DNS Gurus
Cached · just now
79/100 SECURITY SCORE

Certificate Information

Subject
CN=zora.live
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
January 31, 2026
Valid Until
May 01, 2026 81 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2F:72:AE:CE:D0:E5:D7:D8:D3:CD:ED:4E:68:BC:F8:25:C9:82:11:4B:2E:81:4A:FA:BA:C3:9C:D8:20:21:DF:2A
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Good
SAMEORIGIN
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
sugarark.one *.sugarark.one

Other domains in certificate

1promptlab.com *.1promptlab.com
22950.top *.22950.top
36279.academy *.36279.academy
713277.vip *.713277.vip
77624.me *.77624.me *.www.77624.me
79036.locker *.79036.locker
83067.pizza *.83067.pizza
94693.top *.94693.top
98032.pizza *.98032.pizza
99998.boutique *.99998.boutique
aarpmyvsioncare.com *.aarpmyvsioncare.com
akavocosmetics.com *.akavocosmetics.com
akgyv.tv *.akgyv.tv
baifdu.com *.baifdu.com
basement-waterproofing-au4-dp.click *.basement-waterproofing-au4-dp.click
car-insurance-153006.click *.car-insurance-153006.click
couches-sofas-5412.click *.couches-sofas-5412.click
gemsbonanza.casino *.gemsbonanza.casino
hbmsg.academy *.hbmsg.academy
hvrlnl8.top *.hvrlnl8.top
i8faya.buzz *.i8faya.buzz
lifvl.net *.lifvl.net
mercadodetodo.com *.mercadodetodo.com *.ww25.mercadodetodo.com
rewardscards.in *.rewardscards.in
roblero.com *.roblero.com *.vpn.roblero.com
*.portal.rotular.com rotular.com *.rotular.com *.ww25.rotular.com
starlightprincess1000.casino *.starlightprincess1000.casino
travelmindescapes.live *.travelmindescapes.live
traveltounseen.live *.traveltounseen.live
ufa123.biz *.ufa123.biz
we92.co *.we92.co
www5610jj.com *.www5610jj.com
www76967n.com *.www76967n.com
xdtcq.net *.xdtcq.net
zeed123plus.pro *.zeed123plus.pro
*.gateway.zezer.com *.hostmaster.zezer.com zezer.com *.zezer.com
zfcmldso.click *.zfcmldso.click
*.com.zora.live *.ww25.zora.live *.zine.zora.live zora.live *.zora.live
zss12.top *.zss12.top