Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=app.kynangsongchotre.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
August 13, 2026
Valid Until
November 11, 2026
73 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AA:53:1F:66:B5:50:C3:17:7A:43:99:CF:B2:78:01:DC:94:E5:9F:0F:28:08:F4:FA:E7:C7:6F:7D:41:EE:A0:C0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
protonledger.com
dioksi-test.aetma.net
admin.ag-kiosk.ovh
www.agat.vision
www.ahyu.co.th
www.akytara.com
www.alleycat.dev
asgpos.com
aylton.dev
staging.bhdaon.co.kr
www.blessedcompanionship.com
brackethub.club
www.brackethub.club
hub.candiidusschool.com
owesum.casimirfoundry.com
app-dev.climoo.com.br
comunitario.app
xdu.devware.it
cpbuilds.disign.tv
doublebeansupreme.com
www.elifsu.net
www.ezrastudio.ai
fergysoft.com
forms.fightevolution74.fr
app.filmkrew.app
auth.finndu.app
uat.lms.foresthillschool.edu.kh
bro.freakingwaves.com
gilrabbi.co.il
www.goodatswift.com
www.goudenrakkers.nl
www.grupy.one
iamsanjaysp.com
www.influxsolutions.dev
inhanser.com
alpha.instaboard.app
homolog.parceiro.jamur.com.br
www.jamur.com.br
bill.jewelrydepothouston.com
www.keenwind.lol
kisanportal.com
www.kupigames.co.il
app.kynangsongchotre.com
letris.app
app.mahsooli.ma
manmaru-futari.com
matchupsports.app
megawattele.com
mermanfoundhismermaid.com
www.mysakthi.com
n1c0l4.com
newjob.ng
www.nftalquimia.com.br
www.noahnkr.com
www.notinourscene.com
www.novoscript.co.za
staging.log.odevtech.com.br
booking.officialmachupicchubus.com
parquenaturalsomiedo.com
paulamagalhaes.adv.br
pauline-et-pier.re
www.peopletransformtheworld.com
www.petmatepets.com
pickviagens.com
auth.ponderly.ai
prepisely.app
slides.qmskills.tech
quadka.com
rameesalin.site
render3dproai.com
reneechiu.com
forms.repshealth.com
relevii.rflex.io
obdrive.rheny.fr
www.sectorseguro.com
admin.shinobiidle.com.br
skagesogsusans2027.com
www.snelksolution.co.za
solhiart.com
space4ads.com
app.sport-spacing.com
demo-stag.stz.llc
suhadagraphic.com
tecnocopy.com.br
thealliancemobile.com
app.thinkword.ai
luckydraw.thunhan.edu.vn
app.tokdem.com
bot.tonio.net.pe
www.tonyosor.com
tow.ge
windpioneers.trustin.app
barbeariadiplomata.v8app.com.br
vaghani.dev
vanshanti.org
verifywithsms.com
aics-pro-noc.wbdlabos.com
ref.wistorix.com
www.yayhorsey.com
admin.zoecharge.com.br
Other domains in certificate