Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=better-yoga.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 14, 2026
Valid Until
November 12, 2026
59 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D8:76:19:D6:7A:24:CA:6A:6C:E1:01:84:4C:71:39:04:13:31:25:AB:F7:BC:EF:73:6A:31:6C:E3:55:70:7D:A2
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
asyacilingir.com
www.alpstravela.com
applechildcare.ca
dev-portal.awellhealth.com
app.banffa.com
www.banffa.com
auth.bcsnode.com
www.bertwithab.be
better-yoga.app
bot.bolsaceres.com
task.cbgtec.com.br
cilingirfatihusta.com
www.cilingirfatihusta.com
cilingirfuat.com
www.cilingirfuat.com
civitastech.in
clinvap.online
www.concretecutegypt.com
crustyweenus.com
www.d1fan.com
martinezpropiedades.dataprop.cl
story.ddolbeng.com
dicast.dev
digitaalinterventieplan.be
modul.dosen.digital
eastweb.net
staging2.egab.co
www.ermiranebihu.com
ernestamoaku.online
oxxo.eslogistica-rayo.com
pharmaconnect.eyone.space
auth.facilitandooautismo.com
fennscountrymarket.com
tracker.flotr.ai
www.fractown.homes
www.framemasters.com
gatosoftw.com
app.gitsyn.cc
christopher.golling.ch
h2q.app
inventory.joshuacox.co.uk
www.inventory.joshuacox.co.uk
www.kapitalstrategi.com
kavun-opt.shop
www.kavun-opt.shop
movil.latitud10arq.com
laukkoskiresort.fi
www.laukkoskiresort.fi
dash.blog.liwaza.org
staging.local2global.jp
www.local2global.jp
atlastaxi.megataxi.com
milkdabba.com
mkbw-nieruchomosci.pl
blog.moavant.com
app.mobilecap.fr
myresto.com.au
nftknox.net
www.novanthegame.online
www.onemoreshot.ai
operadormaster.com.br
www.paydac.kr
diary.payitforwardandgratitude.com
payrollexplained.uk
pecheverrilopez.com
www.petitapp.io
www.petmaya.app
www.plastic-tree.pp.ua
progateai.online
rallyo.co.in
rcuygun.art
datanurse.saadixl.com
www.safakcilingir.com
s.schoolsportraits.com
puantaj.seyibyapi.com
shreeshivomtirth.in
miragemaps.simamdigital.com
qafila.simamdigital.com
auth.skumio.com
slidesignups.com
dev.grace.sonix.no
b-tracker.sorella.com.my
vault.stulsiani.com
app.swimrep.com
swimrep.com
coffee.tabl.page
kingamentor.tbbk.hu
thehextheory.com
www.thehextheory.com
truemeasurekit.com
1qrcode.uae100.com
bosselapp.uxma.io
veteransrecoveryatlas.co.uk
auth.voipnumber.net
c.w3lock.io
walking-connect.com
whatgames.net
miso.wslos.com
www.yavuzkilitcilingir.com
yavuzkilitcilingir.com
Other domains in certificate