Open
Cached
·
just now
86/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=auth.sfxsupport.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 24, 2026
Valid Until
October 22, 2026
62 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
94:79:3D:AF:23:84:43:2C:8E:47:67:41:34:92:73:75:17:13:FB:26:AF:81:E9:55:0C:42:2D:49:59:9C:D2:2C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Excellent
DENY
X-Content-Type-Options
Good
nosniff
Referrer-Policy
Good
strict-origin-when-cross-origin
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
definedata.io
24na7.pro
www.3rdlaw.ai
alonnexus.com
autoguardpro.store
www.ayerler.com
plm.bandhoo.com
mtos-backoffice.beyondi.ninja
blockatlas.io
drivers.bringo.me
buttonstinting.com
uat.campayna.com
app-jump-ccm-plaid.carecloud.io
vendor.carson.ca
oasis-admin.classet.in
www.coign.net
www.desh.com.mx
candidato.djobnet.com
oras.drazdauskas.lt
dashboard.testing.drelife.com
www.eastcoastdigitalprogramme.co.uk
www.edilizie-pulizie.it
yz.edm8.co
fil.energyfilament.org
no.energyfilament.org
vi.energyfilament.org
familyledger.me
fitnessaiapp.com
fkowalski.com
upwork.fourmanalex.com
app.fthlft.org
gaprao.tech
m.goslash.com
hanhdev.xyz
lluna-readme-demo-staging.hellolluna.com
www.hoodinitech.com
saosebastiao.hrtech.com.br
house.iam-influenceall.com
www.idospay.com
www.iiemindia.com
pre.infocentre.app
bohdan-vladyslava.invito.link
ir.irestore.info
www.jamesmilton.ie
jpetrzilka.eu
www.kassenweb.ru
komplitcaremedical.co.za
lapallissapetita.cat
www.lawstudio.tw
portal.lazarillo.cl
www.lgrmusic.com
www.linjaralgebra.se
lizbrown5280.com
logox.tech
www.mariappchi.mx
matteozarro.com
smestage.mbks.io
wedding.mcdamon.net
app.messwi.com
therightcoll.metis.club
miraconnect.us
store.momoapp.vn
hr.myndrix.com
www.mysquads.co.nz
miniapp.nobunaga.life
chennai.onewaytravels.in
dharmapuri.onewaytravels.in
middleware.peoplespension.global
qr-demo.posnet.com.au
demo.task.prestoexpress.co.uk
www.site.previsy.com
vcard.psd.pt
reception.qease.co.in
shortlink.rededor.com.br
relais-moulinneuf.fr
www.saankhyatechworks.com
sahemaldajani.com
www.sahibineulas.com
sakewave.com
auth.sfxsupport.com
compiler.sherdeepai.com
links.shuttlers.africa
skillism.com
sparkm.it
astra.sre.co.id
bodaosorioduran.swanmoments.lat
systechinf.com
www.tapfunstudio.com
tazatechnology.com
portfolio.thefeymesaleng.com
www.thepaper.app
www.thinkvote.io
tumreklam.com
hwadmin.tvxlabs.com
audio-bible.unicoby.com
untilit.works
app-dev.uugot.it
vnconsalting.info
apply.bwest.wiltrue.co.ke
app.yeahblend.com
Other domains in certificate