DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=lightzentao.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 20, 2026
Valid Until
August 18, 2026 56 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
A5:E7:01:B5:C5:AE:D4:9F:A6:E1:61:98:25:D5:6E:34:DD:69:6C:DE:2A:B3:34:95:82:66:72:87:6C:26:48:B6
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
pazeu.com *.pazeu.com *.access.pazeu.com *.sslvpn.pazeu.com

Other domains in certificate

*.2free2.aparatir.xyz aparatir.xyz *.aparatir.xyz
fortino.pro *.fortino.pro *.sitemap.fortino.pro
*.4vple8.fractionl-cxos.biz fractionl-cxos.biz *.fractionl-cxos.biz
laces.com.au *.laces.com.au *.ww25.laces.com.au
*.83294beb-bc9e-47fc-accb-cd48c760ae44.lightzentao.com *.api.lightzentao.com *.app.lightzentao.com *.assets.lightzentao.com *.c07q3x.lightzentao.com *.demo.lightzentao.com *.dev.lightzentao.com lightzentao.com *.lightzentao.com *.staging.lightzentao.com *.test.lightzentao.com
max10.games *.max10.games
*.bewerungsags.mypage.me *.ja.mypage.me *.jp.mypage.me *.mail.mypage.me *.momokuro.mypage.me *.mx.mypage.me mypage.me *.mypage.me *.www.mypage.me
*.chat.ossandmain.com *.cloudflacf-protected.ossandmain.com *.login.ossandmain.com ossandmain.com *.ossandmain.com *.staging.ossandmain.com *.test.ossandmain.com *.uat.ossandmain.com *.ww17.ossandmain.com *.ww25.ossandmain.com
pashacasino230.bet *.pashacasino230.bet
*.mail.pooltrex.com pooltrex.com *.pooltrex.com
prod.shopping *.prod.shopping *.rustore.prod.shopping
*.app.reminder.chat *.assets.reminder.chat reminder.chat *.reminder.chat *.twlabefi.reminder.chat
*.api.sydneyseoexperts.com *.app.sydneyseoexperts.com *.intranet.sydneyseoexperts.com *.mail.sydneyseoexperts.com *.nwcohsitemaps.sydneyseoexperts.com *.portal.sydneyseoexperts.com *.shop.sydneyseoexperts.com *.sitemap.sydneyseoexperts.com *.sitemaps.sydneyseoexperts.com *.store.sydneyseoexperts.com sydneyseoexperts.com *.sydneyseoexperts.com *.www70.sydneyseoexperts.com
under4ge.de *.under4ge.de
*.admin.vanguaqrd.com *.investor.vanguaqrd.com *.login.vanguaqrd.com *.logon.vanguaqrd.com vanguaqrd.com *.vanguaqrd.com *.web.vanguaqrd.com *.webe.vanguaqrd.com *.ww2.vanguaqrd.com *.ww25.vanguaqrd.com *.ww38.vanguaqrd.com
*.www.xn--55qwct6gv65bwlb9x6cpz4b.com xn--55qwct6gv65bwlb9x6cpz4b.com *.xn--55qwct6gv65bwlb9x6cpz4b.com