Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=penaltypoker.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 03, 2026
Valid Until
November 01, 2026
51 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FD:84:55:63:00:CB:5B:48:C5:40:8E:AA:30:F0:8E:39:1E:FD:85:4E:26:88:59:3D:56:03:D2:B2:C7:6B:7C:78
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31536000
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
bptexam.com
health4her.actionlab.dev
growth-dev.adssets.com
aemexam.com
www.aemexam.com
vaktija.ahad.ba
stage.app.aldenteai.com
www.angelabewick.dev
mta-sts.aventisolutions.pl
www.bdsexam.com
bftsexam.com
bort.cl
botiq.at
brouwer.pro
www.budubana.com
caspprep.com
www.cedpexam.com
changquangcaoyt.click
choctawdental.com
codetypist.com
www.conseq.uk
continentalfinancez.com
cpbdexam.com
cpequiz.com
cpfoexam.com
cpmmexam.com
cpreexam.com
cprpexam.com
www.cprpexam.com
cptmexam.com
craexam.com
www.craexam.com
crmpexam.com
www.crmpexam.com
csepexam.com
cstexam.com
cto-on-demand.fr
depexam.com
disfidadibarletta.it
djjoelkupis.com
evdeyemekyok.com
f3exam.com
www.f3exam.com
ferrelanthoni.com
www.forever-will.com
futurecarehelpinghands.com
galerirumeli.com.tr
gamesforbrands.com
www.gavilanandjoanne.com
gedcom.gedmaker.com
link2.goemon-jp.com
gpfguide.com
admin-dev.hipaamate.com
industrialskillslab.com
www.jayahn.org
numgen.jonathanmenna.com
www.joshuaopata.com
kine-lomme.com
kohari-english.com
www.kohari-english.com
letshyre.ai
lucsure.com
www.lucsure.com
mariagesimonetlaura.com
dev.memoriacall.com
mindhackinc.co
mropexam.com
my-recipes.net
www.natmegy.com
www.noicattaro5stelle.it
mall.ocaapp.com
orendafinserv.com
paystitch.com
penaltypoker.com
authenticbrandedcollections.piticommerce.com
playground.plugfox.dev
quodlibet.pro
ed.rskd.dev
sahakar-group.com
scorestack.in
www.sevaddo.com
shoosoku.com
soravit-varanich.com
stephenshouse.in
studioscopece.it
sys9.co.jp
techsavior.lat
tennisscoresheet.com
tennumbers.com
www.tetsuhiro.dev
qr.th7.org
thecaddy.co.uk
thedriftnft.com
www.thepawnshopakwesasne.ca
www.timoline.com
training-fellow.de
uscellular.vertikaliti.com
vistaar.ind.in
www.w-i-s.org
admin.ymapp.co
Other domains in certificate