Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.tadhg.co.za
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 06, 2026
Valid Until
July 05, 2026
53 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
35:8E:5E:34:30:20:A7:88:DF:59:93:FF:69:DD:94:66:56:03:99:BB:82:CC:58:3A:68:67:F8:C8:4F:52:28:8F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.rootables.app
aebexlogistics.com
afterdarkeventi.com
akarilmu.com
joinkiddles.akarilmu.com
all4gest.com
almaghrebtours.co.uk
www.anpalabs.com
avaliacaodefiltros.online
painel.axerweb.com
beianvip.com
www.beianvip.com
bigtreeselectric.com
login.binxly.net
bodhi-hub.com
step-count-ranking.bpmjapan.co.jp
bsfmonitor.me
rms.bytize.in
carmenmoriana.com
wallet2.cbmt.io
chaggerheart.chagcorp.com
www.classfit.in
cliqestimatebuilder.com
combineeducation.in
cotable.net
daitona.pro
www.darsforyouth.org
datalent.in
deaness.ge
derehavered.co.il
perficio.digi-can.com
draftnode.in
echorise.mx
emsgabon.com
p3.enigmahouse.jp
farmer-jack.online
www.fazendosimples.com.br
www.flowcus.in
fockon.com
www.friender.kz
getimpostergame.com
nft-ticket-admin.getlychee.link
golexos.com
govindkashyap.online
gym-seek.com
haru.tech
hatiftech.com
hellosummercamp.com
hminsn-nir.com.br
www.hunting-optics.ro
cartaoresposta.intelligenschool.com.br
irasolution.co.in
irristore.ma
www.jayce.life
jm-alustal.pl
app.kait.com.br
karaagekid.ca
west.kikaru.net
app.knowflow.nl
krystalsoftware.com
lasxd06003.com.vn
maltia.mx
metabatida.app.br
multiotools.com
pic-bingoalnl.mentor.neccton.com
nextklub.com
auth.admin.nommelier.me
www.onefend.io
www.percentagerforynab.com
perm.fyi
webapp.picowan.net
prebedai.com
pricemirror.in
www.pricemirror.in
hello.railboard.com
refaclic.com
www.refaclic.com
refaclik.com
dev-photo.runport.run
ryanclark.dev
domainmonitor.samtech.solutions
plan.skul.no
smithbrosdetailing.com
www.smithbrosdetailing.com
supportmyevent.com
www.tadhg.co.za
racrgd.edifyin.teamin.in
www.fall-stage.telehearportal.com
app.texolenergies.com
auth.torit.sh
dev.trackmygiving.com
trendygrow.com
cursosmedicinaintensiva.ub.edu
dashboard.w3lcome.com
api.waapp.me
whitebalance.co.in
ari-nails.xtaticstyle.live
www.yargies.com
dashutsu.zacherl.dev
zenreki.network
Other domains in certificate