Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=sorobany.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 24, 2026
Valid Until
November 22, 2026
82 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
DA:81:D2:D5:61:7E:E0:DC:2E:88:D6:27:A9:6A:F0:A1:6A:28:6B:5F:1C:6D:5E:A9:28:E4:1C:0E:15:83:46:40
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
xunduan.rest
0wl.io
919app.net
admin.adventuremap.com.au
dev.links.aestheticsmap.com
andesagua.cl
ariansabaghi.com
ascenttg.in
rugby.athlete-era.com
attendancebuddy.in
avrsolutions.dev
app.belote.ayoubsbai.com
www.azartylab.com
mint.babyskulls.io
badarchin.com
balgroup.com.br
blackjackstrategytrainer.com
blld.dev
app.boom-delivery.com
app.bracelitpruebas.es
braidwaterplatform.com
platform.byteed.com
marketing-page-a.staging.cantaio.co.il
www.centralsp.tv.br
design-cert.cityfurniture.com
clinicaidee.com.br
www.codigo369.com
www.colinfrankel.com
corocorogames.com
cosap.bio
www.definitearticlecreative.com
neighborhood.degencoinflip.com
degoudenschaarvilvoorde.be
www.dengti.hair
fasttextil-link.donodoapp.com
dramaterapievavra.cz
ducpdm2400038.id.vn
contract-per-ufficio.duranteufficio.com
textworks.edwardmills.art
www.electricfun.io
www.elevenproducts.com
estatesgo.com
link.feildmaster.com
www.gabin-laigle.com
gepiter.com
ghkeyla.mom
www.gjggreen.buzz
koto.experimental.goodctzn.com
gp-florijani.com
grupozelman.com
habitprompt.com
www.hackslovakia.com
hccoba.com
headlicegame.com
hushlisamiller.com
api-dev.incendi.io
incleon.com
www.innovi.shop
www.iotdeterrent.com
jceventssupplier.com
jhengservices.com
kidiwheelstv.com
kittystore228.com
kmmpalety.pl
libertadorhotel.com.ar
luxphone.hu
mach5-validators.com
www.mammactive.com
manikfernando.com
marker-ink.com
martinruskov.com
www.mohsenizadi.com
novellusventures.com
okanaganwellandpump.com
peedeeef.com
fvv.portfolioview.co.za
qawith.com
rajasalmon.com
realver.com
rondeibert.net
runzey.com
frederickgunn.dashi.sasaki.com
lp-discord.shinsekai-technologies.co.jp
www.sitaiqian.lol
sorobany.com
www.ssrgroup.net.au
stolarstwo-kuczkowicz.pl
www.street-e.com
www.sweetmickymovie.com
www.syndilab.org
talonai.lt
thefirst.in
thepremiumbarbershop.ca
notes.thevv.me
torqmap.com
towerstaxsolutions.com
ulurutickets.com
unshift.jp
valverdefleamarket.com
www.xubisoft.com
Other domains in certificate