Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=fb.loteriadobrasil.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 04, 2026
Valid Until
October 02, 2026
34 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5F:A2:DD:4E:6B:EC:DD:AE:35:B5:B6:EE:3D:86:8F:80:79:5A:02:95:86:AB:5F:EF:A7:6A:48:57:E7:41:FD:A0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
barcode.ops-labs.com
scan.abhiyanpa.in
advocad.ai
staging.advocad.ai
www.staging.advocad.ai
apocao.com
www.apocao.com
stage.moya.ascentic.se
emma.bagalini.net
www.emma.bagalini.net
www.borigenbetzel.com.ar
www.bruceclough.com
businessbuckets.com
www.cambrera.com
coastercardcollector.net
crashtest.com.br
backoffice.delaydog.com
dina3arquitectura.com.ar
drafting.gg
easyautomaticlessons.co.uk
sso.easyfastai.com
app.ejuno.io
minermania.elimlevy.com
emassociate.net
englishwithshamila.co.uk
www.everflo.ca
expect.photos
www.fadezncutz.com
www.fightinghawkboxing.com
yellow-cab-chi-traveller-test1.us1.fleet-dev.com
formatoriitaliani.com
frogspoon.com
glancify.ai
www.glancify.ai
www.goaugiecamps.com
gojoethopiandishes.co.ke
gresonconstruct.com
www.growlabs-design.com
community.guivus.com
app.guustav.com
hibengsart.xyz
hoaally.org
dev.hoptop.org
staging.hoptop.org
ego.hughesdev.dev
www.hurip.com
ironquantcortex.com
write.jeffreyforman.net
blog.kestreltools.com
www.kinkerlitzchen-kreativ.de
app.kolectfinance.com
www.kolectfinance.com
www.tv.kurr.dev
point.laney.tech
cloud.leadautopilot.com
adminportal.lessabeauty.co.ke
loicmotheu.dev
fb.loteriadobrasil.com.br
www.mainstreetcarwashrb.com
mashuperu.org
www.megafire.world
demo.meiliiapp.com
mfome.com
simulador.monetarecorporate.com.br
palacinky.mpau.eu
anticipos.mudanzastml.mx
mudanzastml.mx
pu-admin.myresservices.com
base.nguoitrungdao.com
ntag424api.com
www.nulanes.com
onodojang.com
todo.otavioalves.com
packtora.app
parcsol.co.uk
rahuldey.dev
sacalacuenta.com.ar
samparkfoundationjalgaon.org
uat.max.members.sargon.com
seasonart.org
app.setouchi-stay.com
sfbackup.com
dev2.skillhopper.com
navigator.systemicdataethics.com
take-innovation.com
teddyfitz.dev
solidvalues.tellurics.earth
tetsuhiro.dev
therushabh.in
tortaspopeye.com
www.trouwgielensandrine.be
uicarea.com
www.uncommonarchitect.com
virendratarate.dev
vyinsp.com
wanax.com
webapplibako.com
www.world-surf.com
wpxm.xyz
www.wpxm.xyz
Other domains in certificate