Security Analysis Results

critdraw.com

Comprehensive domain security and infrastructure analysis

Live Website Preview

website screenshot of https://endstategames.com/

No Security Risks Detected

This domain appears to be safe and secure

100%
Score

Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.

Scan Information

Last checked:August 20, 2025 17:03:48
Scan Complete

Refresh page after 10 minutes
for updated results

Page Information

Target URL
https://endstategames.com/
Page Title
Unfold Whole Worlds - Board Games – Critical Draw
critdraw.com faviconSite Favicon
Status
Active

Host Information

Domain
critdraw.com
Server
cloudflare
Country
Canada
IP Address
23.227.38.36
ASN Information
13335
CLOUDFLARENET

Technologies

Shopify logo
Shopify
Ecommerce
HSTS logo
HSTS
Security
Google Analytics logo
Google Analytics
Analytics
Cloudflare logo
Cloudflare
CDN
HTTP/3 logo
HTTP/3
Miscellaneous

SSL Certificate

HTTPS Enabled
Secure
Certificate Issuer
N/A
Valid From
2025-08-19 17:03:52
Valid Until
2026-08-20 17:03:52
Subject Name
critdraw.com

Performance Statistics

136
Total Requests
13
Domains
12
IP Addresses
2.82 MB
Transfer Size
Content Size3.87 MB

HTTP Headers

Alt-Svc
h3=":443"; ma=86400
CF-RAY
97237770dfda7e44-PHX
Connection
keep-alive
Content-Type
text/html; charset=utf-8
Date
Wed, 20 Aug 2025 17:03:52 GMT
NEL
{"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
Report-To
{"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yvhZoHh60iZ1VQbMzBsyys2Hyf8vWuwHvCW%2BZaT7GasMWPQZ1Q%2F5kZfJUHH7mgBFK7qCBfUUhID5X8lekYnCMdZW0N7O22dZbpjF8AAh07hRpZq3bLGySvqSS%2FrlLg%3D%3D"}],"group":"cf-nel","max_age":604800}
Server
cloudflare
Server-Timing
cfRequestDuration;dur=98.000288
Transfer-Encoding
chunked
X-Content-Type-Options
nosniff
X-Download-Options
noopen
X-Permitted-Cross-Domain-Policies
none
X-XSS-Protection
1; mode=block
cf-cache-status
DYNAMIC
content-encoding
br
content-language
en-US
content-security-policy
block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
etag
"cacheable:18fbef90de0e245fa5302265eb0a5150"
link
<https://cdn.shopify.com>; rel="preconnect", <https://cdn.shopify.com>; rel="preconnect"; crossorigin, <//critdraw.com/cdn/shop/t/1/assets/overflow-list.css?v=168694168152117541881754926803>; as="style"; rel="preload", <//critdraw.com/cdn/shop/t/1/assets/base.css?v=70326751376282826331755450848>; as="style"; rel="preload"
powered-by
Shopify
server-timing
processing;dur=22;desc="gc:2", db;dur=6, db_async;dur=1.344, asn;desc="13335", edge;desc="PHX", country;desc="US", theme;desc="146872041639", pageType;desc="index", servedBy;desc="pll5", requestID;desc="ee8dd219-78a8-4246-9c64-7323f6090ebb-1755709432", _y;desc="6a6a8a58-34b8-45f1-a7b1-f504b8488352", _s;desc="84a054e6-b95b-4bb6-b567-3c1b169f0681"
shopify-complexity-score
200
speculation-rules
"/cdn/shopifycloud/storefront/assets/storefront/horizon.specrules-66c05844.json"
strict-transport-security
max-age=7889238
vary
Accept accept-encoding
x-dc
gcp-us-west1,gcp-us-west1,gcp-us-west1
x-frame-options
DENY
x-request-id
ee8dd219-78a8-4246-9c64-7323f6090ebb-1755709432
x-shardid
166
x-shopid
71194804391
x-sorting-hat-podid
166
x-sorting-hat-shopid
71194804391
x-storefront-renderer-rendered
1
34 headers detected

Technology Stack Analysis

Shopify

Shopify

EcommerceCMS

Shopify is a subscription-based software that allows anyone to set up an online store and sell their products. Shopify store owners can also sell in physical locations using Shopify POS, a point-of-sale app and accompanying hardware.

