Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.gymphase.hu
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 06, 2026
Valid Until
November 04, 2026
79 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
72:4E:C0:A2:21:70:AB:9E:E3:1A:02:11:5C:04:3E:2B:7C:33:DC:D2:0C:9D:DA:13:D4:53:5A:CA:30:F9:9E:13
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
app1.pyngyn.com
ai-x.ca
alkimios.monster
time.americantiledepot.com
appixer.com
sonestacartagena.appsiste.co
arrivepoint.buzz
azerus.team
aztechconsulting.net
babatechnologies.org
www.bexleyyouthfootball.org
biomedsandra.com.br
www.blue-impact.com
www.capedavis.com
casshern.dev
www.clickyfinder.com
codeviasoftware.com
auth-sample.test.contentfabric.io
app.coupleup.com
academia.criscamideas.com
coursedesigner.dcyou.co
delfeon.com
dkkitchen.autos
donexstudio.com
local-my-d1.dpduk.dev
heroesdeltimon.equitel.com.co
pangtry.esterinity.com
www.evanthibodeau.com
proposta.fedele.com.br
www.fgi-digitalsolutions.de
lit.finora.life
floatsandframes.com
fluxoramarket.com
fundix.me
funpowered.co.uk
gentlegorilla.co.za
getirlavas.com
gusurban.com
www.gymphase.hu
www.hafrente-projetos.online
happy88.vip
bus.higuchi.com.br
link-po-tat-sc.jec-digital.com
joinsmudge.com
kaineumannberlin.com
shop.keimlumber.com
khansalman.tech
www.laslucas.app
leacontabil.com.br
www.leacontabil.com.br
lemoncubestudio.com
admin.lensbook.com.br
applink.mentorbooth.com
mersinklimaci.com
meta-destiny.com
www.microcompsystems.co.in
www.mottalamounier.com.br
mozcondo.com
sellers.mypushop.com
holiday.nabilamerthabit.com
collab.nailbiter.com
www.napbigo.net
www.nesilgroup.az
nighttears.lat
www.nilhz.com
www.nixolution.com
northernmakers.co.uk
nptechconsulting.ch
okenihian.lol
partner.orendafinserv.com
www.orquvlabs.online
packcad.com
jrms.photographs.gs
yunsol.piano8283.com
cliente.plushair.com.br
easterhop.polngames.com
agendamiento.profesionalesdelasalud.com.co
qarz.pro
www.renemccaine.com
resty.co.il
richmondcabin.com
saralam.tech
www.scholarshipslens.com
scoot-er.com
shri-harsha-kulkarni.it.com
info.siepalcross.com
stephremspress.com
bullets-mind.tanaike.jp
tecnologialigadestinos.com.br
auth.tegaandhenry.com
thinkingaboutcomputers.com
vatszdesign.com
panel.wipitech.cl
wnotes.app
worldartnavigator.com
yahdina.my.id
yambanainternational.com
yamilrvelez.com
yinwallet.com
www.zawek.com
Other domains in certificate