Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.flexfiteurope.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 28, 2026
Valid Until
September 26, 2026
39 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
78:4B:C4:48:FE:F9:36:98:A7:61:FA:CB:86:99:87:C9:F8:02:86:3D:41:F5:AE:51:BA:44:A3:96:4F:51:D1:44
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
jemsactive.com
www.4fotos1palavra.app
adventuresports.ae
www.aeromarineexpress.com
agro-digital-broker.ro
alexanderlehnbom.com
andn-tokyo.com
www.aspiriia.com
atenai.es
verificateur-de-terrain.avivo.app
ayzplastics.com
sso.web.cambri.ai
cholerton.co.uk
clocktails.net
coachinglab.it
convertfiles.app
www.danalog.co.uk
amrap.danielreichenpfader.com
elevate.datastrix.io
www.dddinterior.com
pushup.delugan.net
www.diinng.online
xzinm2k43yw6k.easyapp.co
eitr.ai
app.elixr.mobi
encontreprestadores.com.br
factorpicnc.com
www.fihneccrsanpablolc.com
www.flexfiteurope.com
www.geriatraatizapan.com
geteidolon.app
intellectbridge.co.uk
mml-cpa-monitor.itaueira.com
www.jegytix.com
console.koko-kommune.de
www.kortexweb3.com
uagro.lapieza.io
stage-5.learned.io
lechef.app
emp.blr2.locobear.com
waiver.blr2.locobear.com
www.dashboard.masunoapp.com
legal.matchgrant.co
agricultor.mijornal.com
recolector.mijornal.com
mizzno.com
painel.mobaioficial.com.br
www.molemountainmint.com
myhomi.app
myqrcode4cu.online
myxyz.site
polls.newwit.com
nick.cat
notariatsnagov.ro
paineldeinsights.orbit-lab.ai
trial.orbita2.com
outofdebt.au
vasanthabhavan.owct.me
padmagurucharitabletrust.in
pagamento.api.br
treasuryflow.pantollventures.com
www.paperpal.co.in
petromindo.org
physio-dobrea.de
www.pramaproject.com
app.pvolio.com
quac.tech
raioazulcomics.com
www.recallcentric.com
app.recomand.app
recruitosbaseball.com
mx.condo-uat.ricmasoft.com
rikikun.com
app.safaksan.dev
www.santasailab.com
www.serpicolandscaping.com
www.singledollarappeal.org
snacksyndicate.org
sopuresystems.in
soucheit.com
www.starrywhispers.com
stratvm.com
streetwear.fit
www.streetwear.fit
taxibilbaoaeropuerto.com
cal.taxsem.com
inheritance.taxsem.com
law.taxsem.com
www.tebahchurch.com
www.tecblic.com
thelemonadetraining.com
www.ticreacttoe.com
townbrief.app
usamaabubakar.dev
vibecodecraft.com
www.vibecodecraft.com
violetleafgames.com
triviaquiz.vshyrochuk.com
wedready.com
app-staging.withdona.com
Other domains in certificate