DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=usassexguide.info
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 08, 2026
Valid Until
April 08, 2026 67 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
41:3C:8E:39:93:9B:DE:42:EA:45:BA:00:EE:3B:B1:FA:FF:0B:6A:52:08:A9:03:13:20:21:9A:08:C6:9D:A9:40
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
recreationbox.com *.recreationbox.com *.aaa.recreationbox.com *.cit.recreationbox.com *.hotel.recreationbox.com *.jenkins.recreationbox.com *.stat.recreationbox.com *.static.recreationbox.com *.users.recreationbox.com *.xxx.recreationbox.com

Other domains in certificate

cndcscanopycompany.com *.cndcscanopycompany.com *.ww16.cndcscanopycompany.com *.ww17.cndcscanopycompany.com *.ww25.cndcscanopycompany.com *.ww38.cndcscanopycompany.com *.www.cndcscanopycompany.com
datemyage.online *.datemyage.online *.random.datemyage.online *.sitemap.datemyage.online *.sitemaps.datemyage.online *.vip.datemyage.online *.wildcard.datemyage.online *.ww25.datemyage.online *.www.datemyage.online
*.cpanel.fivem.life fivem.life *.fivem.life *.mail.fivem.life *.panel.fivem.life *.webdisk.fivem.life *.webmail.fivem.life *.www.fivem.life
freesexvideo.club *.freesexvideo.club *.mx1.freesexvideo.club *.random.freesexvideo.club *.ww25.freesexvideo.club
hestiatkmce.live *.hestiatkmce.live *.latency.hestiatkmce.live *.testincognito.hestiatkmce.live
*.autodiscover.krissyvenosdale.com krissyvenosdale.com *.krissyvenosdale.com *.mail.krissyvenosdale.com *.random.krissyvenosdale.com *.update.krissyvenosdale.com *.www.krissyvenosdale.com
*.ag2r.monlive.pro *.cng.monlive.pro *.deauville.monlive.pro monlive.pro *.monlive.pro *.nielseniq.monlive.pro *.onehealth.monlive.pro *.short.monlive.pro *.stats.monlive.pro *.unis.monlive.pro
sendo.live *.sendo.live
stawishapwani.org *.stawishapwani.org
stylebeats.com *.stylebeats.com
sweetjelly1.com *.sweetjelly1.com *.ww25.sweetjelly1.com
tasfiatahsinpurnata.me *.tasfiatahsinpurnata.me
*.alpha.usassexguide.info *.board.usassexguide.info *.ci-jenkins.usassexguide.info *.ci.usassexguide.info *.cicd-qa.usassexguide.info *.dev.usassexguide.info *.development.usassexguide.info *.facebook.usassexguide.info *.insight.usassexguide.info *.pipeline.usassexguide.info *.preview-ci.usassexguide.info *.production.usassexguide.info *.qa.usassexguide.info *.report-staging.usassexguide.info *.reporting.usassexguide.info *.test.usassexguide.info usassexguide.info *.usassexguide.info *.ww38.usassexguide.info