Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=larf-emp.livearf.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 08, 2026
Valid Until
October 06, 2026
31 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C9:48:E2:53:F1:E0:32:4E:40:F2:87:55:9F:1B:4A:45:5D:B6:1D:FA:AA:FF:A8:5A:AA:7A:C5:78:B5:51:30:93
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
tinkerlabworks.com
aurora.3ofus.app
staging.affixdigital.com
alekon.io
cotizar.alphatech.com.pe
aqladigital.com
astronia.at
audaryadham.com
azmartialarts.com
gamesadmin-jpj-devlondon.bagelcode.com
m2hlaundry.batamx.co
benjaminhuth.com
www.blocokvoltaredonda.com.br
card.boogie.pw
gdi.cabezadepondo.com
casaelvivero.com
admin.demo.clevernet.app
clickpedi.site
s.cocolis.fr
merchant.commerceq.com
admin.connectsx.com
www.cristianbote.com
swaggybarkborc.cydex.dev
danielmanley.com
www.desoid.com
df-eng.com.tw
drhussamabbadi.com
eksagono.com
stats.essensi.se
www.ewpodologia.pl
darulezkar.ezkarapp.com
fabianrapp.de
app.faithandmedicine.foundation
frontshift.com
fyreforms.app
auth.geoschallenge.com
graspagain.com
app.helpersnearme.com
opero.tracking-dev.hosannalab.com
event.i-grove.com
iantomarcello.com
immosimu.com
clubfitnessgreenvalley.impactwrap.com
qual-notifier.input4you.be
app.hsr-manager.ivlivs.dev
thethread.ja.plus
test.jamesnowecki.com
www.javascriptcheck.com
www.jawharadiqatalmustaqbal.com
jayfontanini.com
joashcoldrooms.com
eopapp.kbcinc.cloud
aerialhouse.support.koraxis.com
www.aerialhouse.support.koraxis.com
learnwithai.co.uk
www.learnwithai.co.uk
larf-emp.livearf.com
admin-dev.longevityhealth.me
admin-test.longevityhealth.me
admin.longevityhealth.me
magicflow.magiclearningclub.com
www.makegoodsmall.com
www.mebledomino.com.pl
login.mercyroad.church
momot-consulting.de
www.mydsun.com
nationalsteelmart.com
qarsa.organonadvisors.com
www.par-t-cart.com
patronscan.com.au
patwaritools.com
www.progressivetooling.com
uy.pronto.com.uy
protectorofbalance.de
cv.quarksolution.com
rakumi.jp
www.rngcore.com
sanfried.de
sharpenyco.com
sitewisepro.co.za
www.sludgefunk.com
spicytakes.club
statelinerealestate.net
suvoda.lk
web.takainvest.com
tbs-line-app.jp
thesingarajah.com
tsdclientdev.thesoftwaredispensary.com
tomei072.com
www.trickfilm.com
pro.uat.truckrs.co
unitranslogistics.com.ua
recorder.userlook.co
uspaces.com
www.velo-x.com
www.verbatic.io
vinsaura.com
chat.voipcom.network
yc8gg5.com
fencicift2.yks-studybuddy.com
Other domains in certificate