75/100 SECURITY SCORE

Certificate Information

Subject
CN=tools.nekobend.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
September 19, 2025
Valid Until
December 18, 2025 39 days
Public Key
RSA 2048 bit Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
CE:AC:BA:E2:CC:C4:ED:40:6D:F0:EA:45:4B:C0:3B:CD:60:AF:38:AB:27:1C:33:6F:69:6C:C7:3C:81:D9:2C:2F
Alternative Names

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • Add Strict-Transport-Security header with max-age of at least 1 year
  • Add Content-Security-Policy header to prevent XSS attacks
  • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • Add X-Content-Type-Options: nosniff
  • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • No CAA records configured - any CA can issue certificates
Recommendations
  • Implement CAA records to restrict which CAs can issue certificates for your domain
  • This adds an extra layer of security against unauthorized certificate issuance
  • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

100 domains
app.lifebrand.life test-partner.lifebrand.life ooo.staging.cleanbrand.lifebrand.life

Other domains in certificate

tekdoor.1cantrade.com
www.absenso.be
cast.aplayer.co
atdrafter.com
auth.axscore.com
app.beemit.com.au
go.beyoung.com.br
trackify.bluewings.in
print.bordexdirect.nl
docs.cakemail.dev
ckr.nz
s.clicksound.io
www.tan-doo.co.il
wageram.com.ng
datalab.mn
decaphone.com
clinicafraternita.drtis.com.br
x24hoqbof9pix.easyapp.co x54l.easyapp.co x9a8ztl2vzwfcrzc.easyapp.co xb8l.easyapp.co xcc8wlydu.easyapp.co xdqm.easyapp.co xoaycikqeiktxx1.easyapp.co xvw8.easyapp.co
palhares.edsys.com.br
homeys.enginoble.com
logicquest.enruana.com
www.entregas-am.org
mysquishyberry.ethereal-fx.com
avalonai.evelynbauer.ca
fleurepi.com
bestellen.gavspizzeria.de
www.habmob.com
uuidgenerator.helpersfy.com
link.hsuan.app
hyperbowl2.com
www.influex.app
www.jimhateswork.com
juangdiaz.com
backoffice.ka-ching.dk
kayacamp.com
ww.kevincox.ca
kidscaffeine.com
kruakrungthep.com
ladispensadellostepompei.it
app.learninglanewc.com
staging.i.loplat.com
overagepic.ltl-xpo.com
dodotecakes.lupi.delivery
mansourbuilt.ca
masat.dev
assistant.mayamd.ai
metalbondgh.com
migsuva.com
www.missiondmatuf.com
www.moongoldmusic.com
morethancloud.de
insights-stage.mtnra.com
mustafazaki.com
partner-alpha.mybackhug.com
tools.nekobend.com
sfcc-doc.ni18.in
app.nuresp.com.br
apps.octolan-tech.com
www.osama.sh
www.outdock.com
www.pipel.biz
www.pitchbookerpro.com
apks-admin.rcloud.dev
recapgolf.com
review-core.com
robertadallavecchia.it
kerala-psc-photo.rootlogics.com
sakekuma.co.jp
sicherlichsicher.de
skelterandnu.com
www.sma-assainissement.fr
course.softflowai.com www.course.softflowai.com
about.sonderbase.com
sportclubotesfel.hu
srishti-designs.com
stevendangma.com
fb.t-connector.com
teoler.no
www.thesimple.club
tleilax.dev
www.trackmyset.com
admin.upmerch.com
multiservice.uwonham.com
veeralpatel.com
vilirun.com
staging-corporate.wink.travel
xyntic.tech
youthfulspirits.jp
yuzuflow.com