Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=companion.pulpouplatform.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 15, 2026
Valid Until
October 13, 2026
53 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
7F:C6:76:4B:66:FC:B7:84:66:72:79:46:CD:C3:7A:A5:01:73:BA:CE:40:B3:9D:D2:74:B6:43:90:D2:7A:8C:75
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
wavecoding.site
www.wavecoding.site
aigovsuite.ai
alruknalmaly.com
app.alruknalmaly.com
auth.arunikapocket.space
astore.askirgames.com
axela-j.com
bailong.fyi
order.bulldogpizzaandgrill.net
cabanaspacenas.com
auth.cesje.pl
depth-insight.com
forum.depth-insight.com
lab.depth-insight.com
simchal.depth-insight.com
www.depth-insight.com
desigiftwaala.com
ditchr.app
www.ditchr.app
www.duplaem.hu
auth.endsidedevelopers.com
store.admin.fabsoft.in
firstpasssystems.com
www.fleetop.eu
movie.fooyee.com.tw
staging.funnel-spear.com
geoscan.cloud
auth.glasskoala.com
www.golden-news.com
gtechsolutions.buzz
www.hemingwayslakeside.com
hexadecimalassets.hair
www.hexadecimalassets.hair
impactbyappslure.com
screenmaker.interestingmachines.com
jgtservices.autos
www.jgtservices.autos
kindsplate.com
www.kindsplate.com
challenge.koepd.com
www.kurboed.com
newapp.lewifinance.com
mellove.my.id
www.mindlanesolutions.com
morleygp.com.au
app.myinterviewcopilot.com
neoprisma.tech
niohive.com
nish.global
payroll.nogosolutions.com
nuaspect.in
hoya.onlypromo.com.br
android-dashboard.opwoco.net
www.palettecare.com
peafield.ie
www.plushabyss.com
pokiyo.com
profitfactorai.com
stage.propiq.jp
prosuelo.cl
companion.pulpouplatform.com
www.rankanddraft.com
www.ravenorcars.co.uk
www.reelifymedia.com
motogymkhana.return-value.hr
rgcleaningsolutions.com
www.rtsglobal.lat
scholargat.com
www.shunxi.icu
mtm.singhhydraulics.com
smrutispintex.com
www.smrutispintex.com
app.solaraxis.net
solvern.com.au
solvernconsulting.com
spango.co.in
www.tapmonet.com
eumathes.tidann.dev
android.trei.dev
trelisapp.com
www.ttd-service.com
www.ujay.com
uniprepca.me
demo.app.vecinova.mx
staging.app.vecinova.mx
www.velmaaral.autos
vintaris.com
web.voyagetogether.com
wolcottlandscaping.lol
www.wolcottlandscaping.lol
www.xiangwentrade.buzz
xiangwentrade.buzz
www.yesurafiki.or.tz
www.yteventures.hair
yteventures.hair
yui-con.jp
zettaiousei.com
www.zhangjiening.mom
zhangjiening.mom
Other domains in certificate