Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=travel.batouta.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 18, 2026
Valid Until
November 16, 2026
62 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1C:5A:72:47:AE:57:FD:91:75:4B:FB:0C:E1:55:80:A4:82:81:01:18:66:12:52:61:B8:69:1E:14:9E:14:41:F7
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
stc-studios.com
2627veronapark.com
www.2627veronapark.com
influxer.apexialabs.ai
astro-nom.com
barakotech.com
travel.batouta.com
bebeyondtheframe.com
carolynsokderm.shop
www.carolynsokderm.shop
chthome.shop
app.clarexity-pl.com
arkadium.cogeval.org
col-trab.com
crypt02.cash
cseconsu.shop
ctjconsulti.shop
cytoreason.com
www.cytoreason.com
dailyminet.com
dobrakapsa.cz
dream-lab.art
dseaircra.shop
www.dseaircra.shop
www.dwarfstar.co.nz
www.eco2buy.com
mchess.eg1.in
enakillitercih.com.tr
fluxobistro.com.br
auth.gemlync.com
gptests.com
greholdin.shop
www.greholdin.shop
grtconsu.shop
gsrcrackers.com
webadmin.gsrcrackers.com
www.gsrcrackers.com
app.guideglare.com
hanan.fun
mtrack.harsharoyal.in
heylabapp.com
www.heylabapp.com
hodja.net
passverity.horizam.com
admin.igrejaespacodapaz.com.br
infeonit.in
infobod.sk
www.infobod.sk
iraadigitalmarketing.com
isowingames.es
www.jayfoxceo.com
jimgillpropert.shop
www.jimgillpropert.shop
jonathandevries.art
kiteschoolkalpitiya.com
orders.kongscave.com
littleprincessmiami.com
www.littleprincessmiami.com
revenda.lojaschinelada.com
mftautosale.shop
www.mobile.mizann.app
mkdchan.com
staging.nrlaportfolio.com
cooking.nydrik.de
o-play-vinyl.com
www.o-play-vinyl.com
olmipay.com
www.olmipay.com
onecent.digital
www.parquecologicomatarredonda.com.co
ops.projecthollow.com
www.prosochi.in
proszamos.hu
rudi.downloads.redzonerobotics.co.nz
riccomk7.com.br
rycinvestme.shop
senelworld.com
sgarthouse.art
smazenakapsa.cz
www.speedobrain.com
www.steamunlockonennabe.click
strejdo.dev
www.supercatmatch.com
www.towingmath.com
vaion.site
vattam.space
visiqube.com
voltjmp.com
vsalivsto.shop
www.vsalivsto.shop
www.warpknight.com
adminenzoygio.wedpy.com
enzoygio.wedpy.com
wjkhealthpoi.shop
www.wjkhealthpoi.shop
wons.app
wrvcomics.com
wsdohi.shop
ylvbible.org
www.zaaztc.de
Other domains in certificate