Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=rummyscorer.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
April 21, 2026
Valid Until
July 21, 2026
69 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
9E:B4:A7:C4:C2:31:BD:04:2E:67:39:F4:52:31:CF:C7:DB:E3:83:FC:AA:CF:9B:C5:23:59:D9:21:81:1A:3D:3E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
intofuture.org
www.2power16.com
absoluteautoict.com
alicebenwedding.com
app.alnuwaiseeblaser.com
alyolson.com
apoeko.se
dron.apolosolution.com
aprendiai.com
ariseglobaleducation.com
aura-agent.io
autoserwis4kola.pl
babyforce.com.br
ballet31.com
baomsacademy.com
baudelairecookies.com.br
bhajami.org
braindots.in
brewkhan.pro
butici.mk
calmati.app
app.camabel.be
www.capmarkets-ai.com
cardinalcoveep.com
carlosbaret.com
vacation.chrisanderica.us
cloudcall.my
codelumina.com
medicaopro.concretta.org
www.dailytasky.com
davidargov.com
brightsignplayer.disign.tv
diyavij.com
dodbank.site
www.doparttime.com
k.emmaapp.de
energiaybioclimatica.com
fonokarine.com.br
tracking-demo.fuplab.app
gfacadv.com
holyglow.app
www.hurip.cn
www.hydrosave.tech
ics-consultancy.com
ihesika.com
itsepiceats.com
khemarawestman.se
krishna02.in
kroioil.com
www.kroioil.com
lorenzobenazzo.com
lucrasalao.com.br
mavconsulting.ai
www.mediabridge.ink
mediaprep.online
nlsfinancial.com
nlswealthpartners.com
www.north-star.tech
poochon.xyz
homes.powellohioliving.com
pype.ch
qr-app.net
www.qr-app.net
quickwashapp.site
rastreiobox360motors.com.br
re-imagine.pro
recipesgalore.org
rmprestadordeservicos.com.br
rummyscorer.app
runwayreadyai.es
samimart.in
sanatyatak.com
shahadilmunawir.com
shreeshyamliving.com
sinanaktepe.com
www.sinanaktepe.com
www.sisup.org
webinaire-bpf-2026.smartof.tech
snughabit.app
solivagantautomation.com
www.solivagantautomation.com
studio299.it
www.studio299.it
www.sunmatch.it
candy.artintech.tableunstable.org
hvaler.tallang.no
themeatengraver.dk
titanbusinessmanager.com
tornax.in
totalservice.app.br
www.twinoaksaba.com
unioconnect.com.br
vcivascular.com
vetasocultas.com
www.vibesmap.fun
web3nodex.com
panel.yaax.app
yak.sg
yotransporto.com
app.zever.es
Other domains in certificate