Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.lapachoweb.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 24, 2026
Valid Until
October 22, 2026
74 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BD:4E:F4:86:DF:2D:41:F9:C4:BF:DF:88:F1:17:56:A8:F9:BF:A7:5D:4B:4A:C2:2C:06:5C:EA:C2:50:0B:0B:04
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.powerchess.buzz
trial.aimhub.org
kawaii-islands.airight.io
albkredit.al
plan-app.antengi.com
www.applitic.com
atlaspath.io
audio-art.me
www.autrered.com
www.axerontech.com
barrier.technology
chat.bookingcare.vn
boxtobox.pro
www.boxtobox.pro
citizen-copilot.braincoders.io
bundeshamsteramt.de
bureauofinnovation.org
nocacademy.bytekast.io
pass.callhelp.pro
ckstores.xyz
cozycatch.fun
cthhandy.mom
www.demokratio.net
trv.developerweekend.com
www.djandyjuice.com
eclipsiaidle.online
enfolo.com
www.esportindia.in
covidhk.feli.page
panel.forkfix.online
robots.frc4322.com
gestaotesouro.com.br
dev.nurture.goama.com
www.gobulldogs.org
www.guidefastly.com
hearttracker.app
helliknow.shop
helpersfy.com
2.honk.international
distributor.hornvin.com
hydara.hair
www.hyjinx.autos
ika-tech.com
intellidip.com
www.joschiroyaifan.com
www.feedback.kfz.website
kithstead.com
test-blog.kutosi.com
www.lapachoweb.com
www.logixair.com
auth.makeforms.io
habits.maximemoreillon.com
miaanne.autos
www.miaanne.autos
freelance.mikelkamel.com
myho.modudakorean.com
morningbuzzllc.com
auth.msvglobaltech.com
www.noanaamat.com
okeefarms.buzz
fes.orpheo.cloud
www.pensioenbijpno-b.nl
pfona.com
plaper.ca
pornotvyhodedy.cz
manage.vis.poweradmin.io
www.prinsmike.io
publicolegalgroup.com
consultorias.finx.qitech.digital
www.ranshe.autos
replaymidia.com.br
reviewbikes.net
www.reviewbikes.net
riveroflovecom.net
rizzelle.in
openapi.salttreasury.com
cdn.savedby.io
lms.scoutabouelhole.org
shokkandawe.co.uk
snacktab.com
www.soab-portal.com
www.diadelpadre2026.solucionesk-9.com
www.spacedanta.com
api.words.stencil.ltd
www.stopsantefamiliale.fr
techlinechile.cl
thirtyplus.app
tiafraneventos.com.br
qr.transmigrasi.go.id
tunieken.nl
ukibc.ca
links.test.myid-idp.unifiedpost.com
vanillasoftwares.com
www.vanillasoftwares.com
verazoai.com
vipbydebian.my.id
app.weareilluminaughty.com
www.weiarch.mom
why2.studio
zenvaor.store
Other domains in certificate