DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=cexdex.org
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 16, 2026
Valid Until
August 14, 2026 69 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
AA:7C:D4:D7:54:FB:84:6B:40:E1:C9:0D:2B:69:95:29:AF:2D:83:BC:0D:CA:04:F9:DF:F6:CB:8D:5A:8F:13:4B
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
deepits.com *.deepits.com

Other domains in certificate

agigoals.com *.agigoals.com
ashortlink.com *.ashortlink.com
basicprogramming.org *.basicprogramming.org
bdsm.one *.bdsm.one
blackwidowhood.com *.blackwidowhood.com
blendedagency.com *.blendedagency.com
bluecloudhoa.com *.bluecloudhoa.com
bugleblack.com *.bugleblack.com
by9y6ybe9.world *.by9y6ybe9.world
certifieddogwalker.com *.certifieddogwalker.com
cexdex.org *.cexdex.org
cf5f421bfddcf7b1.com *.cf5f421bfddcf7b1.com
cfa8h4.cyou *.cfa8h4.cyou
cg3in7.cyou *.cg3in7.cyou
chantesanrete.com *.chantesanrete.com
chastete.blog *.chastete.blog
chopal.in *.chopal.in
culotte.blog *.culotte.blog
desibeat.com *.desibeat.com
dexarreadytowork.com *.dexarreadytowork.com
eaglebi.com *.eaglebi.com
embodiedmindfulness.com *.embodiedmindfulness.com
employee-research.com *.employee-research.com
equal-partners.com *.equal-partners.com
ermionida.net *.ermionida.net
exitbd.pro *.exitbd.pro
futureworks.sbs *.futureworks.sbs
godjkzj.cc *.godjkzj.cc
goesignblueinkhub.com *.goesignblueinkhub.com
starlinkapp.shop *.starlinkapp.shop *.ww16.starlinkapp.shop
vncyp.cn *.vncyp.cn
weimiav7412.vip *.weimiav7412.vip
wewillrockyounow.vip *.wewillrockyounow.vip
wexluniver.sbs *.wexluniver.sbs
wfuuz.cc *.wfuuz.cc
whisperingzephyr.it.com *.whisperingzephyr.it.com
wokx31.cyou *.wokx31.cyou
workcage.info *.workcage.info
workchargeblast.sbs *.workchargeblast.sbs
workersneeded-works-jobsjobs-needed-applyjob309.sbs *.workersneeded-works-jobsjobs-needed-applyjob309.sbs
zenitheterna.com *.zenitheterna.com
zxmnbcsa6dq9.cc *.zxmnbcsa6dq9.cc
zzz8.xyz *.zzz8.xyz