Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=hosting.myplayer.io
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
February 23, 2026
Valid Until
May 24, 2026
87 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
E5:F7:A5:43:6E:4A:6E:B3:B4:EA:44:F0:51:EE:B1:73:44:56:D7:A2:F8:5D:29:91:38:F4:D1:F8:61:2E:E0:AA
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
bhr.com.br
www.aj-bud.pl
sortit.alignitgames.com
app-test.authentigate.io
baindefoule-studio.com
www.blitsapp.com
link.calyxpod.com
app.cardfunder.com
catalytics.dev
apps.chefiq.com
chocolatte.net
learn.choqorok.com
christiandalsanto.com
gametribe.co.ke
www.codeflow.one
correosvisit.com
prod.esri.on.decisionrules.io
deliveritapp.ae
devplank.com
hitomishokudo.for.dinii.jp
dorrells.org
my.drhaynescollective.com
miportal.ueb.edu.bo
www.englishtoituhoc.com
create.erbium.org
push.esdigitalhealth.com
ewan-rene.com
employers.ewhallet.com
www.fortunateskull.com
www.fractalflux.com
licensing.fsfleetwms.com
howto.gigstack.pro
griffinteller.com
grupomaxtho.com
afiliados.gssinternational.us
lending.app.halodao.com
helahem.com
firebaseauth.mylive.in.th
www.inuva-media.com
itverse.in
www.jisvicente.com
joinaudience.com
jotik.app
kara-elliott.com
www.kda-kirov.ru
kernel-booster.com
blackboard-test.klarway.com
deeplink.konto.com
track-marathon.kramer.run
confirmaciones.kuroda.com
www.leadingwithheartbook.com
ajinomoto-south.logivan.com
lumzerti.com
myapp.luxos.co.za
2021.meichuhackathon.org
www.metaitofficial.com
musicafresh.com
hammond-nails-buckhead.mybestsalons.com
hosting.myplayer.io
www.nacita.id
www.nenoons.com
login.nubedeventas.com
okk.cl
onionknightwill.com
www.oposicionesetgoaconsumo.com
myako-scorm-adv-uat.ovdns.co.za
peoriasfinest.com
perelkawroclaw.pl
pinaxalabs.com
www.playdates.co
prio.day
www.mentoria.profaulashow.com.br
propmedica.mx
dev.puppycloud.com
questionexistence.com
rokkhernhapp.radenhor.com
dev.resquare.co
resus.net.au
revtask.ai
links.riddlerobot.com
funrestaurant.risingsondev.com
connect-ng-fom.rxoconnectperf.rxo.com
sakinaskitchen.com
samyatagives.com
app.scribblecal.com
auth.socialpitstop.com
sound-walker.app
bibliotecadebabel.surwww.com
tetraadvancement.com
thelittleskool-house.com
www.theroadplan.com
uprush.io
uttamkumarp.website
event.uxmilk.jp
vidyanidhims.com
signup.watermelon.co
app.wellnesshabitsapp.com
webplayer-fac.wexer.com
yeneraydemir.xyz
yes4sales.yesmktg.net
Other domains in certificate