Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=admin.dev.getwindo.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 15, 2026
Valid Until
October 13, 2026
65 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D6:03:64:DE:99:23:9F:12:02:8B:D2:25:14:64:18:8A:FA:07:DC:DC:CE:6C:9A:21:1D:8C:0A:9E:22:6A:D0:5D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
amaldev.space
www.10110.dev
3mperimetermanagement.com
www.3mperimetermanagement.com
app.aeondialer.com
crm.agenciatlxdigital.com.br
wixen.agtdijital.com
gaia.alpop.com.br
www.auditcoreti.com
auranixdigital.com
portalsip-incorporacion-test.austral.edu.ar
portalsip-incorporacion.austral.edu.ar
app.barmaid.io
app.bjjradix.com.br
pv.bloodhound.lat
www.bluuweb.dev
app.c3x.dev
www.calgary3dprinting.com
evv.chautarihomecare.com
chronotapgame.com
www.chronotapgame.com
super.clau.io
realio.code-forge.pl
code247.io
rumoexame.coherenceai.com.br
compytek.com
courseplott.com
quiz.ecampus.co.in
developers.ellie.care
www.epicapps.com.br
esox.dev
www.esox.dev
gartenbau-gazi.de
admin.dev.getwindo.app
admin.getwindo.app
app.dev.getwindo.app
www.grit.yt
www.haciendadelasflores.com
harrisfazal.com
cargo.helex.io
www.homeomind.com.br
hplusnexo.com
data.hueristic.dev
improchurch.com
admin.imranlabs.com
www.indiatoworld.com
www.ingravidos.tech
www.jakeholland.dev
jarrak.com.au
jclempilhadeiras.com.br
chess.jocode.de
jorgeemilio.com
www.jumphai.com
kvalitni-remeslniky.cz
lalabpeptides.co.za
leydev.com.br
www.lit-box.co.za
lumbramemories.com
www.lumbramemories.com
firebase.manobook.net
aed.mattschlosser.me
lp.mvautomotores.com.br
naburang-e.com
www.noisyloop.com
www.nyawa.live
opentrails.hu
widget.connect.staging.optimusride.com
www.paidaly.com
commscalendar.progeorgia.org
pulse-tracker.app
radgov.hair
www.radgov.hair
rccgthetriumphant.se
www.rccgthetriumphant.se
stg.younite-album.re2fe.com
rudradev.in
savilo.app
scaling-north.com
admin.schoolsportraits.com
order.schoolsportraits.com
schoolsportraits.com
assets.servicecraze.com
app.setponto.com.br
sintechsolutions.com
www.sintechsolutions.com
ashendra.slportfolio.lk
squader.com.tr
creta.synciadesk.com.br
tarunjollyofficial.com
samva.taxelco.com
www.tecnicup.com.ar
tenbe.se
staging.grow.thoughtworks.net
app.trilha-digital.pro.br
ubitlogger.com
ulavaragro.com
www.vidalocatv.de
visware.com
hub.vitale.digital
www.xuejiatong.autos
Other domains in certificate