Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=app.playon101.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 11, 2026
Valid Until
November 09, 2026
86 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
02:F6:88:65:7D:60:32:88:FC:C5:75:56:F7:97:EB:68:EC:0E:B8:D6:53:87:AE:AE:7A:2D:88:4B:A1:58:E9:D9
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
flw.co.jp
jobs.actionlabor.com
www.andrelucio.dev
mixed.appshare.com.br
www.bestdeal.hair
bluetooth.bitsbox.com
supermerchantclient-admin.bkn301.sm
jbb.blendid.com
www.brandinghero.de
www.calendar2022.com
cav.rsvp
cbdata-test-loyalty-web.cbdata.cz
www.comendo.fr
whatsappcrm.commoat.com
bans.ctksystem.com
dadjoke.games
gnomma.desimone.dev
azl-vitest.dev-master.ninja
dggd.es
diannereid.co.nz
app.elever.ch
studio-ui-workshop.elpixelista.com
circular.nerf.emallstudio.com
emiletimothy.net
empistos.co
evankemp.com
exelwater.in
fatratclothings.com
www.fatratclothings.com
forbesprivatebank.com
www.franche-plaza.net
crm.gbc.pe
beta.giantsms.com
se3.globalcarecenter.co.uk
office.grip.ng
en.hala-education.com
www.harcamalarim.com
hikayece.com
status.imsu.dev
goldencrop.inbo.tech
inovafit.si
intelliumlabs.dev
iqneoresolution.com
s1d3ways.jakehodges.co.uk
jonathanpaulwood.com
kahuna-pmi.it
hackathon.keap.dev
www.kidsuptiengviet.vn
janus-admin-dev.kiswe.com
fenutalca.lapieza.io
s.lullevibes.com
lyreai.in
www.maintmax.com
maiquocviet.dev
www.mergingyogaandrehabilitation.com
www.mesaital.com
mikakura.com
www.minhtrannguyen.dev
chat.mustapha-conteh.me
mzoefuroofersroundrock.com
www.natebake.dev
nextframe.digital
www.nivish.in
nunocotralha.pt
o-rds.com
www.ontp.dev
orbecomunica.com.br
origamisa.com
app.playon101.com
portals55cash.com
presentpals.com
presentplanning.com
verify.prodigy.baby
campaign-entry.promille.jp
demo.proshort.ai
ipc.qbitdev.com.br
eodreport.qsr-manager.com.au
rooterra.in
roundsquaregroup.com
app.sealeam.com
sensoria.cl
www.sensoria.cl
shreejielectricalsolutions.in
www.sidqly.com
www.sparklingwillowphotography.co.uk
src-consulting.net
dev012820.srs311.jp
stupidseverinshutyourmouth.com
tastytable.org
www.fall.telehearportal.com
www.thecomedystand.com
tick.dance
tkysela.cz
udrishh.com
why-i-cannot-see-my-game.vebora.com
victorysnack.shop
perspective-checkin.weqa.com.au
wira.lk
dl.woonig.app
aia-advisor.xerovit.io
Other domains in certificate