Open
Cached
·
48m ago
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=m.upwire.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 25, 2026
Valid Until
October 23, 2026
64 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EC:48:7C:46:20:AF:AB:B0:E5:7F:A8:A7:F1:A7:B3:8D:19:72:C8:92:67:A2:20:86:61:B4:7A:97:A0:C9:21:F2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
transdigitalcoop.com
joy-sectional-config.3dcloud.io
adda365.xyz
laep.dev.advanced-infrastructure.co.uk
www.agentdana.com
aimgtpro-portal.hermes.aimgt.info
allhearingaidrepairlab.site
amministrazionitorinesi.it
oticasdinizb2b.appshare.com.br
arcane-ascension.com
test4simplify.arcodex.net
minutes.app.arrx.uk
www.badedaujivrindavan.in
testing-app.beamian.com
bethebest.online
www.binbetter.buzz
www.breezystud.io
brightwayclasses.com
ima-protect.calizy.com
careerlenss.org
lachucheria.carrta.app
cdewco.shop
www.cheerfulnews.co.uk
cjisys.app
clearedaboard.com
www.clubcaninbuzetois.be
ops.cnbl.io
www.codeconclusion.org
cdn.consentio.dev
www.score.deportareclub.tech
skymaster.dreyou.org
www.drjohn.dev
dev.app.emmerce.ai
perk.ept911.com
legacy.fantasyfitnessdraft.com
foecontract.mom
www.foecontract.mom
exp-ideacloud.forgedx.com
admin-dev.futurebrights.com
geologpro.com
www.geos.rs
bap-framework.gonzaloarenasf.cl
gordonculletto.com
www.gossiplandia.it
grantlogiq.com
www.guilhermebarbosa.dev
ela.hmh-waggle-teacher.com
hyruleholdings.buzz
www.hyruleholdings.buzz
app.ilima.co.za
celestial-on-fire.janabuchmann.de
kaijufighter.com
www.kaijufighter.com
karinasands.com
status.konflinx.com
koto-app.com
kroko.cl
test.kwil.io
handi.kykint.com
laxmiew.in
learntheclock.net
lemfiapp.com
www.lepin.co.za
www.leventaltay.com
lifacollective.lat
www.lifacollective.lat
lokaaliving.hair
www.lokaaliving.hair
ltshotels.com
macoexpo.com
explorer.mindkiss.com
www.mix-up.app
link.mljy.org
morgansmammoths.com
nortesupply.ca
nov-ix.com
optimal-works.com
app.playlunacross.com
personalities.poyopoyo.net
pulsecaller.com
recompos.app
risumresort.com
rouslambotiev.com
royalgoals.se
www.schoolbridge.jp
shizuka-moment.com
www.soehren.com
speedle.fun
timberrattlerstrivia.sqwadhq.com
www.suntex.tw
app.tasmanfuels.co.nz
www.tblogs.site
tidify.io
prod-friend.tips.sg
www.tourify.pt
trouter.me
uprize.club
m.upwire.com
docs.vecros.com
wildmechs.com
Other domains in certificate