DNS Gurus

SSL Verification Bypassed

The server's SSL certificate could not be verified. The analysis was completed using insecure mode. Data may be less reliable.

Reason:

Hostname Mismatch - certificate is issued for *.abortion.affse.info, *.access.affse.info, *.accounting.affse.info, *.admissions.affse.info, *.affse.info, *.arguments.affse.info, *.article.affse.info, *.ast.mais.website, *.beta.tiago.bet, not for access.invalidov.net

Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=mais.website
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
November 22, 2025
Valid Until
February 20, 2026 30 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5C:DC:D1:A4:86:B3:79:62:76:E2:5F:0C:E6:FD:FC:63:14:CF:41:B9:F1:4B:0E:01:0C:A2:BB:23:56:F3:D8:D4
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
*.abortion.affse.info *.access.affse.info *.accounting.affse.info *.admissions.affse.info affse.info *.affse.info *.arguments.affse.info *.article.affse.info *.colbert.affse.info *.consultant.affse.info *.contents.affse.info *.contracts.affse.info *.courses.affse.info *.court.affse.info *.cpm.affse.info *.david.affse.info *.define.affse.info *.ever.affse.info *.financial.affse.info *.find.affse.info *.formats.affse.info *.funding.affse.info *.good.affse.info *.harmful.affse.info *.hbs.affse.info *.house.affse.info *.hypotheses.affse.info *.kinder.affse.info *.law.affse.info *.learning.affse.info *.letters.affse.info *.literary.affse.info *.maker.affse.info *.makers.affse.info *.meaning.affse.info *.mit.affse.info *.owls.affse.info *.persuasive.affse.info *.press.affse.info *.prospectus.affse.info *.quest.affse.info *.reort.affse.info *.resources.affse.info *.resume.affse.info *.safe.affse.info *.school.affse.info *.sheets.affse.info *.site.affse.info *.sketch.affse.info *.startup.affse.info *.stateless.affse.info *.studies.affse.info *.table.affse.info *.thesis.affse.info *.uspto.affse.info *.vignettes.affse.info *.what.affse.info *.www.affse.info *.you.affse.info *.young.affse.info
*.ast.mais.website *.env.mais.website mais.website *.mais.website *.online.mais.website
*.bl0kir-fb9w3ad.my-web.games *.codashoppx9oh.my-web.games *.dana-kagetmshdsbp.my-web.games *.grup-wa2oammggkpv.my-web.games *.grup-wa2wbjkfxevh.my-web.games *.grup-warpea.my-web.games *.mediafireawldxbr.my-web.games *.mediafiredvnsi.my-web.games *.mediafireeokjgbn.my-web.games *.mediafirejxpbz.my-web.games *.mediafireprqibwk.my-web.games *.mediafirepyrlkmj.my-web.games *.mediafiretdgzurw.my-web.games *.mediafireucokw.my-web.games *.mediafirev2vld0z.my-web.games *.mediafirewhlsrsg.my-web.games *.mediafirexurakkb.my-web.games *.mediafirezghjcrv.my-web.games my-web.games *.my-web.games
*.beta.tiago.bet *.prod.tiago.bet tiago.bet *.tiago.bet