Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=auth.cgd.datafordeals.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 16, 2026
Valid Until
November 14, 2026
66 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
4F:15:5D:73:20:17:E6:88:A7:C4:8E:19:95:F4:3A:E1:C6:D3:7B:30:D2:7F:48:8B:65:1C:9D:B8:5D:A1:BE:BF
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
mintexcare.com
www.1ak-tokyo.com
21stparadigm.com
www.41studiodigital.com.br
download.aadee.app
www.absoluteautoict.com
www.adawebpro.it
live.agorify.com
alfajrtours.com
alporter.ie
anvilar.com.br
admin.arquis.com.co
app.arquis.com.co
biogame.ai
www.blackbeargaming.com
www.brandbarrio.es
britplay.com
twogate.demo.chance-store.jp
checkmotorsla.cl
rendiciones.contaactiva.cl
www.cumbre-app.com
dabea.dk
auth.cgd.datafordeals.com
bestellen.doener-geldern.de
admin.donotsign.com
eduease.co.in
www.elaineling.ca
join.fabulist.app
www.facilitysight.app
www.fakebandmates.com
www.faripostbac.net
feinit.com
www.fleetmap.com.br
www.flexips.com
crm.forsasyndic.com
www.frame-works.ai
www.fypfriends.com
www.genghis.tech
goldenheartlove.center
www.goldenheartlove.center
gosurf.online
www.gosurf.online
invitation.gumb.app
www.haijest.fi
haynet.co
hayyya.ai
hekman.eu
www.helsinkivantaa.fi
aiir.hub9.io
auth.ijtech.xyz
imagetogifai.com
yoxla.istedad21.edu.az
www.jerry-agboola.ch
wd.jkhoi.com
www.kibeko.de
sis.kiboeducation.fun
www.kovigo.com
www.ladylog.app
lauraduccaarquitetura.com
lephuchung20215276.id.vn
lumiocongressos.com.br
www.margarit.co
www.medgenixtech.com
www.mobifytracker.co.za
ireland.demo.movello.se
www.musicguessr.com
nanwannawatresort.com
pricesnap.nexdev.codes
photogather.uk
www.playeragent.ai
playlistnetwork.co.uk
orcai.plusapps.com.br
app.poinz.ch
pracaapp.com.br
progvision.online
quickcells.co
mapa-develop.reinaldoalguz.com.br
www.revrb.app
rider.best
www.robokane.com
devweb.securityguard.app
seglines.com
www.showupapp.io
innova.sigojhe.com.br
siliconcity.net
hurtbox-plugin.snardle.dev
star-stream.co.kr
starmath.app
vela.stevenmccurrach.com
www.studionullgames.com
dewolfreyes.swanmoments.lat
xvnatalydiaz.swanmoments.lat
sys.tdsltd.ie
www.truano.cz
www.vistax.app
www.vitaransvar.com
dev.wbwbeer.app
wendellkuci.com.br
images.with-khatib.com
badger-peptide.zayas.ai
Other domains in certificate