Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=tendie.town
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 26, 2026
Valid Until
October 24, 2026
66 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
10:DB:84:DB:EA:77:AD:D3:38:73:9A:D8:7F:C5:EF:9F:F9:58:D8:F5:06:D8:66:B4:14:E9:27:85:AF:3B:1F:E5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
tota90.eu
724farklisigorta.com
dev.salon.9bo.jp
aibroker.nyc
portal.akrivisteam.com
portfolio.alexisgommet.com
www.allianceherrerawealthfund.com
andreasbagias.com
aquaroseirrigation.com
arabianmarineexports.com
360.atrius.io
audiblogs.com
salochella.aviamemes.ru
awaisshabbir.dev
www.basilanalytics.com
www.bastet-app.com
beanon.com
benny.blue
binalbruno.com
bkkplating2008.com
www.blindspotcr.com
prod.bombtrack.live
archive.buddhachannel.tv
3d.cammetalapp.com
lavitrolaypizzaretro.carrta.app
vitrolacafe.carrta.app
whip.caucus.io
app.ceovalet.com
clozi.me
comandosvigia.com
conectoenergia.com
countr.it.com
www.countr.it.com
www.deeptechsolution.top
dercocenterx.cl
portaal.despreker.nl
dgnpacking.com
auth-staging.dogonews.com
www.dont-scan.me
www.dottodotfreeprintables.com
tirunelveli.dropstaxi.in
buzonppg.emeriti.es
evergreencattery.co.uk
caarea.flitter.fr
flowlytics.org
gracekbeck.com
hamipet.com.ar
app.hello-shelfy.com
verify.hypertonie.app
api.iamcubo.com
consultancy.ilahihealthcare.com
www.ingericjuarez.com
tip.inter.mx
jancislinsky.cz
firecomm.jasa.name
kalloss.shop
www.kitjin.app
kushpa.tel
www.leavingthenestllc.com
lcs.leucotron.com.br
luizendocrino.com.br
malbeot.co.kr
www.dashboard.mathu.co.za
help-voting-uk.midw.io
stockcharts.midw.io
mikrojournal.com
minidungeon.xyz
www.movementtracker.app
muskegondevelopment.com
www.naturamotif.com
ntyamactivecare.com
www.onmybestday.com
opsartifex.com
pdfator.net
www.pedromichel.com
liveqa2.peppybiz.com
phasicharoen.com
www.picovisor.com
proscalar-go.com
www.qadcss.com
admin.rendezwine.com
rentpulse.co.uk
unsub.s2-marketing.net
demo.safeworks.io
sevenky.com
simplusenergy.com
www.skysurfer.international
slrsoft.com
provision.spbeu.ru
taraandphil.com
tendie.town
the-bellemontnyc.com
tokono.com
prunus.turnosweb.app
www.unpawspetstore.in
login.vegasloop.com
demo3.watchcomedy.live
www.yazawashuzo.co.jp
mayfaggion.zeero.tech
ceat.zolnoi.app
Other domains in certificate