Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=multicasa.appshare.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 31, 2026
Valid Until
November 29, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B9:A7:FB:6F:81:02:E9:E1:04:31:DF:91:DC:B7:BC:89:2D:F9:B2:E1:BF:8E:E8:C5:A3:1C:26:44:35:29:60:FC
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
priestpnadig.com
afterlightbooks.com
dev.fufu.app101.net
multicasa.appshare.com.br
super.admin.avika.ai
dev-test.barberiaspr.com
bharattech.ai
bigicecream.com
bills4wv.com
www.btboperasyon.com
gdpr.burrn.app
stg-talent.casting-asia.com
casumer.com
control-staging2.chatmyorder.com
fight.clad.you
codecrusts.com
ecoride.computemore.com
www.comsa-radu.dev
inquiry.csspl.info
cuidado-ebenezer.com
daontario.ca
console.dcupl.com
dev.checkin.degencoinflip.com
app.descomplicair.com.br
nineyards.deskbooking.app
deha-review.s.dsmap.jp
econobook.app
edumintai.com
empresence.com.br
www.arena.eternamath.com
existentacle.co.uk
freebird.filokar.com
www.fynos.ai
mescodescourts.glabs325.com
www.glo-b.online
gotham-psychology.com
www.gowfh.com
auth.gridbox.io
app.groundx.co.in
gsb-global.com
admin.jarro.in
jetschni.com
jobizzness.com
bacardi.pricing.jsonify.com
faithmusicmissions.kandr.io
kenoshaurgicare.com
klistra.app
api.kuaay.com
auth-bd.kzlogin.com
tv.linkbong66.live
www.lirainmobiliaria.com.ar
lyra-stack.com
www.lyra-stack.com
manuscompany.pl
martinbarnas.com
www.masalflower.com
motiv-stage.mayamd.ai
auth.google.mileniumtelecom.net.br
moderhythm.com
mommade.app
montrafit.com
app.mycliniconline.co.za
myclo.ai
nacionaludia.com.br
nautiloidindustries.com
www.oriio.ai
www.palletsrl.it
www.pasus.id
tag.dev.paywithboost.com
pepscrane.com
www.playwordspin.com
profish.app
pronosking.com
www.puxapena.com.br
www.reherse.com
riddlefield.lol
fluxa.rodrigobarcelos.com.br
round-ing.com
saikisetsubi-inagi.com
molasses.samagrik.com
experience-mma-cartier.sky-boy.com
www.slideuplink.com
slkair.com
www.smietanka.net
smritisimkhada.com
www.sonanttech.in
stage.sportsbetcollective.com
hq.stub.africa
ops-qa.sunniesnacks.com
talentportal.app
link.tbn.co.th
www.thebardailongs.com
www.thecurlystudio.com
www.tinyhoopers.com
ufactz.com
umanglakhani.com
forms.webmarketsonline.com
wolftechna.com
www.wolftechna.com
yeger.ai
Other domains in certificate