Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.toytrainsfortherestofus.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 07, 2026
Valid Until
November 05, 2026
78 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
1F:E1:9D:F7:8F:73:B0:C5:A4:D4:1A:11:4F:96:41:67:0E:D6:A1:D6:35:E3:B7:F4:B4:1C:5E:B8:A6:69:88:9D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.technophant.com
bestellen.2ps-steinfurt.de
app.4fetch.com
alpha360.co.il
amerigomagazine.com
www.arvnd.in
beach.beaches.app
beigecol.com
bidcarsbaku.com
tool.boostr.id
caracciolocapital.com
www.chataustralia.com.au
chisclana.es
christmascalendar.org
cijtec.cl
citara.mx
maracucho.clau.io
app.fantaamici.codingduck.cloud
innovation.connox.io
danfels.com.au
dhinex.io
dorja.com
zoom-web.e2m.live
ekomax.com.my
elbeytpromotion.com
installer.ethosmobile.org
partners.familyfun.games
www.flatbox.co
flipscout.site
www.fulcrumio.com
sistema.gbtechsolucoes.com.br
ghostpos.ae
glaciertrailheadtransit.com
greenmarker.co.in
ignat.dev
instrutorfernando.com.br
msteams.intheoffice.io
www.jobnet.com.vn
3hunt.knobs.it
www.kotakpasir.id
lestrom.ee
marc-wieser.fr
metrics.mayamd.ai
wasl1.mnr.ae
www.myguiding.com
nobleexperts.com
nxtno1.id.vn
only-us.world
onmyway.pro
www.pabis.eu
rg.petronijevicm.com
philjuricev.dev
www.photovideomaker.app
pro.playroom.live
www.polarshow.no
scenario-builder.poltergeist-lab.net
www.prayogeek.in
www.prima-wald.de
www.proyectosayb.com
qualaces.com
panel.billing.quiksy.store
rampart.hockey
www.refaclik.com.mx
refaclik.mx
rejectory.com
admin.robotpak.com
round.education
connect-ng-carrier-tenders.rxoconnectdemo.rxo.com
connect-ng-warehouse.rxoconnectperf.rxo.com
dmsuat.corp-internal.rxo.com
sadripharmaprint.com
senequiz.senecalearning.com
solvenzalaw.com
www.solvenzalaw.com
app.spactm.org
loxam-specialistes.speakylink.com
straniggdora.hu
studentinvest.ca
stuta.io
www.supplytextil.com.br
tailoredpastries.com
www.tailoredpastries.com
taployalty.com.au
www.taycanai.com
arcoiris.tcontur.pe
managemind.texterous.nl
www.theartoftravers.com
thoughtforge.co
www.toytrainsfortherestofus.com
travelwithabhisha.com
www.treebooks.dev
tricamp.ai
www.tricamp.ai
www.ultindia.com
www.universityappliedsciences.com
app.viacertabanking.com.br
videogamemanager.com
waterwave.app
mince-pie-survey.worawat.com
zeustech.co.ke
Other domains in certificate