Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=firmalegal.vip
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 08, 2026
Valid Until
November 06, 2026
58 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
59:50:32:13:D4:AE:82:6E:FE:2A:B5:9B:B3:4D:7E:92:AD:3D:B4:F2:53:A3:7D:6B:70:43:FA:E6:D3:52:B6:5B
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
vdocq.com
4ever.abhisheksunkewar.com
afghanhouse.in
alister.dev
www.alpharefrigerationcompany.co.in
shawnee.get.staging.alpinemedia.com
anekant.tech
annapoornamithai.com
dm.anoopavatar.com
console.stg.dooh.any-digital.com
azihome.in
bayoucitylinen.com
www.bayoucitylinen.com
biveo-app.de
www.biveo-app.de
book-buddy.tech
www.buygoldcalculator.com
swisstrip.caltechnics.com
ccla.cl
ccseguros.cl
password.choosewithin.com
www.cmmisaludpa.com
code-solid.com
auth.7oy.cyberhaven.io
www.revenda.databackup.com.br
yeti-test-domain.demeter.builders
www.devtoolscave.com
medlemsplatform.dm.dk
www.earlfamilymedicine.com
edutv.mn
crm.ejenflow.com
www.enverraglobal.com
www.esmeraldaart.com.br
eventuology.co.za
www.explosivefuzz.com
auth.fantasyhq.co
firmalegal.vip
franz-holding.de
shop.getschein.de
www.girnax.com
grebe.jp
herolink.in
run.heychao.com
www.hippo.com.bo
dwella.hiresome.ai
holmgrenstudio.com
crud.hqianq.io.vn
www.iannpena.com.br
fightfitrockhill.impactwrap.com
nrg.staging.infocentre.app
app.ison1.com.br
trip-planner.jgersicich.com
jianan.li
www.jumbopocket.com
app.kaseron.com.tr
www.kingdom.watch
www.labgrm.com
mbmenus.app
www.microharness.co.kr
myaccount.modusvr.com
moooapp.site
nanofied.app
naveerafashion.in
nsonda.com
www.oddleg.is
oslund.no
apps.pacmime.org
www.parabolkocluk.com
photoofjesus.com
playercardservices.com
www.pumkaindustries.in
www.puzzlers-labs.com
gfe.quad-j.com
righttechsoftware.com
connect-ng-analytics.rxoconnectdev.rxo.com
breakbreeze.servicechai.com
green.preview.shortwave-staging.com
sonngoc.work
nmutdscramble.sqwadhq.com
stmcomics.com
tournament.strikingshuttlers.com
sufferfest.app
svinnstop.com
thedominicanrepubliceticket.com
tiktok.thegioiquatet.com.vn
www.theislandline.com
tryreta.app
unio-stone.de
moneyinsight.ventio.co.in
cocoona.vidocto.com
vimuttidcc.org
viraltrend.ru
virtualbobstudios.com
mood-orders.waiterpro.com
www.wehealapp.in
www.wordsagainsttheclock.com
dev-platform.workfx.ai
wwdeffi.site
www.zagnetic.com
zenovapro.online
Other domains in certificate