Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=checkout.sandbox.manifestfinancial.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 01, 2026
Valid Until
September 30, 2026
42 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
71:60:29:FB:80:02:70:D2:46:10:32:C5:1A:16:18:DA:82:8F:E9:3C:0E:F0:7A:3E:8E:67:95:F8:27:8A:5C:96
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
featurefoundry.dev
www.104.fi
45395.jp
agenthop.ai
life.ai-biz.app
aiteruchat.net
aktech.ro
atipico.lat
www.bdpla.co
beaumen.com.br
beckschaefer-holding.de
www.beckschaefer-holding.de
bellehavenfc.org
besimple.ai
litoral-comunicacao.biomo.com.br
boligmeta.dk
www.bomaenergy.net
cafeteroslara.com
redwoods.cagereps.com
calccentral.xyz
calcolatoridelprofitto.com
camrooms.app
cerebrim-ai.com
www.coaconcrete.ca
www.codejocks.in
crietecfieldservice.com.br
custosapp.io
databridge360.dev
drape3d.app
www.eliterentalz.com
elitetranscorpcourierservice.org
eljardindelosmanjares.com
eurocore.sa
fabrizioforte.io
fabrizioforte.me
fisiobiz.pe
cafeterias.friobcn.com
app.frontnest.app
frontnest.app
www.frontnest.app
fb-auth.gesfrota.pt
giraffai.in
www.gkkagri.co.in
guardiaosmart.com.br
guerrilladev.xyz
www.headflipped.com
houseofhair.app
interviews-iq.com
involveafri.org
www.itvest.eu
www.kreciodigital.com
loadradar.ai
titi.lorspi.com
checkout.sandbox.manifestfinancial.com
www.mensageirosdecristo.com
morataepiranaadvogados.com.br
natechnology.app
employee.neekos.dev
remote.neekos.dev
user.neekos.dev
tools.nexuscybercore.nexus
niddojardin.com
northernforcefastpitch.com
www.northernforcefastpitch.com
geoassist.nttdata-ccs.co.jp
www.pelintowing.com
piscinasvertientes.cl
playedwith.com
predictiontools.directory
auth.price-tracker.app
prizm.site
publishtoai.com
www.publishtoai.com
consultorias.solfi.qitech.digital
solfi.qitech.digital
qiubo.lat
queensgolfclub.com
reparadord.com.br
rez4app.com
rosepetal.ai
homes.scottmichaelsrocks.com
nwtreading.searchwork.org
www.selfimproving.dev
sewgarden.com
app.shipifyai.io
sideris.xyz
sitcomnet.co.il
www.soundnative.io
crm.syntheticfoundry.ca
tarhanachat.com
www.tcfinancialmanagement.com
tecsol.com.mx
thefirstbuild.ai
foundry.thestoryshack.com
trademill.video
nestor.juarez.vispires.com
wmricci.com
www.writinginstrument.co.in
xaydungtt.com
www.yemikelani.dev
Other domains in certificate