Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=backoffice.strategi-capital.qitech.digital
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 21, 2026
Valid Until
October 19, 2026
62 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
65:08:94:2C:8A:D0:1B:3C:5B:AC:D8:EF:34:5B:1D:27:43:FF:34:3F:C8:E2:6C:BA:1B:4C:8E:AF:9C:09:0D:16
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
va-lora.com
www.acharyasadhandas.com
afldrillboard.com.au
prayertime.aimazingapps.com
app.anatocast.com.br
hojecosmetics.appshare.com.br
arcogiftcardsettlement.com
aura.taxi
lab.autumnintegrations.com
sub.autumnintegrations.com
avloss.com
axelrasmussen.com
bautistanacimiento.cl
link.beersport.com
app.beres.co.id
blingdex.com
int.bmspune.org
wavy.broccolirecords.com
cantabileapp.com
www.cofcglobal.com
convexityai.com
crevotech.com
peusa.cromptonapps.com
dev-reclutamiento.cydocs.cl
deepmanifold.org
dg-clips.com
divai.click
dosa-n-curry.com
www.drafteq.com
drlucaschagas.com.br
www.droptaxionewaytaxii.com
www.edusantostattoo.com.br
eightclaplabs.com
ekostb.lat
faltouagua.com.br
auth-staging.gardenr.com
gleeongames.com
www.goodsportgolf.com
www.grookeygang.com
hazelmohamedali.com
honk.international
www.hypeatlas.com
iata.pe
www.incomingheat.com
app.joinsalut.com
kaiinnovations.autos
kaitours.bike
kicode.app
heston.liebowitz.me
www.littlefootsf.com
www.loophorizons.com
mathylab.com
app.meeechapproach.com
demo.mindflow.tw
mymistro.com
cv.nachxtreme.com
noctis-labs.com
november.tokyo
olunubi.mom
omnicurenow.com
www.cityofraleigh.opendata.report
maintainer.ourpetpolicy.com
phohaiphat.autos
www.phohaiphat.autos
plexusnotes.com
ticketing.portugalfootballsummit.com
premiumdesigncompany.com
backoffice.strategi-capital.qitech.digital
consultorias.stars-sec.qitech.digital
consultorias.strategi-capital.qitech.digital
xadmin.quanthex.io
auth.quickvocals.com
api.remodzy.com
ondc-ui.rozana.tech
admin.salttreasury.com
portal.salttreasury.com
testbank.salttreasury.com
workflow.salttreasury.com
codecrackerpro.sapient7.com
selfff.jp
seniorcareapp.pl
pkl.smkn1bjm.sch.id
snabblabs.com
pioleaguemissoulapredictadmin.sqwadhq.com
cafe.standardlee.info
resume.standardlee.info
sweetspot-bby19.ca
taniguchi-paint.jp
the1step.co.kr
thearkofiso.com
tiahousing.mom
www.tiahousing.mom
vemver.net.br
www.victoriapp.com
admin.wadai.me
wadai.me
www.widevisioninitiative.org
meetings-staging.work.life
www.wscservices.buzz
zeaeye-development.zeaeye.com
Other domains in certificate