Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=highscores.gamingboard.luxov-connect.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
January 27, 2026
Valid Until
April 27, 2026
85 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
F5:12:36:E1:FE:91:95:DD:A9:7F:43:34:A6:1A:68:83:1C:BD:8D:A4:B7:4A:4B:13:37:A6:31:09:B0:0F:67:F0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
brochard.tech
ad-teq.com
www.advaisys.com
cdi.aghedgedesk.com
www.aioremote.net
www.aquarenda.com
barronsoftware.com
photography.beppekarlsson.com
cart.bizgeek.in
raf.bmhost.net
boundedlinetechnologies.com
www.broadwayticketguide.com
cg-music.org
www.cheapcarrentalvancouver.ca
jcetcheverrydespachante.com.uy
qt.ttex.com.vn
cpa.education
cn.creatoradar.com
curtisfriesen.ca
www.decla.red
dentistathome.com
anis.djaidja.com
www.latest.docalculate.in
easy-geo.online
ecostruct.se
www.educationadmissions.co.uk
eveningjob.uk
dev.familytools.app
functions.fiorellapattoni.com
event-dev.fitt.kr
www.foto-albums.nl
www.gjallarhorn.news
globalriskmodeling.com
www.iachc.ca
rozi-ragil.itsyourdayofficial.com
janekstockburger.com
mario-kart.jennynielsen.com
jitpapneja.com
www.joinaccountingplus.net
kartawfrp.pl
sccc.kiana.io
kierratyskaverit.fi
kitcodmcc.com
labourerjob.uk
www.leafapp.fr
pro.letscan.it
luxe-topup.store
highscores.gamingboard.luxov-connect.com
digitalseva.mahsua.com
2018.me-nutra.com
synsquiz.mediaperformance.no
medmor.in
microdyno.de
www.midirautomation.com
maintenance.mndassociation.org
www.mobilepflege-petker.de
static.moondropsites.com
www.morgandenis.fr
elmul-furqaan.moshiurrahman.online
neuralui.dev
nvinproperties.com
auth.nyxo.chat
react.misueldo.o9.cl
www.openindustrialdata.com
test.optimxsports.com
wbsha.org.in
otherhuman.it
www.ozgurcelik.com
www.paygohcr.com
peartree.games
admin.physiotherapyhomeservices.com
www.physiotherapyhomeservices.com
portalest.com
www.ppsgroups.com
qcatstudio.com
ramtin.cc
www.randomtubes.net
cms.redwood-group.co.za
reviewsbuddy.xyz
prod.rolo.family
www.sis-sicherheit.com
admin.skimentor.no
www.soulmender.ai
cloudhand.svday.com
app.tailone.ai
www.targetier.com
nic.tenxor.sh
findmyface.thai.run
theonephotobooth.com
www.throwdown.app
www.tipsymeter.site
www.twoowl.com
uptimex-monitor.site
www.vaade.co
www.vetaitexas.com
app.webewell.co
www.yline.app
esimapp.ymobile.jp
brisbaneaisummit.yodelit.co
modelsandcreatives.yodelit.co
Other domains in certificate