Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=sumaira.studio
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 29, 2026
Valid Until
October 27, 2026
44 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A9:46:B2:71:2A:20:AA:70:3E:F7:6D:89:7C:5C:10:A3:EF:72:5A:91:6F:68:ED:DA:10:F3:14:15:A5:8F:76:78
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.inviro360.com
www.airportspeedpark.com
alphahand.org
www.altrosa.app
www.arquiva.com.br
www.babantu.com
prepaga.ballesta.com.ar
office.qa.blushco.io
brittanycoffey.com
changehuahin.com
chhalaangmedia.com
registration.constructionawards.ie
www.court-iq.org
cs380classlink.com
dartcade.se
davvie.com
www.diamondeducationinstitute.org
www.digitalezahnpraxis.at
dillanjohnson.com
ito-coffee3.for.dinii.jp
eastwooddigitaldynasty.com
judge.educationawards.ie
emberlearning.co
ethiopians.dev
fllsettlementblackrockt.com
www.foodfix.co.za
foodieq.net
www.fortunehomecare.com
www.gerasinergia.com.br
friday.getjuly.com
golem.quest
yamaha-cvm.gospurr.com
video.hurreytech.com
residex.igcv.com.br
in-chronos.com
pay.inddigi.com
www.intofiber.com.mx
jeremecobb.com
joextodd.com
joyjitc.com
www.joyjitc.com
aarambh.kabhidesign.in
moda-operandi-dev.kapitalnine.com
kiklospaideia.com
app.leapfitz.com
leofarata.com
chat.lerimas.com
www.lesdadallamot.hu
casadecarnesrenata.lupi.delivery
luxurio360.com
manuelvivoda.fyi
moncolislivraison.ca
www.morreach.com
docs.mtmlogistics.com.au
mundoarcoirisartesanato.com.br
myfocusdrive.xyz
mylixx.com
naga.you
auth.nagal.org
link-smoraes.nibo.com.br
just.niemans.website
www.nizer.it
notpg8.dev
cdn.obumnwabude.com
www.ok4brain.app
assess.oneandall.se
parenthing.co
suporte.performait.com
app.ppwtech.com
www.precisebid.com
app.prepahead.co.za
guestapp.prodiversapp.com
progmester.hu
publicmediasolution.com
qualia-media.com
www.ref-stockholm.nl
rxlogics.com
amplify.semecky.ch
www.shalemarks.com
www.skhonamathebula.dev
www.smokeslate.xyz
smokingchops.co.za
auth.sooul.co.uk
www.sourceandstardust.agency
rogerdeanstadiumtrivia.sqwadhq.com
ina-dev.studiossolution.com
sumaira.studio
www.sumaira.studio
www.sumedh.dev
www.tomasvajda.cz
townstall.com
tranphuchuynhit.id.vn
trek-africa.com
trudosys.com
app.ubunifucollege.com
uglygotchi.at
vbend.co.za
jardin.vitrin.as
www.app.vocai.me
webry.sbs
Other domains in certificate