DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=yourbrooklynguide.co
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 28, 2026
Valid Until
April 28, 2026 79 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
12:F8:51:A3:36:8E:52:ED:F0:20:B8:71:43:0B:6F:65:89:95:3A:D9:4F:5B:70:CA:B4:04:AD:23:15:45:7E:69
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
blackmoscato.com *.blackmoscato.com *.fun.blackmoscato.com *.myspace.blackmoscato.com *.nl.blackmoscato.com *.test.blackmoscato.com *.ww25.blackmoscato.com

Other domains in certificate

1screen.info *.1screen.info *.ww25.1screen.info *.ww5.1screen.info
3k.com.au *.3k.com.au *.mails.3k.com.au *.mx01.3k.com.au *.ww25.3k.com.au
*.api.bubbles.studio bubbles.studio *.bubbles.studio *.intranet.bubbles.studio *.m.bubbles.studio *.random.bubbles.studio *.shop.bubbles.studio
dhelal.me *.dhelal.me *.mail.dhelal.me *.ns1.dhelal.me *.sitemap.dhelal.me *.ww25.dhelal.me
dominicanrepublic.com.au *.dominicanrepublic.com.au
*.0.facebooo.com *.basic.facebooo.com *.c10r.facebooo.com facebooo.com *.facebooo.com *.facewww.facebooo.com *.free.facebooo.com *.m.facebooo.com *.mail.facebooo.com *.mbasic.facebooo.com *.random.facebooo.com *.wb.facebooo.com *.ww16.facebooo.com *.ww25.facebooo.com *.ww29.facebooo.com *.ww38.facebooo.com *.www.facebooo.com
*.blog.illuminati.life *.book.illuminati.life illuminati.life *.illuminati.life *.m.illuminati.life *.magento.illuminati.life *.old.illuminati.life *.store.illuminati.life
minecf.com *.minecf.com
*.comww25.pornhumb.com pornhumb.com *.pornhumb.com *.ww25.pornhumb.com *.ww3.pornhumb.com *.ww38.pornhumb.com
scout68.com *.scout68.com *.ww5.scout68.com
*.new.sivprint.xyz sivprint.xyz *.sivprint.xyz
*.analytic.viessmann.academy *.dash.viessmann.academy *.dev.viessmann.academy *.insight.viessmann.academy *.marketing.viessmann.academy *.preview.viessmann.academy *.superset.viessmann.academy viessmann.academy *.viessmann.academy
*.app.watchmoviefree.org *.shop.watchmoviefree.org *.staging.watchmoviefree.org watchmoviefree.org *.watchmoviefree.org *.web.watchmoviefree.org *.ww12.watchmoviefree.org
*.ww38.yourbrooklynguide.co yourbrooklynguide.co *.yourbrooklynguide.co