Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.goldpassbook.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 08, 2026
Valid Until
November 06, 2026
88 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
21:76:D2:46:E0:1F:4F:0D:0D:A7:36:7C:B0:3D:29:56:36:90:C6:ED:61:B0:A4:31:D7:BA:67:BE:38:AB:1F:2A
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.loop3r.tech
athinkingape.12traits.com
acnh.link
www.acrodemar.com
aidocumentmaker.com
www.alpinjob.pl
test1.alteredbroadcast.com
anforasdeatenea.com
u.anz.com
beta.appricus.com
apski.info
atulyainstitute.com
aztobacco.com
bahatihilda.com
shoporder.bijoux-poemia.com
www.bkmmanagementco.com
portal.bookingflow.app
www.bowls2go.com
braincoders.io
www.ma.bsf555.co
building-integrity.com
bytewises.com
calumjohnsoninc.com
cfgroupe-aquatec.com
www.challenged.app
shivani.chandrasekharsahu.com
reports.commb.ca
www.dinamo.it
www.drozario.blog
edden.app
diziolympiad.egyaanhub.in
endomo.net
etc.pt
evonpolishing.com
devshare.farmyng.club
nearchat.ferrypot.in
prod.fertilemind.app
www.finopsy.net
fireash.com
foursalesgroup.com
lieferschein-pratteln.galvaswiss.ch
ganapass.com
soycliente-uat-contrasenia.gnp.com.mx
www.goldpassbook.com
wc2026.hamiltonevans.com
www.hamzah.co.za
www.helpinghandssurgical.net
app.hi-ya.com
hmtowingservice.com
indico.ninja
jaysoni.dev
beta.jeeb.li
jjean.io
jyba.app
masspush-api.karte.io
www.keaoptionentry.in
www.j.kol.ski
www.kylekurz.dev
gramflow.launchbaylab.in
ledgernalysis.io
lescartesdelanalyse.net
www.lomitransport.com
manhaja.com
www.martamo.com
maruthimasalas.com
scan.menyja.co
mixdata.jp
pr-app.myprivatam.com
www.novastackservices.online
download.ocd.app
www.peekaboo.fi
www.piedmontwealthpartners.com
ripped.pl8s.io
www.playtequila.com
positioned.app
www.prabudhasaurabh.com
dallasmavs.pumpjackdataworks.com
rarefindarts.academy
app.redefleming.com.br
evals.rosebud.ai
connect-ng-asset-management.rxoconnectdemo.rxo.com
connect-ng-carrier-recurring-lane.rxoconnectdev.rxo.com
www.saatanaan.fi
online.shantimakaan.com
shkadari.com
www.sisterlyevent.com
snicub.com
sparkcommodities.com
sqi-ea.africa
staerkeralscorona.com
sunkoat.com
super-duper.games
cuti.tap-dlj1.com
auth.stg.tecture.jp
dashboard.tourbutler.app
ununifi.com
admin.vastavya.com
vibecoderx.com.tr
welgeleecottage.co.za
ytsveggie.com
Other domains in certificate