Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=nvpgames.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 04, 2026
Valid Until
October 02, 2026
50 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3A:84:AA:4F:53:42:96:30:A1:67:60:54:4A:6B:DC:4C:34:FE:35:78:7B:37:E5:DD:78:F4:A5:3D:D8:05:16:FB
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
carromera.com
academiadekster.com
www.alesca.com.br
aquasur.org
www.asociacionveracastillo.org
www.authentication-srilanka.com
autoexpertindiacompany.com
auth.bewitness.world
bilindgame.com
blarkly.com
bonuska.com
app.brickvester.com
cataloger.me
chicagoshipchandlers.com
clarifocus.app
wallet.cocopago.app
asl.codebridge.app
coincidenceapp.com
cxie.dev
damnedbytime.com
daneshelford.com
dev.docs.dcupl.com
platform.deeplexity.ai
digioneexpo.com
admin.dionytravel.md
www.doubleus.at
drschek.com
duel-streams.fun
lite.dumbnote.app
totem.queue.e-ceos.app
www.entregas-am.org
www.evokgym.com
app.familinku.com
www.fichon.eu
ganando.forjadecodigo.com
web.getplaytime.app
pay.sandbox.playhq.gr4vy.app
guvenceatlas.com
habaitlezchuyot.com
haballerim.store
cumin-beryl.harecord-dev.com
demo-beta.hashdash.it
hpusharkscamps.com
imobiliariadepaula.com.br
ednevnik.usce.ios.edu.rs
www.islandcarrentals.travel
jessieyang.net
jyoraceramic.com
kalalawyer.com
kristinepaez.com
lehonghai.id.vn
www.letsplant.app
app.limplusresolve.com.br
lirainmobiliaria.com.ar
lokali.ai
www.luizyamada.com.br
maathmagic.com
masarap.mendaza.eu
www.misto.world
monteiroealbuquerque.com.br
morphosis.co.za
web.mushby.app
muxfd.com
nahraynarabia.com
notafid.com
nvpgames.com
link-staging.outpatient.ai
pisicloud.com
www.plantboop.com
app.playmatcha.com
playtakethel.com
portugalcarassauga.ca
www.pos-rest.com
procastium.com
projetoerguer.com.br
pscorecard.com
qrconnect.app
jepsonnorthwest.quetzalpay.io
qwakup.live
ravenrend.com
razcreationmedia.in
www.readcoach.site
red-ksa.com
rigli.com
score4allmediatech.com
selfevolutionlab.com
siepip.org
skyloopbeats.com
www.smarthomeapp.com.br
shopping.stable.codes
stayuntilsunday.com
www.sudarshandhakal.com
weathertide.sysadm.no
ten8.co.in
go.tere-za.eu
timelnr.co.uk
usolume.com
app.engage.cja-collections.voyagernetz.us
vygram.com
font-cdn.wizardlabs.com
Other domains in certificate