Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=travel-agency.co
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 15, 2026
Valid Until
July 14, 2026
63 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FA:D1:DC:63:DA:31:4A:F6:99:91:85:5F:9B:1C:74:83:EF:38:B7:08:4B:24:D6:28:FC:58:AC:AD:57:38:0F:01
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.seqstream.net
suppliers.alaarabea.com
www.aldax-technology.com
portfolio.apdch.edu.in
auth.assetron.dev
bigcarz.in
life.bpm.app
smartmoves.brainfitstudio.com
brewvault.io
www.buddhistcouncilqld.org
sable.camelloapp.com
samantha.chekt.com
www.clearvaultai.com
manage.contemplate.life
conversationalweather.com
dashcars.in
www.datalabeling.eu
dhariwal.store
wasagrw.digit.pk
www.edwardmills.art
www.factotumcs.eu
brainstorm.farefin.com
fidooo.com
fred-marmore.com.br
www.futbol-akademija.com
garden-tracker.com
giuliopretis.com
gym-marini.com
system-design.hillmanchan.com
hivke.ro
www.hnadir.dev
horoscope-fusion.com
www.hotauto.com.ua
hydro.tv
quiz.iceberry.se
scc.icwd.co
www.ifckr.com
com.ifckr.ru
8.ifckr.store
ru.ifckr.store
iktechsol.com
www.intelligeeksafrica.com
ju-agence-digitale.fr
www.karnehesapla.com
bot.kryptono.exchange
www.learnthe99names.com
lolliprops.net
www.lucediseta.it
luz4kids.tokyo
ju.mahe.io
maritimepartner.net
michaellaw.co.nz
office.milikispace.co.ke
mittartech.com
training.mjusmanict.com
www.model-garden.co
mogpodgaming.com
dev.morel.network
app.stg.motibet.jp
neura-clinics.co.il
www.nistagent.com
dashboard.onima.co
padeltico.net
petsitterprofiles.com
phamquockhanh2004.id.vn
www.quentin.pidoux.eu
piyutim.co.il
app.pocketestimation.com
www.pomoloop.com
pradaxinaseetha.com
promodasboas.com
qiangse.autos
laughbook.qpanda.in
qrgroup.ch
www.rabiroshan.com
redaktion-schuch.de
reliancetrafficservices.co.nz
revendapdvmobile.com.br
www.rustikaeventos.com.br
connect-ng-widgets.rxoconnectdemo.rxo.com
santequotidienne.org
order.sdlm.co.in
auth.smartsolar.net.pk
ucm.sowl.to
sportbootfuehrerschein24.com
steel-balance.steellabs.io
pos-hn.sunshinemart.vn
www.team-poker.app
www.tonhozi.com
travel-agency.co
triunfo11.com
uniint.app
www.united135.nl
www.utilsens.com
vatlieuhome.net
wordleextreme.com
wowdevelop.ru
uploader.wowworks.ru
yasser159.com
yyaia.org
Other domains in certificate