Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=qiajuda.sandbox.qitech.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 17, 2026
Valid Until
October 15, 2026
54 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
EC:6F:7E:A8:EB:8C:A6:46:3D:00:0A:8E:3D:3D:53:C4:09:41:80:69:E1:DD:91:6A:67:F3:90:01:94:E3:7A:FA
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
pvkkdpgc.in
escoladamata.abcnatur.pt
stg-enterprise.ailumia.com
aksharlon.com
andymina.com
reasonloopai.anmayraj.in
chem.annamyznikova.ru
www.arundhatidas.com
preventivatore.assicurazionecantiere.it
automotiveinsanity.com
aydinlikuclu.com
balobanova.com
bitixel.com
blocktech.com.br
csjdolhain.bosscool.be
bressansistemas.com.br
bricksolutions.co.in
portal.qa.caroo.co.uk
china-chats.com
auth.class-cloud.jp
crecehogar.pe
apps.crunchloop.io
darkmane.darkmane.me
www.databrokers.cl
www.deadcode.rip
www.dillimono.com
www.ecosys.mv
links.egliselyongerland.org
entejin.com
eventlint.com
www.everlife.llc
getpayvo.com
getsecretmenu.com
gnomeassist.com
group.goodness.com.au
bcn2.ac.grupopalddd.tk
guitarlessonsmiddlesbrough.com
helencramer.com
dev.hemisphere.digital
idpaguatemala.com
kawi.page
www.kiismet.com.sg
knowyourpeople.in
www.koderia.sk
www.kwa.dev
www.kyokita.io
laboum.live
learnnorwegianapp.com
www.liriosdelvalle.com
www.lotusbuds.dk
loker.lumbungkerja.com
lunafal.com
www.mclinn.info
colors-in-space.michiochips.com
millionaires-library.ru
mobility-consulting.net
www.myitadvisory.com
naveenr.com
noreply.naxs.com.ar
noaawin.med.sa
nouraish.com
www.novoapp.ch
www.onurpen.com
app.orderofthings.dk
dev.owl-ina.com
www.driver.parcelquest.co.za
playpadlock.com
www.plytas.gr
loksewa.prepariksha.com
adpromotora.presen.ca
dx-consulting.productbase.co.jp
www.progettoorfanilagovittoria.com
pure-white.kr
qiajuda.sandbox.qitech.com.br
www.qrissl.com
rabondigtl.art
reachingoutlives.org
changelab.realeyespeople.it
dev.resolved.social
www.samskinner.dev
schoolriver.com
www.shopcarlaguimaraes.com.br
hub.spott.eco
surgingdata.tw
bodaaquinogutierrez.swanmoments.net
swimmingpython.net
tabthrough.com
polaristaxes.tallyfor.com
vppbb3.com
wakinchan.work
www.warungbersama.com
www.wecare.ph
winnerscore.co.kr
winquist.ca
prod-admin.winresponse.io
app.dev.wioski.co
yemasi.com.co
yokohama-stadium.co.jp
www.zaferbisiklet.com
zaferbisiklet.com
Other domains in certificate