DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=zn3znlz.site
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 20, 2025
Valid Until
March 20, 2026 56 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5D:8C:C3:90:29:8A:93:BB:39:64:AF:DC:29:E7:E0:8D:EC:49:88:23:4F:5D:55:52:45:E1:16:BA:91:77:73:ED
Alternative Names
82 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

82 domains
bokepindo23.com *.bokepindo23.com *.cpcontacts.bokepindo23.com *.random.bokepindo23.com

Other domains in certificate

1990store.com *.1990store.com
clermontkidzcare.com *.clermontkidzcare.com
dailyharbest.com *.dailyharbest.com
denreisende.com *.denreisende.com
disabilitysupports.au *.disabilitysupports.au *.random.disabilitysupports.au *.ww38.disabilitysupports.au
*.analytic.divorced.chat *.beta.divorced.chat divorced.chat *.divorced.chat *.random.divorced.chat *.sitemaps.divorced.chat
easylessons.com.au *.easylessons.com.au *.ww38.easylessons.com.au
elevenwarriors.co *.elevenwarriors.co
geizhalls.de *.geizhalls.de
hitv-14.com *.hitv-14.com *.ww25.hitv-14.com
jobpostings.de *.jobpostings.de *.random.jobpostings.de
loseweightquickclick.com *.loseweightquickclick.com *.ww25.loseweightquickclick.com
*.admin.nightheatersolutions.co.uk *.cpanel.nightheatersolutions.co.uk nightheatersolutions.co.uk *.nightheatersolutions.co.uk *.portal.nightheatersolutions.co.uk *.pos.nightheatersolutions.co.uk
nys.com.au *.nys.com.au *.ww25.nys.com.au *.www.nys.com.au
*.cpanel.orgaefml.site *.ebmail.orgaefml.site orgaefml.site *.orgaefml.site
*.app.read-dukependragon.online *.cpcalendars.read-dukependragon.online *.mail.read-dukependragon.online read-dukependragon.online *.read-dukependragon.online *.sitemap.read-dukependragon.online *.sitemaps.read-dukependragon.online
sexyscope.live *.sexyscope.live *.www.sexyscope.live
*.pipeline.thefarmersdaughterboutique.com thefarmersdaughterboutique.com *.thefarmersdaughterboutique.com *.ww38.thefarmersdaughterboutique.com
thesinkholetrail.com *.thesinkholetrail.com *.ww25.thesinkholetrail.com *.www.thesinkholetrail.com
unfoldcloth.click *.unfoldcloth.click
unsork.click *.unsork.click
watchfacesfacet.com *.watchfacesfacet.com *.ww25.watchfacesfacet.com
*.random.willowsprings.com.au willowsprings.com.au *.willowsprings.com.au
zn3znlz.site *.zn3znlz.site