HSTS

HSTS

Security

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

Google Analytics

Google Analytics

Analytics

Google Analytics is a free web analytics service that tracks and reports website traffic.

Cloudflare

Cloudflare

CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

HTTP/3

HTTP/3

Miscellaneous

HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web.

Website Cookies 13

_ga_2BMZNXMZSK

.critdraw.com

Value
GS2.1.s1755709433$o1$g0$t1755709433$j60$l0$h0
Expires:9/24/2026

keep_alive

critdraw.com

Secure Strict
Value
eyJ2IjoyLCJ0cyI6MTc1NTcwOTQzMzM2NCwiZW52Ijp7IndkIjoxLCJ1YSI6MSwiY3YiOjEsImJyIjoxfSwiYmh2Ijp7Im1hIjowLCJjYSI6MCwia2EiOjAsInNhIjowLCJrYmEiOjAsInRhIjowLCJ0IjowLCJubSI6MCwibXMiOjAsIm1qIjowLCJtc3AiOjAsInZjIjowLCJjcCI6MCwicmMiOjAsImtqIjowLCJraSI6MCwic3MiOjAsInNqIjowLCJzc20iOjAsInNwIjowLCJ0cyI6MCwidGoiOjAsInRwIjowLCJ0c20iOjB9LCJzZXMiOnsicCI6MSwicyI6MTc1NTcwOTQzMzMxMCwiZCI6MH19
Expires:Session

_shopify_s

.critdraw.com

Lax
Value
84a054e6-b95b-4bb6-b567-3c1b169f0681
Expires:8/20/2025

_shopify_essential

critdraw.com

HttpOnly Secure Lax
Value
:AZjIb-K6AAEAXgKshkpiamCOaTNopf6xM1OHxP0qU1_GVYKDEjgSThNkcw_66oZ1XvoCEjmDQDKIYU0wcEZy35QoIo7jR29Qwzf00y1J:
Expires:8/20/2026

_landing_page

.critdraw.com

HttpOnly Lax
Value
%2F
Expires:9/3/2025

cart_currency

critdraw.com

Value
USD
Expires:9/3/2025

_tracking_consent

.critdraw.com

Lax
Value
3.AMPS_USAZ_f_t_KBAEZccDQCerlmViwcvsBg
Expires:8/20/2026

_shopify_y

.critdraw.com

Lax
Value
6a6a8a58-34b8-45f1-a7b1-f504b8488352
Expires:8/20/2026

_gcl_au

.critdraw.com

Value
1.1.88098810.1755709434
Expires:11/18/2025

shopify_pay_redirect

critdraw.com

Value
pending
Expires:8/20/2025

_ga

.critdraw.com

Value
GA1.1.840277352.1755709434
Expires:9/24/2026

_orig_referrer

.critdraw.com

HttpOnly Lax
Value
Expires:9/3/2025

localization

critdraw.com

Value
US
Expires:8/20/2026

External Links 1

Powered by Shopify

www.shopify.com

Analyze
Target URL
https://www.shopify.com?utm_campaign=poweredby&utm_medium=shopify&utm_source=onlinestore

Requested Domains 13

cdn.shopify.com

Unknown Type
No category information available

critdraw.com

Unknown Type
No category information available

endstategames.com

Unknown Type
No category information available

error-analytics-sessions-production.shopifysvc.com

Unknown Type
No category information available

fonts.googleapis.com

Unknown Type
No category information available

fonts.gstatic.com

Unknown Type
No category information available

googleads.g.doubleclick.net

Unknown Type
No category information available

monorail-edge.shopifysvc.com

Unknown Type
No category information available

shop.app

Unknown Type
No category information available

www.google.com

Unknown Type
No category information available

www.googleadservices.com

Unknown Type
No category information available

www.googletagmanager.com

Unknown Type
No category information available

www.merchant-center-analytics.goog

Unknown Type
No category information available
LinkCheck

© 2025 LinkCheck. Secure domain analysis you can trust.