Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=igcloud.com.br
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 19, 2026
Valid Until
August 17, 2026
74 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C9:AB:C7:08:51:09:1A:6E:CA:63:43:13:DE:B0:EF:72:D1:D6:F9:C9:DD:D3:BE:58:68:11:B1:3D:5B:26:CD:EA
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
bitzaq.com
*.bitzaq.com
*.backup.bitzaq.com
*.panel.bitzaq.com
720sweets.com
*.720sweets.com
*.new.720sweets.com
9965ccc.xyz
*.9965ccc.xyz
*.s3.9965ccc.xyz
brokensilenze.co
*.brokensilenze.co
*.ww38.brokensilenze.co
fnetx.io
*.fnetx.io
*.panel.fnetx.io
*.ad.golfinbaleares.com
golfinbaleares.com
*.golfinbaleares.com
*.ww25.golfinbaleares.com
hayatsevinc.org
*.hayatsevinc.org
*.www.hayatsevinc.org
*.campusoceanpact.igcloud.com.br
*.carreiraemfoco.igcloud.com.br
*.concentrix.igcloud.com.br
*.escolamartinasedom.igcloud.com.br
igcloud.com.br
*.igcloud.com.br
*.pernambucanas.igcloud.com.br
*.portaldaaprendizagem.igcloud.com.br
*.raiadrogasil.igcloud.com.br
*.saiadrogasil.igcloud.com.br
*.santosbrasilcarreiraemfoco.igcloud.com.br
*.uniatlamtica.igcloud.com.br
*.unimaza.igcloud.com.br
*.univerdadeconstance.igcloud.com.br
*.universidadegrupoprofarma.igcloud.com.br
*.universidadeh2.igcloud.com.br
merchant911.org
*.merchant911.org
metro-electric.co
*.metro-electric.co
*.analytic.schellenturm.de
*.app.schellenturm.de
*.hostmaster.schellenturm.de
*.kunde.schellenturm.de
*.kunden.schellenturm.de
*.my.schellenturm.de
schellenturm.de
*.schellenturm.de
*.user.schellenturm.de
*.users.schellenturm.de
*.www.schellenturm.de
*.c1.shjvbmnzcp.click
*.c7.shjvbmnzcp.click
shjvbmnzcp.click
*.shjvbmnzcp.click
*.111eb9cc-ff1f-487d-85b6-be415b0fa167.tradeyourtokens.tax
*.1239286d-84d3-467c-8cd0-9dd2026d6350.tradeyourtokens.tax
*.7a97d024-47c9-4f1b-98ba-715c7dbf7b91.tradeyourtokens.tax
*.admin.tradeyourtokens.tax
*.api.tradeyourtokens.tax
*.app.tradeyourtokens.tax
*.e98573b9-156f-4523-b396-81726721595c.tradeyourtokens.tax
*.git.tradeyourtokens.tax
*.mail.tradeyourtokens.tax
tradeyourtokens.tax
*.tradeyourtokens.tax
*.www.tradeyourtokens.tax
trentry.co
*.trentry.co
typing-ninja.com
*.typing-ninja.com
ukplay.co
*.ukplay.co
url22.co
*.url22.co
urysf7.cyou
*.urysf7.cyou
ustvnowapp.co
*.ustvnowapp.co
uvddtm.bid
*.uvddtm.bid
vesricherungen.de
*.vesricherungen.de
*.ww16.vesricherungen.de
*.lpdej6.zestvoiceformteam.info
zestvoiceformteam.info
*.zestvoiceformteam.info
Other domains in certificate