Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=app.carecens.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 29, 2026
Valid Until
October 27, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
26:39:60:63:E5:11:7A:D3:F2:CA:5A:94:98:89:53:4D:F6:E7:AE:BC:4E:84:54:B3:43:9F:B1:6D:70:10:16:38
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.lemonadalabs.com
addfluence.co.uk
www.agtlocadora.com
eadm.akirin.xyz
alexmacris.com
www.alexmacris.com
sso.littlesis.amplifiedlabs.xyz
system.aow.vn
links.arthuranalytics.com
aurlo.com
bento-board.com
editor.beonde.de
boringbuttrue.com
www.boringbuttrue.com
www.boylstonwrites.com
ekmsmart.carasista.com
app.carecens.com
cifrino.app
cloudsmartsharetech.cn
cognitia.ar
www.credskin.com
darqia.com
dna.darthvid.com
faelle.dasrelationship.com
www.debabhishek.com
dimo3dstudio.com
www.ditchyourcards.com
api.dev.dna3.xyz
www.ehaus-elektrotechnik.de
ereris.com
www.excel-exporter.com
www.fitsoco.com
florencebi.com.tr
www.folderwork.com
forgespex.com
fsyoga.com
greenhill.nl
nit.hubdorh.com.br
iloveshoppingforyou.com
hongkong.imacoco.world
www.test.iopsmobile.com
www.itribe.in
home-dashboard.jjax.de
www.jsbubbl.es
liorastays.com.br
little-letter.app
geocoding-comparison.locus.sh
loganlaski.com
louvemos.com.br
www.mgruszecki.com
www.mild2mirchi.com.au
www.mitresoftware.com
go.mminitiatives.com
www.nessgor.dev
dev.nobul.com
www.nora-und-henning.de
cgen.nts-whitecoast.com
h234l9hfmehn8q9b.staging.nyansget.com
oasisdigital.com
es.oilwellness.company
moto-circle.orbise.in
www.osition.com
advisor247.parkalot.io
dashboard.peakprofile.org
vandersmitte.pensioenstartpunt.nl
pfdaa.org
www.pinarmahallesi.com
www.postburro.com
www.premiumwebsitecreator.com
auth.prescatona.com
priceindiahub.com
primerestock.com
www.proportioncalc.com
rasmusgerdin.com
app.uat.riipay.my
act.ringastage.page
www.robertozepeda.com
rounda.co.jp
royjackman.dev
runejs.org
dev.scams.tips
skmfarm.com
www2.sonice-aioe.com
vue.sosasosa.dev
fbase.sosialbooster.com
souparnabasak.xyz
www.techwarstory.com
www.teckrevo.com
www.tennisgaspe.com
auth.zdev.therecoveryhub.com
traceychattaway.com
app.tracknicity.com
urinify.com
portal.prerelease.usenash.com
hannes.vdinl.ch
www.villonot.co.il
dev.visitame.pro
admin.waio.ch
www.wsgvmetro.hair
familiaeamigos.yesmktg.net
Other domains in certificate