Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=lunexaeldercare.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 03, 2026
Valid Until
October 01, 2026
34 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D9:09:3E:28:43:99:13:1C:51:2F:E3:A5:3B:ED:AC:FD:89:50:64:3A:17:9F:D3:86:E2:54:A6:E4:26:4D:2B:0A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
admin-dev.enkept.com
alumni-dev.enkept.com
kiosk-dev-apk.enkept.com
kiosk-dev.enkept.com
my-dev.enkept.com
staff-app-dev.enkept.com
staff-dev-apk.enkept.com
staff-dev.enkept.com
super-admin-dev.enkept.com
user-dev.enkept.com
baocao.23creative.vn
lich.23creative.vn
5581exam.com
www.5581exam.com
www.alexyork.net
nivra.alpaca-byte.com
alpareza.my.id
b2b-liff.amsel.co.th
autovivid.in
led-sim.b-craft.jp
bahayarugainc.org
berkgames.com
cbisexam.com
celerity.com.ar
celinaclimatecontrol.com
chatwithkhushi.online
cnetest.com
www.cnetest.com
www.conectotem.com.br
crnastudy.com
www.crnastudy.com
www.datavelopers.com
ddtechnologies.id.vn
www.downshimau.com
portal.dxbitz.com
www.ebright.ca
www.fajaraina.my.id
www.fermentory.app
www.fis-racecourse.com
esim.flyer.tel
francesjuror.com
fusion5projects.in
gcfaexam.com
www.gcfaexam.com
profile.karaage.saitama.jp
kopabrands.hair
www.kopabrands.hair
ailin.ktrips.net
ailingo.ktrips.net
lingo.ktrips.net
lumentu.com
lunexaeldercare.com
magicofjen.com
www.martinsboreholes.co.za
bonus.midcitypizzauptown.com
eat.midcitypizzauptown.com
food.midcitypizzauptown.com
grill.midcitypizzauptown.com
menu.midcitypizzauptown.com
order.midcitypizzauptown.com
www.mooshfy.com
myomerge.co
www.namong.ai
ncrcexam.com
www.ncrcexam.com
nebcexam.com
www.nebcexam.com
numerusplus.com
creators.offyougo.com
paconut.com
register.patsonpharma.com
raaluxe.in
rejectedidea.com
bonus.restaurant-buergerhaus-weiskirchen.xyz
burger.restaurant-buergerhaus-weiskirchen.xyz
cook.restaurant-buergerhaus-weiskirchen.xyz
eat.restaurant-buergerhaus-weiskirchen.xyz
rimandcare.com
www.rimandcare.com
admin.sautikit.com
securityxtest.com
www.securityxtest.com
auth.sejong21c.com
shadowmc.qzz.io
careers.simexa.io
shared.sklimaulimau.com
smartroomspro.com
www.smartroomspro.com
www.srizonx.com
form.event.tools.ssst.dev
admin.transfercromos.com
www.ucueducationaladvisory.com
bonus-sbobet.urbanecology.ca
bonus.urbanecology.ca
sbobet88-ca.urbanecology.ca
visitingbob.com
www.visitingbob.com
www.vsdconsult.autos
wmladymary.lol
yalp.games
Other domains in certificate