Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=dashboard.dev.mlt.nextgatetech.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 14, 2026
Valid Until
October 12, 2026
51 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F6:D3:FB:A3:A4:25:93:35:F2:B9:90:96:AF:0D:9F:31:D4:2F:32:A6:3D:4B:CD:2B:A4:54:CA:86:C1:70:C1:89
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
travalris.com
jlp-curtain-configurator.3dcloud.io
aidadjoke.com
auth.aiheadshots.us
www.algalon.network
app-vitabilanz.de
arca-wms.com
app.service.aspenproperties.ca
www.baur.dev
qr.bhit.com.mx
blingames.co
bomh.co.ke
www.buildertracks.com
lachucheria42.carrta.app
ccascursos.mx
cdigi.fr
admin.chepex.com
chunkydoodle.com
app.coachlydia.com
pro.colavo.kr
www.cysero.org
dayoneapps.com
app.ducmien.com.vn
www.e2o2.com
www.easybollette.com
eliteinteriorhub.com
www.engilyin.com
www.epoch-innovations.com
expertplanner.in
ferhelen.com
comingsoon.ff-frotzersricht.de
auth.finlayfitnessservices.uk
geekbar.pp.ua
www.genshincv.site
preview.greener-buildconstruction.co.uk
myriad-n-va.groupeducroquet.fr
www.hoewerktmijnlichaam.nl
bunbunapp.impossible-labs.io
www.insight-arch-lab.site
www.ivaziconstruction.com
testriderandroidchat.jeeblynow.com
jhn.solutions
tourradar-sdk.joinsherpa.io
kagitucak.com
www.knowvic.in
www.ktegames.com
lakecityfamilylaw.com
lexiportal-app.leximancer.com
liftlabs.app
sunbelt.linklogiq.com
manipulator.cc
go.mapnia.com
auth.marqueiapp.com
cn.marsstone.net
larbins2.admin.maxentwickler.site
maxpayette.com
meridianocerotravel.com
mesogeios-restaurant.com
microdens.shop
mpksdai.co.in
www.multimarca-cundinamarca.com
multinow-games.com
desafiodos30dias.mundoarcoirisartesanato.com.br
boost.neetechs.com
brandkit.neetechs.com
proof.neetechs.com
dashboard.dev.mlt.nextgatetech.com
www.novigado.org
olijothi.com
www.pagosescuinapa.com.mx
prisonballmanager.com
www.recons-ltd.com
rentkirkland.com
riotech.ar
happy.ronne.dev
runningbullmedia.com
samasrawellness.com
wfdcmbqznst2mqpsugot.smartimob.io
smokingtiger.io
softwaredefinedbuildings.com
f.sounter.com
www.spacereport.news
spazawise.com
stephaano.com
sthokar.com
surgeonsforsurgeons.com
talestonini.com
sports.teethclean.jp
go.ticketbro.com
trenzyfinancials.com
tukangweb.xyz
union-bauzentrum-hornbach.com
waldsee-consulting.ch
dishub.wasdlabs.com
webbeon.io
app.portable.wellon-sol.jp
www.xplorence.uz
paggx.xptoconsig.com.br
www.yssolutions.org
zinxstudios.com
Other domains in certificate