Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.spicyfingers.us
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 21, 2026
Valid Until
July 20, 2026
65 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C8:C0:D5:CE:A4:1B:F2:D7:12:59:47:00:E5:17:05:D4:83:3D:2B:04:E3:0E:44:37:96:C5:D9:74:BF:31:7E:B8
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
trialcard-admin.phasevia.com
trialcard.phasevia.com
api.cammington.28east.co.za
aipicstudio.io
lcex.algofunds.in
liff.anychat.tech
www.artemporium.xyz
www.autobms.mx
automaisbh.com.br
www.baltorx.com
barcelonamap.eu
binarka.tech
bluntlushstudio.com
www.bostontechnicals.com
brandifygrowth.com
tictactoe.broccolirecords.com
cafe96.in
www.capyai.com
castnconnect.com
pre.cu-ra.net
datanex-gmbh.de
djvibes.org
dszero.com.br
expressbooks.co.za
fdoors.com.br
staging.femecub.com.mx
devfest.gdgcraiova.com
www.gilamset.uz
gpx57.ru
www.gruasulivarria.com.mx
hacklabs.app
www.hiscript.in
iletaitunediet.fr
imaginecreateexist.com
demo-lite.impactoss.org
ivaigas.com.br
microfrontendproblems.jenniferwadella.com
prodo.joseaugustocontent.com
maps.joyworks.me
auth.karoteno.org
keepinmind.in
klawonline.co.uk
admin.koderia.sk
explore.leeds.ac.uk
betaapps.level.travel
www.locandaalpioppo.it
lors.hu
www.maddragonfoundation.org
www.malayalihub.com
www.mantraroom.org
ai.mibot.cl
app.mine-papirer.no
multristan.fr
my-guide.co.za
www.oneheartgame.top
otovera.net
firebase-functions.pinchos.se
pizzariaimigrante.com.br
app.portalmudari.com.br
reporting.powerproleasing.com
practiceasy.co.uk
www.projetosmecanicos.com
radhadesignerstudio.com
www.rcg.dev
reachmanagement.se
rembetikaapp.com
www.remmy.pro
resolved.social
treaty.dev.resre.bm
www.riddleindia.com
app.rist.edu.au
rivermall.it.camp.robocode.ua
runes.dog
scottlittle.org
get.shape.care
app.shortwave.com
sigvane.com
himolde.snapmentor.no
www.spicyfingers.us
www.steven-munoz.info
admin.svenson.com.mx
stage.seaprojects.theseabay.com
thwoo.party
mission-control.transupport-app.com
uat.transupport-app.com
www.urustoko.com
join.urxcommunity.com
app.utt.vn
vincenzoerosalba.it
wakerobineco.com
www.wakerobineco.com
wakerobinecology.com
www.wakerobinecology.com
webappsengenharia.com.br
webpadplusplus.com
watiq-parent.wiotschool.com
partners.wishwash.com.eg
withoutlogin.com
preview.yourappcreator.com
www.zerocupid.com
Other domains in certificate