bya.app was registered on 21 Aug 2026 and is hosted on AS16509 in United States. Its SSL certificate from GoDaddy.com is valid until 7 Mar 2027, and the site does not support HTTP/3.
On-page basics for the homepage.
Networks cache previews — changes can take time to show.
What security vendors and the WOT community say about this domain.
2 of 5 protections set up
Lists the servers allowed to send email for this domain.
v=spf1 include:secureserver.net -allNo key at the 12 common selectors we checked. A custom selector can’t be found from DNS alone.
—Policy is “quarantine”: spoofed mail goes to spam.
v=DMARC1; p=quarantine; adkim=r; aspf=r; rua=mailto:[email protected];Forces encrypted delivery between mail servers.
—Shows the brand logo in supporting inboxes. Optional; needs DMARC enforcement.
—Read from the domain's public DNS records.
3 of 6 recommended headers
Forces HTTPS on future visits.
Limits where scripts can load from — the main defence against XSS.
Framing is limited by the CSP’s frame-ancestors instead.
Prevents browsers guessing file types.
Which AI crawlers this site allows, and whether it publishes an llms.txt.
From robots.txt. “Partly blocked”: kept out of some pages, not the homepage. Not every crawler follows it. llms.txt is an optional guide some sites publish for AI assistants — it is not a ranking factor.
Pages and files that show who runs the site and how it handles data.
What loads and tracks visitors when the homepage opens.
Running a full browser scan of the homepage… This takes about a minute.
Internet standards that make a site faster and safer.
The path from a typed address to the final page.
616 similar domains registered in the last 90 days — possible typosquatting or phishing.
| Domain | Why it’s similar | Registered | Status | Report |
|---|---|---|---|---|
| 6ya.tattoo | Look-alike characters | 17 Oct 2026 | Checking… | Report → |
| by4.me | Look-alike characters | 5 Oct 2026 | Checking… | Report → |
| by4.pics | Look-alike characters | 1 Oct 2026 | Checking… | Report → |
| by4.net | Look-alike characters | 18 Sept 2026 | Checking… | Report → |
| bya.cat | Other extension | 3 Nov 2026 | Checking… | Report → |
From CubDomain's daily newly registered domains. Similar doesn't mean malicious.
Is bya.app’s name taken on other extensions?
Every IP address bya.app resolves to, and where it's hosted.
| Host | IPv4 address | TTL |
|---|---|---|
| bya.app | 13.248.243.5 | 3600 |
| bya.app | 76.223.105.230 | 3600 |
| Host | Mail server | TTL |
|---|---|---|
| bya.app | 0 smtp.secureserver.net | 3600 |
| bya.app | 10 mailstore1.secureserver.net | 3600 |
| Host | Name server | TTL |
|---|---|---|
| bya.app | ns21.domaincontrol.com | 3600 |
| bya.app | ns22.domaincontrol.com | 3600 |
| Host | Text | TTL |
|---|---|---|
| bya.app | "v=spf1 include:secureserver.net -all" | 3600 |
| Host | Start of authority | TTL |
|---|---|---|
| bya.app | ns21.domaincontrol.com dns.jomax.net 2026082104 28800 7200 604800 600 | 3600 |
Other domains served from 13.248.243.5. Normal for shared hosting and CDNs.
No reviews yet. Used bya.app? Be the first to say how it went.
Reviews are from CubDomain users and are separate from the security verdicts above.
Common questions, answered from this report's data.
bya.app has no community safety rating yet. Its SSL certificate is valid until 7 Mar 2027. See Security →
The owner's details are hidden by a privacy service in the public WHOIS record. See WHOIS →
The registration expires on 21 Aug 2027 — in 9 months. See Overview →
bya.app was registered on 21 Aug 2026, making it 2 months old. See Overview →
bya.app is served from 2 IP addresses, mainly on AS16509 in United States. See Hosting →
Raw registry data for bya.app. May be redacted by privacy services.
