Open
Cached
·
just now
77/100
SECURITY SCORE
Certificate Information
Subject
CN=dropship.boxup.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
December 27, 2025
Valid Until
March 27, 2026
73 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
51:EB:DE:C5:F6:F1:4C:27:EA:7F:8A:FC:97:D5:DF:BE:5E:BF:78:34:4C:36:14:14:36:57:48:ED:0C:08:6C:05
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
brookemorosca.com
nitro.12traits.com
stillfront.12traits.com
www.7starductcleaning.com
testing.accessiway.com
www.administers.in
ahigaspazioneutro.it
alwaystired.xyz
www.analisahill.com
resume.anyways.biz
www.share.apie.app
nudges.navi.apxor.com
www.asktobuy.shop
auraclinics.in
svgluneburg.deeplinks.bfansports.com
wwkvolleysherrsching.deeplinks.bfansports.com
blessedaluminum.com
bookmydesk.nl
dropship.boxup.io
www.bravoluis.com
admin.brookesnow.com
www.businessautomationsolution.in
aalam.chennaicyclists.com
climbingcommunity.co.uk
dashboard.coachviva.com
www.codeletic.com
www.concretepours.com
static.cross-social.com
www.dashboard.cryptoadvisor.ai
curacioninterior.com
whatsapp-actions.cxipl.com
datamatchingworks.com
www.daviddmliu.com
myshoutouts.dev-set.live
www.deveh.ca
www.dragzambrano.com
dusksomewhere.com
www.dustoffreset.com
links-dev.earthcubs.com
edesm.com
www.uc-bcf.edu.ph
clasificados.elheraldodechiapas.com.mx
app.ellaverbs.com
u.enl.sx
fanverz.com
fenixfoodsworld.com
www.ffrgb.de
francisbunker.net
fullprimal.ai
georgievi.info
grokterminal.ai
www.helloticksy.com
evaluer.hyundaimagog.com
www.iamhernan.com
crest-conecta.inteligenciamkt.com.mx
its-infinite.com
jonathankilpatrick.me
www.keralamatrimonysecondmarriage.com
kyleryan.me
kyse.link
app.magicmirror.love
www.mattymcfatty.com
prowin.maxjoehnk.me
helpcenter-cms.medicalmotion.de
www.mileage.autos
minicrm.app
bemmais-staging.omnisaude.app
careplus-staging.omnisaude.app
emanapay-staging.omnisaude.app
viventeris-staging.omnisaude.app
www.pandemic.live
www.parcelplus.app
peakmoments.co.uk
pebblelist.com
index.photorobot.com
raftengine.com
randomquote.co.uk
stg.yjs-album.re2fe.com
www.reevtech.in
universe.staging.roboflow.com
www.sam-fraser.ca
appdev.scoolio.de
shilutech.net
skref.ca
sml.pw
soehren.com
www.solartime.com.br
steinel-it.de
tech9studio.com
admin.traveltogether.app
www.treeidentifier.app
www.uttercash.com
qa.policies.vezham.com
wandan.com.au
www.we-build.city
wesit.co.za
portal-staging.xpersity.co
yes4gamification.yesmktg.net
mta-sts.zerobase.jp
www.zirve-international.com
Other domains in certificate