Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=holoplayer.jp
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
June 20, 2026
Valid Until
September 19, 2026
41 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
26:51:C1:A6:62:42:28:DD:98:C2:22:74:DA:C1:12:91:F6:DD:00:76:15:13:43:57:F5:A5:BA:E2:85:0C:C8:6D
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
bookclubhouston.com
talento.365equipo.com
workspace.finance.adaptivedev.in
agentsandpencils.ai
www.aifinanceguide.app
www.amanai.in
aodesu.com
www.bettynwoks.com
foodmunch.botsedge.com
www.brainbeam.tech
connect.capturs-systems.com
app.cardioexames.com.br
cardstudio.org
gamboabaking.clau.io
mansodelivery.clau.io
egb.clevereducate.de
clickworks.co.za
clipsmith.app
test.cine.cnice.fr
coconutwala.in
applink.codegu.ru
coupones.tech
doklim.com
dopair.app
edciitd.com
www.edgeworth.net
eengroenekijk.nl
maou.eggstudio.jp
www.elizabethgordon.com.au
staging.cloud.enzo-pos.com
groupes.esi-bru.be
www.estacionamentojuveve.com.br
fernandoautomoveismg.com.br
portfolio.ferudinato.com
www.fijo.co.uk
www.firebirdmun.com
fmabril.com.ar
gdki.foodle.su
gamecreator.one
hmn.to
holoplayer.jp
htkenterprises.net
imai.foundation
asiangrill.inseat.menu
leadapplinks-dev.intervarsity.org
dashboard.invessed.app
staging.ipdynamics.ai
inzorasecurity.itsltd.online
jaguar-welding.com
www.jeffwittek.com
jocompas.joaquin.app
www.junefjord.se
kadakcafe.ca
www.karlawest.com
www.kodaros.com
www.kunt.dk
acostaverde-performance.lernit.app
mallline.org
laguardiamoreira.marcafranca.com
www.meetain.io
assets.memobac.app
lasanta.menusdigitalesmty.com
qa.mobilenxt.app
monaai.de
www.murphle.com
muttleydoggydaycare.co.uk
web.myco.ink
mynde.ai
www.ng-stuttgart.de
www.oasistech.in
ourmask.org
peacedollar.org
pdev.perss.no
cryptobabyname.pkuhar.com
play2x.one
databook.power.com
proofgo.ai
www.protextapp.com
whois.publicissapient.fr
scanme.pureit.vn
racemates.se
app-aquariuslagos.refiltek.com.br
sas.reimscoworking.fr
rocadegames.org
rodafacilsadecv.com.mx
rooftoplabs.io
rostyslavsokolov.com
qa.seafrozen.nl
develop3.manaport.seto-solan.ed.jp
rmc7g.sevengreen.co.id
www.smartbloomai.online
www.soeltech.com
soliumgreen.com
www.sreejaenterprises.com
starstruck.nz
www.tammotion.co.za
www.taprootsoda.com
www.technoquest.co.uk
app.ua-baars-bloemhoff.nl
superadmin.yogkshemladnun.com
Other domains in certificate