{"rdapConformance":["rdap_level_0","icann_rdap_response_profile_1","icann_rdap_technical_implementation_guide_1"],"objectClassName":"domain","entities":[{"objectClassName":"entity","entities":[{"objectClassName":"entity","roles":["abuse"],"status":["active"],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text","GoDaddy Abuse"],["tel",{"type":["voice"]},"uri","tel:+1.4806242505"],["email",{},"text","[email protected]"]]]}],"handle":"146","links":[{"href":"https://pubapi.registry.google/rdap/entity/146","rel":"self","type":"application/rdap+json","value":"https://pubapi.registry.google/rdap/domain/bya.app"},{"href":"https://www.godaddy.com/","rel":"about","type":"text/html","value":"https://rdap.godaddy.com/v1/"}],"publicIds":[{"identifier":"146","type":"IANA Registrar ID"}],"remarks":[{"description":["Summary data only. For complete data, send a specific query for the object."],"title":"Incomplete Data","type":"object truncated due to unexplainable reasons"}],"roles":["registrar"],"vcardArray":["vcard",[["version",{},"text","4.0"],["fn",{},"text","GoDaddy.com, LLC"]]]}],"events":[{"eventAction":"registration","eventActor":"godaddy","eventDate":"2026-08-21T11:34:22.779Z"},{"eventAction":"expiration","eventDate":"2027-08-21T11:34:22.779Z"},{"eventAction":"last update of RDAP database","eventDate":"2026-11-06T23:27:50.210Z"},{"eventAction":"last changed","eventDate":"2026-08-26T11:34:22.779Z"}],"handle":"E17A153AA-APP","ldhName":"bya.app","links":[{"href":"https://pubapi.registry.google/rdap/domain/bya.app","rel":"self","type":"application/rdap+json","value":"https://pubapi.registry.google/rdap/domain/bya.app"},{"href":"https://rdap.godaddy.com/v1/domain/bya.app","rel":"related","type":"application/rdap+json","value":"https://pubapi.registry.google/rdap/domain/bya.app"}],"nameservers":[{"objectClassName":"nameserver","handle":"4205DB1_HOW-GOOGLE","ldhName":"ns21.domaincontrol.com","links":[{"href":"https://pubapi.registry.google/rdap/nameserver/ns21.domaincontrol.com","rel":"self","type":"application/rdap+json","value":"https://pubapi.registry.google/rdap/domain/bya.app"}],"remarks":[{"description":["Summary data only. For complete data, send a specific query for the object."],"title":"Incomplete Data","type":"object truncated due to unexplainable reasons"}]},{"objectClassName":"nameserver","handle":"3C5BA92_HOW-GOOGLE","ldhName":"ns22.domaincontrol.com","links":[{"href":"https://pubapi.registry.google/rdap/nameserver/ns22.domaincontrol.com","rel":"self","type":"application/rdap+json","value":"https://pubapi.registry.google/rdap/domain/bya.app"}],"remarks":[{"description":["Summary data only. For complete data, send a specific query for the object."],"title":"Incomplete Data","type":"object truncated due to unexplainable reasons"}]}],"secureDNS":{"delegationSigned":false,"zoneSigned":true},"status":["client delete prohibited","client renew prohibited","client transfer prohibited","client update prohibited"],"notices":[{"description":["By querying our Domain Database as part of the RDAP pilot program (RDAP Domain Database), you are agreeing to comply with these terms and acknowledging that your information will be used in accordance with Charleston Road Registry's Privacy Policy (https://www.registry.google/about/privacy.html), so please read the terms and Privacy Policy carefully.","Any information provided is 'as is' without any guarantee of accuracy.","Please do not misuse the RDAP Domain Database. It is intended solely for query-based access on an experimental basis and should not be used for or relied upon for any other purpose.","Don't use the RDAP Domain Database to allow, enable, or otherwise support the transmission of mass unsolicited, commercial advertising or solicitations.","Don't access our RDAP Domain Database through the use of high volume, automated electronic processes that send queries or data to the systems of Charleston Road Registry or any ICANN-accredited registrar.","You may only use the information contained in the RDAP Domain Database for lawful purposes.","Do not compile, repackage, disseminate, or otherwise use the information contained in the RDAP Domain Database in its entirety, or in any substantial portion, without our prior written permission.","We may retain certain details about queries to our RDAP Domain Database for the purposes of detecting and preventing misuse.","We reserve the right to restrict or deny your access to the RDAP Domain Database if we suspect that you have failed to comply with these terms.","We reserve the right to modify or discontinue our participation in the RDAP pilot program and suspend or terminate access to the RDAP Domain Database at any time and for any reason in our sole discretion.","Reminder that underlying Registrant data may be requested via ICANN's RDRS service (https://rdrs.icann.org/).","We reserve the right to modify this agreement at any time.",""],"links":[{"href":"https://pubapi.registry.google/rdap/help/tos","rel":"self","type":"application/rdap+json","value":"https://pubapi.registry.google/rdap/domain/bya.app"},{"href":"https://www.registry.google/policies/rdap-terms/","rel":"terms-of-service","type":"text/html","value":"https://pubapi.registry.google/rdap/domain/bya.app"}],"title":"RDAP Terms of Service"},{"description":["For more information on domain status codes, please visit https://icann.org/epp"],"links":[{"href":"https://icann.org/epp","rel":"glossary","type":"text/html","value":"https://pubapi.registry.google/rdap/domain/bya.app"}],"title":"Status Codes"},{"description":["URL of the ICANN RDDS Inaccuracy Complaint Form: https://icann.org/wicf"],"links":[{"href":"https://icann.org/wicf","rel":"help","type":"text/html","value":"https://pubapi.registry.google/rdap/domain/bya.app"}],"title":"RDDS Inaccuracy Complaint Form"}]}The first response from http://www.bya.app, before any redirect: caching, server and policy headers.
Four timed TCP connections to port 443 from CubDomain's servers.
CubDomain is not affiliated with bya.app. Data is collected independently from public sources and some figures are estimates, provided for information only.
Controls how much of the URL is shared with other sites.
Restricts camera, microphone and other browser features.
From the homepage's response, https://bya.app/
Spam and malware blocklists for the site's IP and mail servers.
Found in public certificate transparency logs.
Searching the certificate transparency logs… This can take up to a minute.
When the site first appeared, and what has changed since.
No changes seen since we started recording on 6 Nov 2026.