DNS Gurus
Cached · just now
73/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=krasavin-group.org
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
December 14, 2025
Valid Until
March 14, 2026 29 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
37:A6:DA:E5:10:D4:B5:84:45:35:B7:A6:A5:99:5A:38:18:2D:3C:B8:8D:FB:F0:4A:FB:A6:B0:68:67:1B:BF:CE
Alternative Names
81 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

81 domains
relly.net *.relly.net *.alime.relly.net *.bade.relly.net *.click.relly.net *.com.relly.net *.cyou.relly.net *.durna.relly.net *.google.relly.net *.id.relly.net *.ncep.relly.net *.net.relly.net *.online.relly.net *.puguh.relly.net *.rest.relly.net *.sgn.relly.net *.snen.relly.net *.store.relly.net *.ujh.relly.net *.undefined.relly.net *.ww25.relly.net

Other domains in certificate

afhstrategiccontracts.co.uk *.afhstrategiccontracts.co.uk *.asp.afhstrategiccontracts.co.uk *.au-portal-partner.afhstrategiccontracts.co.uk *.cdn.afhstrategiccontracts.co.uk *.cloud.afhstrategiccontracts.co.uk *.confit.afhstrategiccontracts.co.uk *.diagnostics.afhstrategiccontracts.co.uk *.diamond.afhstrategiccontracts.co.uk *.dougaizm444.afhstrategiccontracts.co.uk *.hereweb.afhstrategiccontracts.co.uk *.mail.afhstrategiccontracts.co.uk *.potaufeu.afhstrategiccontracts.co.uk *.psb-stg.afhstrategiccontracts.co.uk *.publish.afhstrategiccontracts.co.uk *.servers.afhstrategiccontracts.co.uk *.simo.afhstrategiccontracts.co.uk *.srv.afhstrategiccontracts.co.uk *.store.afhstrategiccontracts.co.uk *.support.afhstrategiccontracts.co.uk *.web.afhstrategiccontracts.co.uk
australian.kitchen *.australian.kitchen *.blog.australian.kitchen *.ww38.australian.kitchen
backyardbbq.com *.backyardbbq.com *.random.backyardbbq.com *.ww25.backyardbbq.com
bacnkofamerica.com *.bacnkofamerica.com *.cashproonline.bacnkofamerica.com *.portal.bacnkofamerica.com *.random.bacnkofamerica.com *.whatsapp.bacnkofamerica.com
dayton.ltd *.dayton.ltd *.h.dayton.ltd *.ww25.dayton.ltd
*.arsiv.hddizitv.com *.demo.hddizitv.com *.h.hddizitv.com hddizitv.com *.hddizitv.com *.p.hddizitv.com *.player.hddizitv.com *.ramka.hddizitv.com *.v.hddizitv.com *.ww11.hddizitv.com
*.fj1cp4eeay.krasavin-group.org krasavin-group.org *.krasavin-group.org *.ww16.krasavin-group.org *.ww25.krasavin-group.org
pajohns.com *.pajohns.com *.random.pajohns.com *.ww38.pajohns.com
score308.com *.score308.com