Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=estudiovies.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 09, 2026
Valid Until
October 07, 2026
52 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8A:20:4E:03:08:24:4D:1E:2B:CB:0C:69:05:9B:66:B3:BA:0A:AC:31:5D:07:72:D1:BC:EA:38:50:9D:D4:FC:9C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
data.openeng.app
www.2lightsstudio.com.br
4mcompany.net
acasatinoco.pt
adcoapex.com
agatagryszka.pl
alianzasvalderrama.com
anfani.health
go.anotar.com
antoniojoaquim.com.br
armspeed.app
www.armspeed.app
australiandebtsolvers.ava-systems.com
www.bagarinho.pt
bancapoly.com
bareeq-alalwan.com
baya-relocation.fr
up.bergmann.tech
birksgeothermal.co.uk
biteroad.com
blancacleaningdfw.com
www.blancacleaningdfw.com
camilafreitasarquitetura.com
condosuite.com.mx
shuttle.cross-switch.app
dgmgroup.us
home.domainik.io
www.dukecollarandleash.com
emindinler.xyz
estudiovies.com.br
fleetsense.live
www.foodlabstudio.it
fortwoods.com
www.fortwoods.com
franciscomourafisio.com.br
www.goracacegla.org.pl
gosnap.in
www.gridscanner.net
gtrauto.hair
gudu.com.au
admin.highvpn.win
ipsavega.com
jjbroshauling.com
www.jjbroshauling.com
jsinteriorreno.ca
ki-tho.be
kirklandenterprises.org
app.kolding-rengoering.dk
t.lab78.ar
lakey.app
lambertseterrevyen.no
www.laoficinaprint.com
lennonkatsumata.work
www.linkagebrands.co.za
linma.cfd
message.magiqmoments.com
marmitariasilva.com.br
massekagame.com
residency.mathematikoi.co
mgfer.link
minimousemacro.online
health-demo.nexlab.tech
www.nmkaghapy.lol
nossacontaoficial.com.br
nuguna.run
www.optibit.ai
ownbases.com
www.parkpool.ca
peterrivett.com
plant-clicker.com
pocasangrebumbacea.com
apptocantins.pontoeletronico.ia.br
app.popuppush.com
popuppush.com
productivops.com
purpuramedicolavoro.it
ichiji-sangyo.quest-career.jp
pm-eigo.quest-career.jp
pm-kinyu.quest-career.jp
auth.stage.tradex.rainbytes.com
www.rbsea.com
rongkeyu.cfd
scoresandstandings.net
shinacer.dev
www.shinacer.dev
canarana.bioponto.sistemasnemesis.com.br
sixzes.com
www.sixzes.com
specialagentsteve.com
suki-connect.com
admin.swiset.com
nava-dev.syqlo.com
tbgjv.autos
refap.tempostreet.com
pwa.thaw-app.com
trailcoach.app
www.vertigofilms.fr
devutils.x0r.my.id
www.zayvit.com
zentone.agency
Other domains in certificate