Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.octakode.xyz
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 08, 2026
Valid Until
November 06, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3F:40:52:FE:9D:B0:29:4D:EB:C2:94:CF:E6:26:3F:D7:EF:BB:5A:7A:BF:D7:C5:92:41:9A:2C:FD:5C:83:F0:34
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
undsie.com
300code.net
acss.in
www.agriscan.app
s.aloha-group.jp
project-delfus.apolus.ai
www.autonomous.ro
public.blseclub.com
boat-health.net
dev.api.carmigo.io
www.chennaiinteriors.in
cobbsynergies.com
comiccon.co.il
www.comprehensively.com.au
melocacoes.contatoja.com
dayatwork.info
www.decitto.de
demo.donornode.cloud
ebz.co.in
equbd.com
www.evodex.net
www.fractalix.dev
frontend-specialisten.dk
www.dashboard-dev2.fsv-aptor.com
hooks.getpowerlink.com
arc.gettwoit.com
grahikaastro.online
greenajobs.com
ecard.grkdesigns.in
grupojcr.srv.br
hawaapp.in
heelhub.app
place2bu.herstelverzoek.nl
hydra.page
ibirri.com
qa.idmx.io
promptix.imtechinnovations.com
innovapharma.com.py
insidethelistings.com
knowledge-base.instacover.ai
www.iotdataroom.com
www.isv.iskconmsf.com
jetcodelabs.com
jodwise.com
www.jsonviewer.tech
apply-admin.judicialappointments.digital
juliswkg.fr
skym.jupiterpi.de
cad-converter.kanoonth.com
ebb.kmutt.me
www.kowe.cl
kyobesafarisug.com
legacyprobates.com
lunchon.jp
docs.modalai.com
mustangclub.fr
videomind.nirixai.com
www.nopearengas.fi
appdev.number-boat-share.com
www.octakode.xyz
boname-gerling-quartier.kiosk.operate-app.com
www.orcacke.com
auth.telegram.orrora.com
whitelotus.piticommerce.com
podhub.biz
upload.producttube.com
auth.c-coffee.pyjri.com
rajfacilitiesandservices.in
saborinoslot.com
sahyadricarbon.com
portal.shasthoboi.com
internet.shoharab.com
shugunrapper.com
care.sidekickhealth.com
www.smartliving.com.ar
spaceagelabs.com
sphinxsugaring.com
backoffice.spirit.com.do
www.sreprintograph.com
srkgranite.com
sms.standardbell.com
vusers.stefan-blattmann.com
app.styles4nailz.com
www.sukoda.ee
app.swllearn.com
www.synamic.au
testapp.tapuniverse.com
dashboard.teil.io
thecreatorstudio026.com
app.toelsner.at
manitobaexplorer.travelmanitoba.com
twisen.io
www.urlvayu.com
www.urp.in.ua
vikrayashaala.com
manage-stg.vonder.co.th
www.vzguille.me
leidselente-orders.waiterpro.com
wearedogfight.com
wyzz.io
Other domains in certificate