Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bit505.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 10, 2026
Valid Until
October 08, 2026
40 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3B:EC:62:F2:C9:29:FE:CE:61:DB:B7:29:64:3C:CF:00:B5:B2:14:D6:35:2F:37:34:3A:05:EF:FD:BB:73:EE:9B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.cerrolobos.com
3dplug.com
brainsnack-test.42puzzles.com
www.50covers.com
adverb.dev
www.appcarguio.com
betgen.ai
binaryunifiedtheory.com.au
bit505.com
csworkindpasswordreset.capitaland.com
clearretro.com
election.codervai.com
link-my-story-box-dev.comobi.io
game.counterswipe.com
counteverything.app
legal.cyrabogados.com
www.dave04711.com
debitcredit.app
ship.delto.ca
www.depara.com.mx
dmvglassllc.com
admin.shelf.doctorbook-cs.jp
www.drive4up.com
driveready.co.nz
admindev.enezatelecom.com
enovavision.com
fanfiero.com
6th.fcis2023.me
www.fewo-sternenblick.de
share.floridaimmigrant.org
kuni.ginnypix.com
gnemo.com
ariyalur.gosmartdroptaxi.com
chengalpattu.gosmartdroptaxi.com
chennai.gosmartdroptaxi.com
dharmapuri.gosmartdroptaxi.com
dindigul.gosmartdroptaxi.com
erode.gosmartdroptaxi.com
kallakurichi.gosmartdroptaxi.com
kanyakumari.gosmartdroptaxi.com
ws.heavenya.com
hindsite2020.ca
dashboard.igive2.org
indaohub.co.za
app.invintum.com
www.kitchandklozets.com
www.app.kundappen.se
sima-develop.libcom.org.br
lmahattah9.com
markgoodwin.dev
test-telemed.mayamd.ai
bo.merchantgamewallet.com
metalworldsteelandwelding.info
mihailpanayotov.com
mindfox.com.br
www.mrdiamond.com.tw
msafi.com
www.msktlab.com
mtgtradingpost.com
nuvitolpharmaceuticals.com
oneid.ae
oome.app
console2.order.place
prazdninovy-domek.cz
reporting.preview-solutions.com
projectsthestones.gr
prowashlaundry.com
quiz-agente-immobiliare.it
quotee-app.com
renaultgpsupdate.com
resplugs.co.za
static.revivalapps.com
app.satisbrasil.com.br
2022.scalamatsuri.org
seau.be
selloop.ru
dashboard.sentrypoint.ai
app.sevilladeboda.net
www.simamdigital.com
starlex.ai
barbearia.startempresa.online
stefanmwierda.com
storytimewriters.com
stowgrow.com
ux-ui-resources.studiodito.co
paintings.suryaran.com
thesiliezarwedding.swanmoments.lat
go.tag.express
thegeekacademy.net
firebase.tilde.digital
www.tncollectionsatty.com
staging.widget.travelity.app
trekk-sale.dk
dlink.truemoney.com.vn
auth.tryrecite.app
tutecnicoapp.com
admin.waching.store
portfolio.watertechstudio.com
www.wqiu.org
www.www-japan.com
Other domains in certificate