DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=masqueradegoddess.store
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 07, 2026
Valid Until
May 08, 2026 86 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
77:26:2D:63:56:D7:77:A0:83:C0:66:F8:5B:12:C5:D7:4A:19:66:71:D4:04:FC:C1:35:A3:F9:F8:E8:DB:D7:42
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
thefuncompany.com *.thefuncompany.com *.b2b.thefuncompany.com *.docs.thefuncompany.com *.email.thefuncompany.com *.home.thefuncompany.com *.login.thefuncompany.com *.mail.thefuncompany.com *.stage.thefuncompany.com *.test.thefuncompany.com *.ww11.thefuncompany.com *.ww16.thefuncompany.com

Other domains in certificate

briarwoodmall.com *.briarwoodmall.com *.random.briarwoodmall.com
cissop.com *.cissop.com
cop29.network *.cop29.network
elatinlabs.com *.elatinlabs.com
elpidaholidyas.com *.elpidaholidyas.com
eraeurope.org *.eraeurope.org
fashionblogs.com.au *.fashionblogs.com.au
*.access.gordonferguson.com *.erp.gordonferguson.com gordonferguson.com *.gordonferguson.com *.rdp.gordonferguson.com *.sso.gordonferguson.com *.ts.gordonferguson.com
groovingtrees.com *.groovingtrees.com *.mail.groovingtrees.com *.wordpress.groovingtrees.com
guncelalkolfiyatlari.com *.guncelalkolfiyatlari.com
hb-gm-assets.com *.hb-gm-assets.com
jobmall.vip *.jobmall.vip
josipesibert.com *.josipesibert.com
kharidoorgenic.com *.kharidoorgenic.com
masqueradegoddess.store *.masqueradegoddess.store *.ww25.masqueradegoddess.store
pinkcherry.online *.pinkcherry.online *.www.pinkcherry.online
registrduriaconcurso.com *.registrduriaconcurso.com
robloxnickname.com *.robloxnickname.com
samiam.live *.samiam.live
tanaekttring.com *.tanaekttring.com
*.api.tecamachalco.com *.hostmaster.tecamachalco.com *.mail.tecamachalco.com tecamachalco.com *.tecamachalco.com *.test.tecamachalco.com *.ww1.tecamachalco.com *.ww25.tecamachalco.com
tkoconsulting.co *.tkoconsulting.co
*.admin.wantnames.com *.auth1.wantnames.com *.d63a2b1a-aac2-418b-b6ce-f81b0f787ce1.wantnames.com *.demo.wantnames.com *.krlvxcloud.wantnames.com *.m.wantnames.com *.rds.wantnames.com *.remote.wantnames.com *.staging.wantnames.com *.test.wantnames.com *.vpn.wantnames.com wantnames.com *.wantnames.com *.www.wantnames.com
yanni.life *.yanni.life