Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=povtiki.denolk.dev
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 07, 2026
Valid Until
October 05, 2026
46 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A7:90:F4:3C:73:A5:5D:7D:8C:85:97:E0:28:4E:E7:A0:35:DE:E8:CE:AF:10:1F:91:C4:76:B2:41:04:D6:75:CB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
vocetta.io
auth.aiteams.au
link.andray.xyz
heima.annleis.no
www.apprison.app
apriculture.ltd
graficos-develop.arco.org.br
www.ashreinu.app
vn.atpos.net
auxen.app
aventurasdanaki.com
babybloom.live
students.bim-app.at
aplicativo.biofamed.com.br
bloodconnect.life
link.burncal.fit
buzme.app
treinador.cognivus.com.br
www.compravipcar.com.br
www.dekenapp.nl
povtiki.denolk.dev
sl.echochat.live
ectivi.com
transito.eldorado.gob.mx
figurinhasdacopa.app
auth.flexfitgym.app
www.fulladministrador.cl
verdict.genesisvcs.com
grit.security
tickets.grizzlymininggroup.com
web.handyandy.com.do
pg.joblumin.com
pgapi.joblumin.com
jotintent.com
jurabarbershop.cz
kabakumnatural.xyz
kingsclub.games
kishaloyglobalschool.in
krapor.com.tr
kts-beaute-nomade.com
admin-dev.lamfoods.vn
bb-dashboard-dev.intranet.leafsoftware.it
service.live.inc
playground.logicbloom.co.in
lpkohayopeduli.com
launch.magicmounta.in
www.metrolabs.ai
mgpautoparts.com
www.minutogol.com.br
movefreesportsrehab.com.au
auth.mybreakpoint.app
myhikmah.com
www.myhikmah.com
haumea.nac.africa
nguyenphuonglan.com
fitgirl.nitinchotia.me
nubiz.app
ostdeutsche-obdachlosenhilfe.de
ovoodoc.com
pflegedaten.at
www.pingng.org
www.prahitaengineers.com
www.probethink.com
raynor.tech
www.realvibe.dev
schott-staging.recruiting-solutions.org
25thhour.rndr.studio
app.schul-netz.com
www.shivsys.in
www.sisis.com
skyhub.app
sortex.me
souplady.app
aisearch-uat-rysehomes.speculo.ai
www.spheverse.com
test.sqad.com.br
texansfordtailgate.sqwadhq.com
www.stelaxis.com
animals.strangeryoyo.com
www.syncsharp.com
apollonea.tadafaba.eu
www.tamilnadudroptaxi.in
www.tesnim.de
www.thelemonadetraining.com
www.tintegra.cl
dnow-vendor.tms.one
tojumi.cz
manual.trimbleconnect.cz
tupsicodeconfianza.com
lich-van-nien.tvl.io.vn
udra.ltd
fci.uteq.edu.ec
fslink.uxsquare.co
www.vermarsh.com
partner.vnetwork.vn
dev.volvetech.com
www.wapini.cz
den.wedmet.com
wtpi.org
admin.zugar.co.in
Other domains in certificate