Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=easyautomaticlessons.co.uk
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 01, 2026
Valid Until
November 30, 2026
78 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D0:DA:50:6B:75:54:EF:E3:73:5A:E6:8C:32:DC:81:76:2C:A0:AA:94:60:65:B4:02:C4:73:9C:BF:A5:AE:14:C3
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
app.kolectfinance.com
www.kolectfinance.com
abdulkadirgeylaniterzibali.av.tr
scan.abhiyanpa.in
acegcse.com
www.agristorz.com
apptherain.com
stage.moya.ascentic.se
emma.bagalini.net
www.emma.bagalini.net
www.api.becketto.dev
quacker.bscox.com
suryaqa.bytize.in
www.fifa-mod-studio.celtian.eu
admin.chatterslaundry.co.nz
crackmyinterview.com
www.crosstech.solutions
bpn.danidewitt.com
deelpix.com
designpatternsingo.com
www.dhyanlife.com
www.dkaleta.com
drafting.gg
dropptaxi.com
www.dropptaxi.com
biryemekiste.easyapp.co
easyautomaticlessons.co.uk
app.ejuno.io
www.entriway.com
healthpoint.evelynbauer.ca
expect.photos
hrdictionary.ezy-hr.com
staging.contactmanager.fastsigns.com
www.fgbmfisarasota.mom
fixtodoor.com
g-iaaprogettidi.it
galaxyhaulagesolutions.com.au
www.glancify.ai
globalstarmhs.com
uuidgenerator.helpersfy.com
hibengsart.xyz
hmsprecisionmachining.com
hoaally.org
dev.hoptop.org
staging.hoptop.org
houseofpace.com.br
ego.hughesdev.dev
ibabaiev.me
ilmondopy.com
write.jeffreyforman.net
old.kheyra.com
khshingi.com
www.kinkerlitzchen-kreativ.de
kklandsourcesandhomes.com
salon.kreatewebsites.com
link.kuenzle.cloud
point.laney.tech
lisa-spricht.com
www.lisa-spricht.com
fb.loteriadobrasil.com.br
ist.lw3.world
www.mainstreetcarwashrb.com
mashuperu.org
www.mojatoon.com
palacinky.mpau.eu
anticipos.mudanzastml.mx
mudanzastml.mx
www.nelrodriguez.com.ar
alpha.nothuman.co
nvrkr.com
stage.onmyown.fr
orthocustomgloves.com
overcontrol.co.kr
parcsol.co.uk
payking.kr
home.qr-pay.club
www.rentmytool.ca
workforce.safetyinminutes.ca
promptpilot.sageg17.com
seasonart.org
seikenenergy.com
dev2.skillhopper.com
www.sorteiodagalera.com.br
statesborowarhammerclub.com
stixsites.com
surplussolutions.com
taichivoorthuis.nl
take-innovation.com
tanfees.co
tecmash.com.br
solidvalues.tellurics.earth
timurugv.com
app.tool4pro.com
topradiojingles.com
webapplibako.com
app.wepoc.co
ibero.wispo.ai
wpxm.xyz
www.wpxm.xyz
semesterticket.yanniks.app
Other domains in certificate