Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=luminehub.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 15, 2026
Valid Until
November 13, 2026
89 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
70:B1:9A:50:D3:E5:83:BB:CC:A8:76:C3:A2:E8:86:94:8F:E7:00:FA:DC:DC:6C:F7:C7:75:8A:E7:FB:26:BD:A5
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
graphandnode.com
2busy.xyz
shabib.addin.web.id
ajmokh.com
aktion-kinderparadies.de
alvexiacommerce.com
maxiorjoias.appshare.com.br
www.bandquarters.com
www.battery-shop.bg
fireship-hosting.bjarnimax.com
metrics.brightwrite.com
preview-link.bythewake.com
www.calenster.com
erp.cambridgeinternationalschool.in
cbdata-dev-loyalty-web.cbdata.cz
chepito.chepex.com
octopusev.clementineapp.com
cobrante.es
coffee-sugano.com
www.dayj.io
www.deb8er.org
charlie-assets.deltamap.net
go.denes.io
tucontador.desertemporio.com
gears.staging.drivetrainhub.com
www.elionsociety.com.br
etcgraphic.com
hiragana.fengyi.rocks
www.filtre.codes
www.training.fitcuffs.com
gestaocm.com.br
go-cosmos.ai
gotrackme.co.za
hensch-it.de
hirokisakaguchi.com
jam.homemadecodes.com
www.homewod.fr
test.humanitarianmaking.org
industrybest.digital
link.instahire.io
jakeveazey.com
www.jogodavelha.com.br
joshiexclusive.in
jothiandjijo.com
www.money.k-9apps.com
painel.kardbank.com.br
kvisualz.com
laloshop.in
www.logopaedie-lohhof.de
lokobox.com
lulu-bahrain.com
lulu-kuwait.com
lulu-saudi.com
luminehub.com.br
mccracken.work
mipsicologa.online
miraimusubi.jp
www.mohamed-soliman.com
anonymous-answers.moondungeon.com
www.muttleysdoggydaycare.com
myos1.org
defianz.nishkal.in
www.paulsteidle.com
pitapocketri.com
www.pizzamaniafuengirola.es
hodnotenie.poradca.online
organizaciones.premiumandpremium.com
projecthoney.vip
www.quote-machine.com
click.rakutenadvertising.io
i.rallyreader.com
stage.links.rallyreader.com
rideouts.app
editor.rtirl.com
www.santekotturi.com
siteplanner.dev.smartcloud.smartsys.io
snapsell.photo
new-year-reward.steaker.com
atdeveloper.swish.nu
www.sysco.kz
talentbox.in
dev.teacup.gg
www.tellmehowcanido.com
theshowcase.net
staging.tilbudssiderne.dk
timeclock.tournamentcenter.biz
www.trides.com.my
eggxiuren.trungdev.eu.org
tvdhwani.com
dsb.uc-bcf.dev
app.undiffer.com
ustaadsbiryani.com
app.vascularlines.com
www.vieth-zahnaerzte.de
viverolaestacion.com
www.wiesen-zwittau.de
www.yabadoo.tv
www.yellowstonesolutions.org
ygo-db-draw-simulator.ygotools.com
www.zpikonline.com
Other domains in certificate