Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.kycor.com
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
May 20, 2026
Valid Until
August 18, 2026
79 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D2:4E:1D:2C:66:EC:87:2B:47:5F:D2:19:6D:48:03:5F:82:CE:ED:CE:0A:E3:17:82:C1:86:1D:FF:BE:CD:61:07
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
www.levonstudio.com
hom-modular-config-cert.3dcloud.io
accurantgroup.com
staging.marketing-cloud.additive-apps.eu
aditipathakconsulting.com
adstop.app
advokatgusland.no
agbofantasyleague.com
mlops.ai-hub.cloud
www.aixmetrix.com
alameda4everyone.com
almullakuwait.com
vbt.anubhawdwivedi.com
appweaver.ai
arman-karimi.com
www.audilis.info
ayotechsolution.com
barkblossomerescue.org
www.barkblossomerescue.org
join.bitstack.fr
blockchainomega.com
atendimento-admin.bsibr.com
carlaefabio.com
staging.casa-design.pt
biblioteca.cfassis.org
cleanridegarage.us
pos-staging.datavision-online.eu
cs.dev-team.club
www.deweysworld.app
ecuenjoy.com
dyn.evva.space
fanzclub.co
fatcatstats.com
links.fold.money
dashboard.funtubestudio.fr
www.garaje46cr.com
firebase.giiver.ovh
links.godrive.cz
rpgplanner.hadd.fr
www.handyone.co.za
gav.hitseries.com
dlink.dev.itsuoka.com
journal.knovon.org
www.kycor.com
latest-news.us
linkd.so
littleleo.in
www.livestreamvoortheaters.nl
www.ludopia.app
lythouse.co
dynamic.mailalpha.app
auth.makestories.io
manapizzaria.com.br
my.staging.manifestfinancial.com
www.mapatalks.in
admin.mylnk.app
myshout.co
www.nathanielcarolina.com
newhorizon.asia
links.newslist.it
app.omnivendor.ai
test.orgenesis.com
www.orgenesis.com
woltergmbh.pacta-cloud.app
flp-dev.parklab.app
www.parybook.com
www.pow.bike
self-tour-dev.powerproleasing.com
prachitee.com
www.prachitee.com
quanthall.com
questdiagnostics.org.in
reachorillis.com
app.reflect.page
auth.rerota.com
app.sensei-go.com
shresthdakshin.com
siologic.com
printery.sockbase.net
lean.strasysglobal.com
strengthprogymnasion.in
www.strengthprogymnasion.in
successionitreviso.it
www.symbioflux.com
www.tdwire.com
techlawmaker.com
www.tendie.land
analytics.testive.com
theghostr.app
www.tickblocks.com
www.trotting360.com
www.tshortall.com
www.turkeyairportsassistance.com
boxtrain.turnosweb.app
www.vellurion.com
api.verse.app
vivcall.com
admin.w3creations.gr
www.wevision.online
zerohourjob.uk
Other domains in certificate