Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=lavgest.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 19, 2026
Valid Until
October 17, 2026
33 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5E:A8:04:6C:47:93:56:BE:06:2A:6D:55:31:2E:37:34:8A:CC:6C:AA:0B:98:A8:F4:2B:6F:71:F0:6E:59:1F:AD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
vik-maistor-group.com
www.abuyemen.autos
www.agtrstwo.buzz
www.animeflvapp.net
arcfinhub.xyz
arcnest.in
azraxa.com
bbfoodavenue.in
www.bebop.wtf
www.bhagwatiassociates.co.in
quote.bidaribishnu.com.np
bpdad.me
brassleafarmory.xyz
www.bunker.land
callassist.in
sabor.clau.io
external.copa.io
cpower.ie
democratdoug.com
app.developerbalaguru.diy
webapp-staging.divein.no
www.divisit.app
app.acc.eatch.me
courses.eazealliance.in
ebjfl.org
manager.einfach-anstellen.com
escolarix.mx
szilagyizs.partner.felporgetve.hu
feneri.xyz
www.fgrcontract.surf
make-ecommerce.finlup.id
www.floxtor.app
www.glstechnotrade.in
www.gradtrack.co.uk
draw.grifdail.fr
bank-prod.grobox.co.ke
hakws.net
www.halaexpo.com.tr
wettoncraft.pixel.holusion.com
shopify-admin-helper.hotwax.io
innovap.technology
instaton.us
inventsuccess.org
www.jelleggorbe.ch
www.jktutorials.online
lavgest.com.br
www.lifeform.capital
tg.limaois.me
www.littlelightsministry.org
livebandskaraoke.se
partners.loomasl.com
platform.maarifx.com
aikakone.mas-production.fi
www.meloditarim.com
meureplay.com.br
www.mminstruments.org
cv.morichonclement.fr
mrjx.us
msgame.online
myhr.tg
app.myplucky.eu
neuroraiz.com.ar
www.nivendha.me
nivous.com
staging.ops.ogbuildingsupplies.com
www.orbitapp.in
borgenbetong.ordreplan.no
www.oweski.me
pigeonpost.in
app.plugaconsult.com.br
circulating.fuel.power.trade
bestellen.pronto-bergneustadt.de
prosperme.in
gibsoncounselling.quetzalpay.io
www.revolutionary.software
www.rvbenterprises.in
interaxa.salas.com.ar
app.staging.sellar.in
www.shhhealthcare.buzz
www.sparkmindplay.com
sphome.co.th
stellarkinetics.om
stpaulpj.org.my
study-jp.io.vn
www.synaptechinn.com
www.taxiride.in
thebulk.org
app.truliv.com.br
ujaruk.gl
auth-staging.uprzejmiedonosze.net
app.vapeimoveis.com.br
beta.vpt.vidoori.com
www.virtualhub.store
portal.vmsc.education
volleystreampro.com
www.vorkai.com
whatgenerationami.net
www.wqfcorp.autos
www.xmarksthespot.in
share.yjoz.com
Other domains in certificate