Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=piff.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 29, 2026
Valid Until
November 27, 2026
78 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E5:99:D9:B4:64:C5:2E:C6:E9:FA:2F:F4:EA:43:71:FF:C6:D1:B4:D2:4A:31:90:FE:4A:7D:2F:7D:AB:84:47:07
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
cherrisacademy.com
staff.996fans.com
www.apnisociety.in
www.artificialapps.co
www.ascenda.work
www.assetbloom.in
intern.bbe.nu
www.mzdy.bcwizards.cz
www.beckysbowwowhouse.com
matura.c4f.wtf
www.carjamez.com
casval.org
cataloged.co
chamadofacil.com.br
payment.chingchun.tw
get-s.collla.com
creaty.me
app.cruzzolin.it
cursofinancasadois.com.br
www.dazzlebrush.co.uk
dianayeloy.com
babybet.drault.net
durospace.com
www.elementalstoreco.com
elevify.ec
admin-eplanning.elioteknology.com
elite-transportations.com
epovex.com.tr
www.expertmind.com.ar
fsadmin.flockone.com
www.funbook.org.in
gabriellagilmore.com
ganpatsteel.com
gennessence.co.za
hksiia.org.hk
hosannaweddings.com
www.hsas.co.in
www.hyunukimconsulting.buzz
businessriver.iltawards.ie
www.impactformission.org
agnes.jawsapp.online
jforbes.io
jorgegrullondev.com
kingraham.com
kishoresengupta.com
tourinmobiliario2022.ledesmagroupfl.com
liaisonsapp.com
www.lifeintheuk.pro
www.linbing.buzz
loop-chat.com
www.loyalbook.net
lyrlog.com
manttome.com
marhamahtoys.com
milogestao.com.br
mngr88.xyz
control.mopay-ng.com
conselho.mpgsite.com
www.muatex.uk
myhand-poker.com
www.mzap.org
nailsbydalena.com
app.nextsimu.com
www.nickroeder.com
www.nirvanaaura.org
fahrettinhocakral.ogretimsayfam.com
www.okkerala.com
omegaaccords.com
www.ottawamensconference.ca
ovelifootball.com
www.p2pmart.shop
link.petprofile.net
piff.com.br
piotr-gorczynski.com
share.qfsgolden.info
kitchenisland.roshults.com
www.sangamtourandtravels.in
crescera.apresentacao.selffi.com.br
shibuya.nl
skryvoruchko.com
campaign.spdigital.sg
bestlife-app.ssd.co.ke
mdx-app.ssd.co.ke
stim.ai
stov.io
verify.suntuk.xyz
bodaquintanillagaray.swanmoments.net
moni.talkpilotai.com
taskall.ai
www.telugubrand.com
toiware.co.jp
u-cash.org
auth.uiclap.com
ukmfengshui.com
helper.usaude.app.br
versea.app
platformfunction-dev.viggo.io
engage.ykuxskawcvoyxlovutuw.voyagernetz.us
ai.vtaigc.org
www.wainfamilyfuneraldirectors.co.uk
Other domains in certificate