Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=jafirebasec2.moboreader.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 22, 2026
Valid Until
October 20, 2026
73 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FA:75:3B:C3:D8:44:E0:22:99:28:7B:EE:39:AD:F0:29:1F:BF:AF:41:97:2F:3E:B8:F9:55:17:97:97:A7:5B:D6
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
fyd-edu.com
www.5bits.it
adhiyamanfoundation.co.in
askleia.co
b0ris.de
www.baklabs.dev
demoportal.bambumeta.software
bernardparah.com
www.bernardparah.com
www.brenshots.com.br
cookiepot.eu
cuatrocuarenta.es
races.cullmanarc.com
xyjh28x4ug4.easyapp.co
www.ebenezertelemedicina.com.br
emperadores64.online
auth.empreguetes.wtf
evidence-shop.com
auth.ezresort.online
freebiest.de
app.gaidechicago.org
www.gestiall.com
gharkiroti.in
list.grevling.dev
www.hulkaudio.com
imobiliareraul.ro
iptv4k.be
jhon.johnnyspizzaofbrooklyn.com
www.kaaat.dev
xmbtask.kai3d.io
kaoli.ai
deedi.karmic-bond.com
kennedystudios.info
www.kgodisowrites.co.za
www.kick2cloud.com
landinnproperties.com
laurenvilent.com
lillyforfun.online
littlebugplayhub.com
lownixtech.com
www.lunexaeldercare.com
maccrey.com
seongsu.maccrey.com
hydro.maestroswim.com
maostudio.mom
marak.marrakechmenu.com
whatsapp.mibot.cl
www.ministeriosfdv.com
mobikres.com
jafirebasec2.moboreader.com
mombezonline.co.zw
mybutterfly.co.nz
myfittness.app
mykrew.pro
www.nativeforms.com
hugo.nesta.io
www.nubocred.com
nutrivisual.com
omardarwish.dev
pizza.omran-x.com
museumapp.openandhonest.org
packzenblr.in
www.padel-ranking.com
poe.pcninc.dev
www.piecebypiecetile.com
pixzzel.com
smurfolution.popul-ar.com
qiratex.com
api.quey.io
www.randospompettes.com
rankmeonai.co.uk
auth.raventopup.lk
riderswayapp.com
www.riderswayapp.com
robert-redl-anleger.at
royalayst.com
santysama.design
gallery.sigmashine.com
www.admin.slyde.ai
auth-staging.southpole.com
tariq.om
theforum.melbourne
topdjdrops.com
tryknowyoursolar.com
turnoclase.com
quo.unichest.com
unitedbits.games
vaidebalyvaiporelas.com.br
vijayconstructions.net
vijayinteriors.co.in
vijaywaterproofingsolutions.org
www.vijaywaterproofingsolutions.org
www.vishalkhare.com
www.voluntrapp.com
waaf.jp
www.wbranch.com
wevision.online
ch3.writerduet.com
www.xetech.sg
inventure.zajno.com
Other domains in certificate