DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=xvudeo.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 22, 2026
Valid Until
April 22, 2026 72 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
53:E6:6F:C4:C4:A4:FA:F3:DD:C0:01:57:73:CD:01:84:FA:97:07:E2:F3:B2:69:CE:EC:DE:13:84:DB:94:C4:3F
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
jwellers.com *.jwellers.com *.aaa.jwellers.com *.ckc.jwellers.com *.comune.jwellers.com *.egal.jwellers.com *.helpdesk.jwellers.com *.kay.jwellers.com *.mail.jwellers.com *.png.jwellers.com *.random.jwellers.com *.tns.jwellers.com *.ww25.jwellers.com *.ww38.jwellers.com

Other domains in certificate

*.ashish.bim80.xyz *.avinash.bim80.xyz bim80.xyz *.bim80.xyz *.prabej.bim80.xyz
*.631da9d4-20c9-48b8-8216-a0c8fd8c44ab.ciudadmusica.com *.admin.ciudadmusica.com ciudadmusica.com *.ciudadmusica.com *.demo2.ciudadmusica.com *.hk.ciudadmusica.com *.host.ciudadmusica.com *.lyncdiscover.ciudadmusica.com *.mail.ciudadmusica.com *.pda.ciudadmusica.com *.portal.ciudadmusica.com *.promo.ciudadmusica.com *.sitemaps.ciudadmusica.com *.software.ciudadmusica.com *.ww25.ciudadmusica.com *.ww38.ciudadmusica.com *.www.ciudadmusica.com
*.ad.freeinstrumentaldownload.com *.alex.freeinstrumentaldownload.com *.billing.freeinstrumentaldownload.com *.directory.freeinstrumentaldownload.com freeinstrumentaldownload.com *.freeinstrumentaldownload.com *.help.freeinstrumentaldownload.com *.img.freeinstrumentaldownload.com *.news.freeinstrumentaldownload.com *.webmail.freeinstrumentaldownload.com *.wiki.freeinstrumentaldownload.com *.wordpress.freeinstrumentaldownload.com
*.random.rsx.com.au rsx.com.au *.rsx.com.au *.ww25.rsx.com.au
*.client.unclaimedrevenue.com *.en.unclaimedrevenue.com *.hr.unclaimedrevenue.com *.jc.unclaimedrevenue.com *.pe.unclaimedrevenue.com *.staging.unclaimedrevenue.com *.static.unclaimedrevenue.com *.test.unclaimedrevenue.com *.tr.unclaimedrevenue.com unclaimedrevenue.com *.unclaimedrevenue.com *.users.unclaimedrevenue.com *.ww16.unclaimedrevenue.com *.www.unclaimedrevenue.com
*.123.walmarttgift.com *.5c3.walmarttgift.com *.ad.walmarttgift.com *.admin.walmarttgift.com *.blog.walmarttgift.com *.hostmaster.walmarttgift.com *.random.walmarttgift.com walmarttgift.com *.walmarttgift.com *.ww25.walmarttgift.com *.ww38.walmarttgift.com
*.track.wellness-explorer.co wellness-explorer.co *.wellness-explorer.co
*.bhavai.xvudeo.com *.download.xvudeo.com *.googlewww.xvudeo.com *.miamakova.xvudeo.com *.ww16.xvudeo.com xvudeo.com *.xvudeo.com
*.ww25.xyo.au xyo.au *.xyo.au