Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=loopcode.ai
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 14, 2026
Valid Until
November 12, 2026
84 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A1:57:11:6C:8E:B3:21:36:7C:01:FA:7A:BC:4A:E8:05:66:2D:4F:FB:C7:A1:8F:0B:48:C5:A1:83:67:AF:C0:BB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
auth.eggscript.com
idrgameslot.13pm.org
absgballogy.autos
www.absgballogy.autos
sarang77.acepleating.org
king99slot.african-architecture.org
gpcstockorderdemo.agilus.tech
gpctimesheetdemo.agilus.tech
ai-psy-app.com
aliyener.av.tr
anirban.work
ave-admin.anorakplay.com
ave.anorakplay.com
arbuzconsulting.pl
aresdev.com.mx
www.aresdev.com.mx
show.arin.fyi
gasing77slot.astralpool-baltic.com
kaigai.autoarticles.net
autospa.com.au
www.autospa.com.au
purchase.avantemedicals.com
awakeningcontinuum.com
balazsfabian.com
deck.batec.group
bepsonghoang.com
bizsolai.com
www.bonniemarshall.com
www.calvarycampo.com.br
chunklocker.asia
www.copkca.ca
lunchroulette.cyberlago.net
dailiteam.com.ng
www.dasho.ai
detailingnetworkafrica.com
auth.doxiboo.com
www.einfach-reisekosten.de
fuocodivino.it
www.fuocodivino.it
grouppublicity.com
test.sit.admin.gyanteyacademy.com
test.sit.gyanteyacademy.com
app.healthpresso.co
hustlewheel.online
www.hustlewheel.online
hyggekrogen.com
callimitai-staging.karmapower.cz
insights.koepd.com
koepd.com
www.koepd.com
www.lawlogydesk.in
www.letsstudy.pro
action.lockone.dk
www.lokalrepo.com
loopcode.ai
www.loopcode.ai
luckybugpet.buzz
staging-app.lutzlotte.de
makexyz.buzz
www.makexyz.buzz
www.milenalazarevicpopovic.com
vastranand-frontend-dev.miraiminds.co
muncaria.com.tr
safespend.nalamzap.dev
notehere.app
jobfair.ootob.ai
ouxiang.lat
www.ouxiang.lat
pacobel.com
patsogo.no
paulorsilva.pro
reality.pawsey.org.au
www.pixelcapital.io
www.plandezvous.online
plugandrest.com
loop.qolvyr.com
resumify.me
www.resumify.me
ricotap.co.uk
rythuverse.com
auth.sendbill.online
simin.in
www.simin.in
smokemetrics.com
www.sport-oberwallis.ch
matrix-pwa.stocure.in
stromkraft.de
suncredit.lv
sunonebeer.buzz
www.sunonebeer.buzz
www.tagnar.com
www.takesflight.eu
app.taptap.org.uk
www.themobileunit.co.za
www.valdireneseguros.com.br
vivatectlabs.com
kontor.volundra.com
warmodroid.com
www.yusha.lol
zinfai.com
Other domains in certificate