Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.caracciolocapital.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 08, 2026
Valid Until
November 06, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C6:6B:73:D4:90:57:72:FF:04:9B:39:EA:5E:39:23:AD:AF:C6:F1:17:02:C2:71:16:79:31:34:F7:03:83:86:1A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
thakurassociates.in
4dservice.in
jasdashboards.4sightai.com
9group.dk
collections.arsbrevis.net
pro.auxilia.cloud
frantisek.bachrony.com
bangaloreooh.com
rp.becare.life
www.caracciolocapital.com
christianlopezcarretero.dev
telemedycyna.cmryska.pl
colorante.ru
www.crazyoats.es
cs-code.de
danukstudio.com
dbroker.es
www.dearsinatra.com
directlines.gr
app.dev.dronelink.com
duskstudio.design
www.dutapermaitravel.com
www.edhub-int.com
engrand.in
eroul.ro
esenlertesisat.com
findback.org
app.globalfarmersconnect.com
gutterguys.co.nz
hah.sg
hangtime.me
www.hapticcafe.in
hearingloopdesigner.com
idassist.in
www.instrutorfernando.com.br
jane-lee.org
juegasusu.online
www.juliswkg.fr
kasbahdades.com
www.letsdindin.com
localdatakit.dev
auth.localm8.com
luismeta.it
lulwowbeauty.org
dev.m-link.no
www.marcosdetilio.adv.br
marketingprint.com.co
app.matchnwatch.com
www.maumcrafted.com
www.motelkazary.com.br
nhadatdlk.com
norths.jp
auth.noveru.site
www.oksi.fi
billing.openeng.ai
oryza.me
yaaker.ovisly.com
palamurustrikers.com
parasiempreguerrero.com
pasportuj.cz
www.peacelandprivatecompanyltd.com
www.pensiunsyariah.com
quanly.phcndn.com
www.picantefm.live
homol-crm.pillowmed.com.br
prateekdev.in
propor.io
pushkarstudio.jp
app.quoteiva.com
www.qwickpe.com
reptop.shop
go.b2b.pa.ridegoshare.com
zappa.rnpi.ro
scdrytz2web.ryoyakawai.com
staging.sakazuki.xyz
schlangenexperte.com
pl.shelner.com
shribalajitravels.org.in
softcrestassociate.com
coder.solvixsystem.com
www.sparklingshine.co.za
app-dev.stailer.jp
app.rtls.tagntrac.io
agenttrace.techmasterconsulting.com
techmet.co.in
nebula.thecreatorstudio026.com
volumeflow.thecreatorstudio026.com
www.think007.com
app.tonytalks.nl
totallystrong.me
www.travelpremium.com.pe
www.tullmanntravels.com
vanaivn.tvl.io.vn
app.twilik.com
www.ucolcampus.com
vutc.fun
waillan.digital
bws.whyq.com.au
www.willingcharitable.org
api.zenapp.com.br
Other domains in certificate