Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=sandbox.biduplive.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 06, 2026
Valid Until
November 04, 2026
56 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D3:A2:8D:58:21:27:2C:44:22:6C:47:32:B4:A5:58:AF:65:D3:D5:64:A5:C6:41:2F:07:FB:4A:E0:C2:00:FF:C0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.visiblebr.com
2150design.com
links-physikinstrumente.acty.com
www.advox-it.de
www.akashpal.online
cartojeunes-poc.anagraph.io
spyfall.arioke.co.il
es.artboxy.com
hk-app.atcosme.biz
baberandsarah.com
admin.bhuvi.buzz
sandbox.biduplive.com
www.bilgisizsiniz.com
www.bistro.gr
www.bodrumkeskingroup.com
cdetool.org
cleanupcommandos.com
admin.commandcenterscc.com
cuidarte.co
danielmodig.com
www.dicionariofalso.com.br
www.dkstrendgoods.lol
doocuai.com
cc.dost1.ph
caderno.eaiamigo.com.br
www.editsaurus.com
www.endogastrovet.com.br
enganchaunmichi.com
www.enlightenflow.com
estebanquiroz.com
hsse-maersk-landside-services.estudiocactus.com
app.pertime.expertizo.pk
facturoscope.fr
a0fd.foodle.su
d3.gakuzo.jp
www.gecco.de
g.geekspro.us
www.gomagis.com.br
gridmail.site
www.helpzatrade.surf
hoasaptenote.com
pacelist.ibereciartua.com
www.infazyatarhesaplama.com
www.inlovingmemory.co.ke
iremoval.sbs
www.ironpdf.com
one-education-stage-6.ischoolconnect.com
karlamylove.juanmg.com
online.khemasiri.ac.th
cloud.kuzgntech.com
lallucana.com
formations.leloeduk.com
www.loopfive.ca
lotobill.com.br
www.marketingprint.com.co
www.mrdubey.com
admin.nammareels.in
www.nativealien.co.nz
www.nxtgenx.com
stander.opuswork.io
palakkadmurali.com
www.pibcajamar.org.br
homes.pinnacle-re.com
mta-sts.poseidonproperties.no
mta-sts.pospro.no
app.posso.co.uk
praguewithus.com
auth.provjeravozila.com.hr
purplecowgames.io
qahala.com
rainfield.kr
rameshlasikcentre.com
ramirezisla.com
incident.sale.responsetech.ltd
www.sharadkharel.com.np
www.sheq24seven.com.na
app.showdigi.com
app.stematika.ru
stitchtoflutter.com
events.suffolkfamilycarers.org
prod.doc.tartansoft.com
tectagrand.com
www.testtolacsendig.hu
thalitha-koum-designs.co.zw
www.thedevhouse.io
www.tiansha.buzz
tinglai.buzz
public.dev.upstreamliteracy.dev
urwell.one
veanne.com
vedvak.com
welobuild.com
strathfieldgc.whyq.com.au
spil-pms-dev.wwi.app
xlonlinetutoring.in
yinanna.lat
www.yogartstudio.in
yogartstudio.in
hubkit-staging.znssys.com
www.zwe-smartvending.de
Other domains in certificate