76/100 SECURITY SCORE

Certificate Information

Subject
CN=vrgamecity.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 14, 2026
Valid Until
August 12, 2026 80 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A2:2C:BD:21:3B:22:D7:75:A3:1B:22:2E:59:1B:6C:F9:5E:C0:B7:B8:FB:66:9D:33:BB:17:08:3C:AA:58:F8:CC
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
virtualducks.com *.virtualducks.com *.cloud.virtualducks.com *.www.virtualducks.com

Other domains in certificate

aflamfree.com *.aflamfree.com *.box.aflamfree.com *.ffffffffffff.aflamfree.com *.qa.aflamfree.com *.ww16.aflamfree.com
biggboss.live *.biggboss.live *.cpcontacts.biggboss.live *.ww25.biggboss.live
bluewaterclubsuites.com *.bluewaterclubsuites.com *.ww25.bluewaterclubsuites.com
*.32.ferry.studio ferry.studio *.ferry.studio
flowerforweddings.info *.flowerforweddings.info *.hostmaster.flowerforweddings.info *.mail.flowerforweddings.info
foodistanyc.com *.foodistanyc.com *.ww25.foodistanyc.com
h5appy168x.vip *.h5appy168x.vip
inlistconsult.com *.inlistconsult.com *.optimistic-red-tortoise.inlistconsult.com *.staging.inlistconsult.com
*.comune.lais.live lais.live *.lais.live *.ww38.lais.live
leaksz.us *.leaksz.us
magensonden.de *.magensonden.de
propelamplifyygem.info *.propelamplifyygem.info *.umc0v5.propelamplifyygem.info
supjav.tv *.supjav.tv *.ww.supjav.tv *.ww16.supjav.tv *.ww17.supjav.tv *.ww25.supjav.tv *.ww38.supjav.tv
*.qdiek.tiger78gg.xyz tiger78gg.xyz *.tiger78gg.xyz
timoun2000.com *.timoun2000.com *.vpnssl.timoun2000.com
*.autoconfig.viralvdo.xyz *.blog.viralvdo.xyz *.ftp.viralvdo.xyz *.mail.viralvdo.xyz viralvdo.xyz *.viralvdo.xyz
*.m.vrgamecity.com vrgamecity.com *.vrgamecity.com *.www.vrgamecity.com
*.app.vyperi.pro *.dev.vyperi.pro vyperi.pro *.vyperi.pro
*.webdav.wiik3.xyz wiik3.xyz *.wiik3.xyz *.ww25.wiik3.xyz *.ww38.wiik3.xyz *.www.wiik3.xyz
*.dpjx.yiio.club *.dy.yiio.club *.nnmh.yiio.club *.ppp.yiio.club *.pv.yiio.club *.random.yiio.club *.sc.yiio.club *.std.yiio.club *.superset.yiio.club *.sy.yiio.club *.v.yiio.club yiio.club *.yiio.club