Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=indmanager.cabalosystems.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 03, 2026
Valid Until
October 01, 2026
45 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
63:7F:2A:A6:55:84:86:81:A8:E0:5D:5C:2E:5A:57:6C:A2:B7:16:C3:72:CB:A7:30:DE:F7:10:D6:C0:5A:8C:3F
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.samla.studio
360toolings.com
www.abjoy.co.za
www.adesma.cat
florists.ainewz.ru
calmdrop-admin.almostrobotic.io
attractiontest.amero.dk
www.animallo.app
anthosair.com
cao-umc.appdashboard.nl
appkrafterrz.com
onetouch-link-dev.astropay.com
clubview.baizebook.in
barometro-naviero.com
bhassessments.co.uk
www.boubou.design
indmanager.cabalosystems.com.br
chachahouse.jp
bushwood.clubplay.app
www.clubplay.app
www.congviencavoi.vn
cornerstonechurchonthepark.org
cuding.shop
app.designerssprint.app
help.eceos.app
www.expromax.com
ezprototyper.com
kids.eztalking.vn
www.ezvend.services
app.fariaserv.ro
fedsconsulting.com
cal.flaytal.com
auth.plant.fpdrozd.com
goaiarchitect.com
www.gridaboard.io
nopbaithi.hdsai.id.vn
helmora.lk
hngart.fr
fontastic.hotplmedia.com
darpan-app.hotwax.io
portal.imadeit.ai
janambrestudios.com
auth.jd2cv.uk
jenkins-cert.com
link.jobseeker.life
kalkee.org
kbeautysignal.shop
keurslager-carne-diem.be
kittyco.online
www.kruhprobuzenych.com
console.kukerja.id
kuvit.cl
landofgreenginger.uk
ernestine.lesfosses.com
rallyreel.logicandlens.media
luminacx.app
demo.coredefence.makeassociates.dev
www.maplecarebridge.ca
markhordetailing.com
www.maroc-archivage.com
momentsco.app
motelportobelo.com
admin1.myancare.org
routine.myturn.monster
admin.nanakai.vn
www.natashanova.art
www.navity.no
nissiinstitucional.com.br
dev.niwss.org
exam.nusantarapathway.id
www.ohlangetrust.org
www.olinp.in
orbiteduc.com.br
ortamat.com
auth.petslikemine.co.uk
admindb.plantlink.co.kr
playdime.app
www.pokeratwork.com
www.primassets.online
ratethatdriver.tech
rctechnology.in
resultoz.com
www.robertaperronepsicologa.it
rodrigoelorena.com.br
idoz.salai.co.il
manual.samileltec.co.kr
stg-tesoreria-hisp.sbxfinops.com
soranacademy.com
tlvconfessions.com
tnmstudio.pro
www.tomaspudis.sk
toroconsorcios.com.br
transmisionescosmos.com
www.univoice.asia
vaultmt1.com
zipurl.vforvivah.com
virtep.com
visakhacnc.in
xroot.me
yourcyclekeeper.com
Other domains in certificate