Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.gil.fyi
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BD:19:E2:1B:A9:7B:1D:CD:2E:E5:32:31:8C:55:CD:95:BC:8D:F0:82:09:9C:7A:E9:DE:94:E8:B8:50:7C:72:FD
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
b-bpay.com
abogadomacarena.cl
actosoft.com.mx
airalab.it
almarisolution.com
aphroditeproject.co
skincatchshowroom.console.appabrik.jp
www.archihospital.org
arkengine.in
www.arkengine.in
www.astridbang.dk
balkanamericans.org
bobcatcamps.com
store.botio.io
cardapiocloud.com
app.cazadoresmonterrey.com.mx
sondage.ceim.org
11.11.chanmi.kim
www.chronofit.net
chuysconcretefinishing.com
cityc.app
clotetnico.fr
shop.craftmc.eu
public-overlay.custom-overlays.com
imala.darartultd.com
app.davi.ph
medicarmonia.davidecampello.app
push.dcms.info
prod.wizzair.on.decisionrules.io
system.deepdive.sh
dj-solutions.com.sg
surveys.ebombo.io
finovers.org
doughpamine.food2order.io
app.getrope.app
omdb.gihan.uk
www.gil.fyi
www.agroecologica.goias.tur.br
www.encantosdoplanalto.goias.tur.br
www.serradamesa.goias.tur.br
www.valedoaraguaia.goias.tur.br
aps.gradiate.co.za
www.hotelvillam.pl
admin.idyllic.app
murabito.iidangooo.info
www.iletus.com.tr
q8-indexation-testing02.input4you.be
gokula-dev.intutrgo.com
www.junueducationservices.com
kopano.ai
labourer.work
artemid.landlele.com
www.lilja.dk
lok.sh
qrcode.lpbtech.com.br
lyridtech.com
backend.medeasy.io
panel.mertkabak.com.tr
tour.mikelkamel.com
firebase.mybiglove.ru
mymagichost.com
www.mypips.link
www.ngl.com.pk
nqod.it
auth.onlinesolitaire.io
paparecall.app
sponsor.pharmaawards.co.uk
www.picwords2.com
tracking-staging.playerapp.tokyo
www.portugol.app
powersoccer.net
app-dev.pvnt.io
www.renatadocesebolos.com.br
rethinkreading.org
www.sangreenlogistics.com
www.saunacamp.net
www.sff-global.com
www.shillonghousieclub.com
studio.shivoraa.in
skywalk.com.pk
smuldre.com
auth.staging.solostar.io
www.soluweb.com.ar
abc.sports-it-works.jp
staige.ch
www.sualavadeira.com.br
horeca.synckord.com
ta-wuermtal.de
www.talleratres.com.ar
www.thdev.me
auth.app.theconvohub.com
www.timotsui.com
torchi.com.np
transportesandes.com.uy
citroen.u-ride.me
demo.ultari.xyz
mobile.velvetdating.co.uk
www.webconsole.io
ww-fmovies.com
www.yunhui.lol
Other domains in certificate