Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=gameallo.com
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 08, 2026
Valid Until
September 06, 2026
72 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
FD:29:96:CA:E1:3C:70:FD:9B:ED:F8:97:AE:0F:F8:CE:9A:02:11:F1:83:06:E5:CF:F7:AD:BD:53:06:03:22:6C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
asalia.com
*.asalia.com
*.gutjqd26cy.asalia.com
*.labs.asalia.com
*.media.asalia.com
*.nhac.asalia.com
*.pool.asalia.com
*.svn.asalia.com
*.wildcard.asalia.com
*.ww25.asalia.com
882098v.my
*.882098v.my
*.www.882098v.my
ayurvedaherb.in
*.ayurvedaherb.in
*.m.ayurvedaherb.in
*.api.courtera.com
courtera.com
*.courtera.com
*.nextcloud.courtera.com
dollar-lion.info
*.dollar-lion.info
flarescope-mote.rest
*.flarescope-mote.rest
*.phjxkk.flarescope-mote.rest
gameallo.com
*.gameallo.com
*.mail.gameallo.com
*.webmail.gameallo.com
*.www.gameallo.com
gauryamunacity.info
*.gauryamunacity.info
gjyrehz400.vip
*.gjyrehz400.vip
gmtdv.qpon
*.gmtdv.qpon
*.autodiscover.gymrow.com
*.cms.gymrow.com
gymrow.com
*.gymrow.com
*.mx.gymrow.com
*.nextcloud.gymrow.com
*.webdisk.gymrow.com
*.wildcard.gymrow.com
heyelitercs.com
*.heyelitercs.com
heyelitercsai.com
*.heyelitercsai.com
hospitalguide.com.au
*.hospitalguide.com.au
*.www.hospitalguide.com.au
htmlang.com
*.htmlang.com
*.autodiscover.idefendva.com
idefendva.com
*.idefendva.com
*.ww25.idefendva.com
*.client.jdgs.org
*.connectvpn.jdgs.org
*.hostmaster.jdgs.org
jdgs.org
*.jdgs.org
*.login.jdgs.org
*.mobile.jdgs.org
*.office.jdgs.org
*.secureaccess.jdgs.org
*.ssl.jdgs.org
*.vpn.jdgs.org
*.vpn1.jdgs.org
*.vpn2.jdgs.org
*.web.jdgs.org
*.webconnect.jdgs.org
*.webvpn.jdgs.org
*.wildcard.jdgs.org
*.insight.nftdeb.art
nftdeb.art
*.nftdeb.art
*.sitemap.nftdeb.art
pola77.top
*.pola77.top
*.mx.shopcloud.co
shopcloud.co
*.shopcloud.co
*.www.shopcloud.co
*.cloud.xn--us1a92x.com
*.m.xn--us1a92x.com
*.rds.xn--us1a92x.com
xn--us1a92x.com
*.xn--us1a92x.com
Other domains in certificate