Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=accounts.boxado.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 08, 2026
Valid Until
November 06, 2026
56 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4E:D7:24:BC:BB:E3:57:ED:47:D5:DA:26:53:BA:78:5A:3C:DD:E7:96:7D:63:B2:35:8A:F6:86:F4:9F:89:B3:AE
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
therangerbridge.org
hive.12traits.com
1hpgames.com
www.alperenkarakus.com
wachusett.get.staging.alpinemedia.com
app.alterum.energy
anassfakir.nl
apptarget.ai
aravaliinc.com
www.askforcode.de
auspair.com
benitogonzalezsax.com
www.bijelidim.hr
pay-dev.billmybank.com
coleccionaballs.blderdog.com
bloom-st.com
www.bloomtherapypnw.com
booksplusapp.com
accounts.boxado.com
alumni.c-link.consulting
calebfrey.com
www.causewaycoaststays.co.uk
companiaplus-kiosk.cbdata.cz
cfe-portal.com
www.choudhry.org
visiekaart.cinab.nl
codesociety.xyz
auth.consteelsoftware.com
www.cybertowel.studio
decidebetterdaily.com
dolcecabanaband.com
app.eatpresto.co.uk
edd.skin
www.egmontsignatur.se
elsewhereretreats.com
erickborges.com.br
fgosearcher.net
fl-swimming.com
app.fortunefx.xyz
foureyedjimmy.com
joanne.frankmonaghan.co.uk
freezeofresh.com
getdaisychain.com
getrealhappy.com
ginshohawaii.com
hal.best
signin.harmonize.social
herabouw.nl
howlongtowork.com
iafolio.com
www.igeos.org.br
quiz.inclose.com.au
isabellenadeau.ca
jandroid.pl
scanner.jdgroup.net
auth.justsell.co.nz
jv-coordinacion.com.ar
www.keacast.app
collegites.logicsyner.com
www.lvilepek.fi
playground.lyreai.life
mademedia.tech
link.mateusmais.com.br
flatte.maxabab.com
library.mckayyoo.ooo
mertgoksu.com.tr
palettable.momar.me
link.mycirrus.app
www.nazeerfresh.com
www.pinganoriental.co.uk
psahay.net
quicksolz.site
www.qyn.app
admin-staging-4.rapidsearch.app
rats.pw
dp.replied.ai
treaty.resre.bm
www.ruhland-kallenborn.eu
scottishsolwaywildfowlersassociation.co.uk
sellme.vn
www.serpilayasli.com
www.singinglessonsderby.com
staging.sios.life
auth.smartify.org
soccerplayers.app
speticcleaning.com
bodayanesmontenegro.swanmoments.lat
field-main.tapraise.app
auth.tc2u.com.my
my.terra.do
trekafeast.org
www.tedx.ucu.edu.ua
talcar.uveye.app
valordaviagem.com.br
visitor.in.ua
wealth-mentor.app
weathercharts.app
wheelhouserobotics.com
evtest.wonder-sys.com
xtrend.com.br
Other domains in certificate