Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.hooraycards.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 04, 2026
Valid Until
October 02, 2026
44 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2D:50:9B:CC:FA:61:8C:BF:C1:C5:5A:1C:0C:19:A3:15:85:A0:F1:33:28:8D:F2:97:C1:CE:A1:70:63:A6:B8:1A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
res-automata.com
landing.abfacademy.com.br
adnqr.co.kr
www.advocad.ai
www.aevo.education
allinword.com
www.ananth.link
araaura.life
asadnafees.site
www.asadnafees.site
care.balm.ai
www.care.balm.ai
copy.bastidores.pro
blairlive.com
planner.cerezeal.com
helios.charsiubao.io
citytour.dev
www.codgic.online
www.coolerstampico.com
datasolmu.fi
www.datasolmu.fi
www.dramityadav.shop
www.easyfoxgames.com
fokus-news.org
www.fortuneproperties.co.in
www.foundersbasketball.org
masa.fxrkqn.org
www.geneseed.ph
getontrack.io
www.gkmaps.com
www.himoon.app
support.dev.hireroo.io
www.hmtwire.in
www.hooraycards.com
staging-admin.hubgift.ir
huiyie.shop
www.huiyie.shop
procure.iconicai.co.nz
imanu.xyz
www.interify.mx
intopia.co.kr
journaldeprod-radiob21.tech
www.konopka-games.eu
admin.lakshmipay.in
latomson.es
www.latomson.es
www.linknest.kr
www.mashuperu.org
mazelogistique.com
www.mebuki-academy.com
cxc.mudanzastml.mx
historial.mudanzastml.mx
incidentes.mudanzastml.mx
liquidaciones.mudanzastml.mx
nomina.mudanzastml.mx
usuarios.mudanzastml.mx
mulhernaosecale.com.br
www.mulhernaosecale.com.br
myeverwhite.com
nexverse.ca
pos.nortic.se
bhuvaneswari.olewinai.com
patrioticbuilders.in
www.pdflocal.in
qzltech.hair
reflecta.zone
hub.remotesocial.io
www.ribiskus.com
rippletech.digital
home.rndpig.com
flowguard.schmidtstallateur.de
www.sckincaid.com
seismicdev.it
namakkal.selvitravels.in
komachi.setouchi-stay.com
setouchi-stay.com
terrace.setouchi-stay.com
ujina.setouchi-stay.com
wakakusa.setouchi-stay.com
www.setouchi-stay.com
learn.skrillaplan.com
kbudget.swheatlabs.com
tasoflow.com
tech2u.dev
apps.techtown.fr
games.thedrunkbanana.com
lift.tracyislandlabs.com
auth.trainloadout.com
uptaxsoftware.com
heritage.vagner.page
victory-opulence.com
www.viventie.de
zoomback.vodang.com
reg.vz-experiences.com
company.wads.dev
www.xipeng.shop
xipeng.shop
www.yinhe.surf
zhuochao.shop
zhuohuitr.shop
Other domains in certificate