Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=murale.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
September 09, 2026
Valid Until
December 08, 2026
54 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
8E:1C:54:46:41:4A:63:B8:81:B6:59:5E:F3:3C:6F:B7:69:23:E8:1D:B2:6B:36:C1:DE:50:F2:AE:36:5C:F6:99
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
66 domains
brakefluid.com.au
*.brakefluid.com.au
*.developer.brakefluid.com.au
230335.my
*.230335.my
*.3dflowing.agrolibre.co
agrolibre.co
*.agrolibre.co
*.bonswart.agrolibre.co
*.cafezendaya.agrolibre.co
*.cmh.agrolibre.co
*.com.agrolibre.co
*.continentalexpress.agrolibre.co
*.disenosypersianas.agrolibre.co
*.fr.agrolibre.co
*.lastitinas.agrolibre.co
*.lomiovale.agrolibre.co
*.magofractal.agrolibre.co
*.mundofractal.agrolibre.co
*.novedadespets.agrolibre.co
*.oceanpets.agrolibre.co
*.patineto.agrolibre.co
*.proveo.agrolibre.co
*.sumilab.agrolibre.co
*.therosebeauty.agrolibre.co
*.velarte.agrolibre.co
*.wija.agrolibre.co
businessmortgages.com.au
*.businessmortgages.com.au
*.dashboard.businessmortgages.com.au
*.portal.businessmortgages.com.au
*.random.businessmortgages.com.au
cleaningwarehouse.com.au
*.cleaningwarehouse.com.au
*.dashboard.cleaningwarehouse.com.au
*.start.cleaningwarehouse.com.au
*.store.cleaningwarehouse.com.au
*.console.corningwear.com
corningwear.com
*.corningwear.com
*.ww2.corningwear.com
eyff.cn
*.eyff.cn
hartford.au
*.hartford.au
hummel.live
*.hummel.live
*.admin.kassiounpaper.com
*.dev.kassiounpaper.com
kassiounpaper.com
*.kassiounpaper.com
*.prod.kassiounpaper.com
*.w.kassiounpaper.com
murale.com
*.murale.com
*.ww25.murale.com
ozobang.com
*.ozobang.com
*.ww38.ozobang.com
*.demo.sbangladesh.com
sbangladesh.com
*.sbangladesh.com
*.app.sentrayasaofficial.com
*.detaberlianmerdeka.sentrayasaofficial.com
sentrayasaofficial.com
*.sentrayasaofficial.com
Other domains in certificate