Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=summitestates.com.br
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 11, 2026
Valid Until
December 10, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A0:7A:F2:0D:CD:B2:46:B7:26:FD:9D:44:07:13:83:AC:F1:FC:32:FE:A7:F2:96:C9:F7:61:79:16:79:73:5F:95
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.wattflex-solution.com
www.100pa.com
www.2khaas.com
abbybuttnutrition.com
admin.abdistribution.ca
abssolucoestecnicas.com.br
www.accusim.com
addilock.com
advocaciaperestrelo.com.br
agilis.lt
agoraosint.com
aixle.ai
www.alala21.com
support.alis.mobi
store-e.app.amplifihq.com
anasaviajes.com
animated-sticker-maker.com
capodarte.appshare.com.br
www.bboxcybersec.com.br
bdnk.design
dvvpokalvolley.deeplinks.bfansports.com
budgetwalletpro.com
www.buildthemountain.com
cathyphung.com
cellebrity.bio
mta-sts.cocoa.works
fove-demo.login.cog-selfcheck.jp
collinpatrickportfolio.com
controia.com
cormackwiddop.com
get.crewpass.co.uk
crossingvoidhq.com
www.danier.dev
platform.deazy.com
link.dokki.app
x2i436il3gzzb9fx.easyapp.co
easymeet.me
eshaanchaudhari.com
www.my.everywhereco.com
speed.eztalking.vn
fairy.world
www.gessogama.com.br
walk.gla.jp
www.goalpath.com.br
gromatemedia.com
guitarlessonsplymouth.com
handmadehero.org
hiddenfacegames.com
www.hotzonesrescue.com
shepherd.loadtest.hrbrain.dev
html-cheatsheet.com
twis.isomotret.com
javascriptdb.com
joeraver.com
justinsalcedo.com
kidshealthportal.com.au
app.kria.io
www.kynne.se
lawnlights.org
app.lollspace.com
stg-visualization.lookrec-staging.work
whitepaper.luciaprotocol.com
www.marcelloinfante.com.br
games.milo2.com
missesroboto.com
www.noah.mobileappster.co.uk
sensores.monarcatech.com.ar
baby.morgandenis.fr
museocatedral.org
admin.noah-food.com
app.nosp.io
www.nususc.com
onefence.com
foredu.ge.orchestra4edu.com
auth.parkinsonacademy.be
pericarp.io
hq.qashier.com
qbo.cl
www.quiltykim.com
gd-sch.randy.ltd
docs.rele.ai
reten.ai
roohacademy.org
sadaiv.com
shema-terapiya.ru
strategicapp.shoshkey.com
live-dev.silentparty.ch
www.skallafantur.com
slidify.cc
app-staging.ss.hr
summitestates.com.br
www.tdvcore.buzz
bingo.games.tetherstudios.com
sandbox.thndr.games
app.reviews.usegoldmine.com
www.valthor.es
auth.vivadehof.com.br
www.wavehospitality.ca
wethepeoplewatch.com
midiclef.zeromemapps.com
Other domains in certificate