Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=lobstr.chat
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 22, 2026
Valid Until
September 20, 2026
42 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
9D:09:E1:94:60:A5:48:22:CC:51:04:53:50:FC:23:6A:E9:68:33:D8:B8:AA:E9:D6:58:BC:FD:7E:4A:92:58:5D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
auth.py-loft.com
www.aedwardshuntington.com
aphis-dev.ahrina.com
www.aolan.shop
www.apperto.com
www.arnecools.com
www.arslancorporation.com
auth.aventronix.com
www.backslashlinux.com
bapdbowl.com
bigdogrosin.com
reservatio.binarypoetry.ch
birdsinthebush.ca
app.bityalerts.com
partner.bookmysalons.in
www.cefoam.com
melania.chepeparrilla.com
cherylkiser.com
cle.vision
cmcoffeedev.com
codimatica.com
dashboard.communityapps.net
countwithme.com
survey-dev.deepdots.com
administrator.diamondaestheticsacademy.com
www.divricean.ro
drdentium.lk
duo-authenticator.com
demodash.ekinbarri.tech
enukso.com
freecontractforms.com
fucktoken.com
genshun9.com
tickets.getemit.com
demo.ghr-home.com
gigatsby.com
glasscrafted.com
dev.private-sale.go2nft.io
gometrotowing.com
govitally.com
gragundier.com
openclaw.grosshanten.com
halilakcan.com
www.beheer.hallovriend.nl
hazelthexton.com
dental2.hexas.co.uk
www.hubble.domains
www.hundredthousandloaves.com
iarriola.com
iberus.com.br
www.iberus.com.br
app.ipknowledge.net
itlki.com
jaylon.jp
jitplus.com
joyredeem.com
urheiluveikkaus.lahdenniemi.fi
www.learnink.buzz
lesgourmandisesdelaurence.com
lobstr.chat
coisa.lqueiroztecnologia.com.br
mago.one
www.malagaseniorclub.es
erp.mapleeducation.ca
mobileapp.marina-punat.hr
www.massimociaroni.com
medix.cl
menubase.io
dev.moquji.com
www.mpgroup-kurti.com
fornecedor.mypetbr.com
nashabandimaharajya.org
proclaimwsdlcheck.netapi.co.uk
inv.nuruldigital.my.id
auth.omara.sk
embed2.order.place
www.ormroaring.shop
www.orthodoxtypikon.org
www.paceme.net
videolibrary.pacificseafood.com
eu.pge.link
www.proteamsas.com
pura.co.id
www.rxocorporate.shop
savintsev.ru
openeng.soloz.ai
studioaeksent.nl
bloomingbridesbylabea.swanmoments.lat
tape-a-talk.de
fit.tberwick.co.uk
imagecompressor.theboringtools.com
ttm-mep-cloud-prod.firebase.trimblemobile.com
anton.tuomainen.org
login.urbanicon.co.id
booking.veerpicklepalace.co.in
fossil.vizury.com
www.workshieldapp.com
www.yesper.ai
admin.zense.online
www.zuejx.shop
Other domains in certificate