www.runbit.app
www.ruyo-market.com
connect-ng-orders.rxoconnectdev.rxo.com
pos-dev-pro.sahlhub.com
www.scanshot.app
scrumpoker.team
ai.silicondunes.ae
simpleclub.in
smartswing.app
www.smudge.app
share.connect.somtoday.nl
www.speedline.app
standin-consulting.com
standinconsulting.com
www.state48weldingandfabrication.com
stechembedded.com
stefanrotaru.eu
stjscng.org
swacanada.com
sweetspotfarms.com
api.swerv.app
www.tommalletennis.com
topacademyapp.com
tpqnurulkaromah.my.id
share.trendly.app
farm.trophee.xyz
crownxfit.turnosweb.app
tz.gl
ucls-artsfest.org
uranai-musume.com
vamhri.com
temp.vridit.com
walpurgis.fr
www.warmbake.lat
wavesoftraveling.com
www.wowhaus.sa
Other domains in certificate