Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.sanchaya.app
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 31, 2026
Valid Until
November 30, 2026
76 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A1:04:EC:89:A0:6E:E6:B3:07:CD:32:C2:6D:DC:EE:D2:CF:8A:E5:AC:7C:1D:12:95:F4:B8:9D:38:A7:63:9C:6E
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
piercethroughlimits.com
human.520nm.net
www.airoguelite.net
chatbot.amomic.in
animeindia.qzz.io
rhtmer.anthonyierace.be
www.appgeni.us
beaver-pension.com
code.bonic.ai
painter.buildtronic.co.uk
www.caoying.autos
www.codexqr.app
conneqt.co.in
correctly.tools
www.dealaide.com
partyplanner.dotnetideas.com
durandisse.org
office.eccoffice.cloud
eduflowacademy.online
embrodia.com
apply-dev.emfire.io
endah.org
www.enginuityrx.com
eudavdata.com
staging.eyals.com
www.findmyai.org
fishchoice.in
fitnovaapp.com
foopapp.com
forkdin.com
www.gemini-to-word.online
goguru.lat
www.greenpeach.ai
www.gusras.ch
iaqca.fr
integrityautoidaho.com
i.itbeep.com
www.iybibarberstudio.com
jollysindianbistro.ca
jonesprofessionalservices.com
www.jorgelinapmp.com.ar
klinger-panhofer.at
www.kosmosphuquocvilla.com
tracking-beta.lifo.ai
www.litescan.io
locanara.com
www.maison-aimard.com
mann3pl.com
milseansoftware.com
misterarther.com
share.moinmoin.io
curriculum.momanddadbank.com
mynorsolis.dev
nickroeder.com
onlinecrackerspurchase.in
www.pankouts.com
system.pargolfsolutions.com
plaqueassay.com
www.qawright.lat
reachtechnews.com
admin.realtorsathi.ai
auth.recold.app
regulao.com
commandcentre.rentokil-initial.com
console.ridebase.org
editors.riversiderad.com
rodgermilla.dev
www.rotaryorchardseniorhome.com
www.sanchaya.app
sarankumar.dev
admin.scenariocaffe.com
nilgiris.selvitravels.in
setzbykristal.com
sickofstreams.fun
sloproapp.com
slowhide.com
slowmotioneditor.com
softally.com
natal.stargaz.ae
steadfastexteriorstn.com
staging.receipt.stickie.link
bodakatherineyjosue.swanmoments.lat
bodaorozcozelaya.swanmoments.lat
admin.talkster.app
tanugupta.com
teamtale.app
techbio.online
dndmusic.thepineapple.dev
insightsai.thiwanka.xyz
flash-cards.toerber.com
www.trancend.app
userscanner.com
www.varangroup.in
www.verx.codes
www.virtualwebca.com
app.engage.qljoxncgyhmyxutjoyiq.voyagernetz.us
forum2025.weglobal.ai
wmtwo.com
ziabirthone.com
zielonepodworka.pl
Other domains in certificate