DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=ad-firm.org
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 30, 2026
Valid Until
July 29, 2026 61 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
59:7E:FE:F6:5E:5E:96:B0:5E:DE:CA:64:6A:48:A2:60:97:B1:8E:9B:3C:E8:DC:0B:8F:FE:0D:42:F3:76:3E:94
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
luxuryshots.click *.luxuryshots.click *.aljp6brhyd7j.luxuryshots.click *.api.luxuryshots.click *.app.luxuryshots.click *.bcttxup94fc1.luxuryshots.click *.dev.luxuryshots.click *.hostmaster.luxuryshots.click *.mail.luxuryshots.click *.sbohpicx.luxuryshots.click *.shop.luxuryshots.click *.www.luxuryshots.click

Other domains in certificate

accoppiatrici.com *.accoppiatrici.com *.blog.accoppiatrici.com *.remote.accoppiatrici.com *.ww20.accoppiatrici.com
ad-firm.org *.ad-firm.org *.orgww16.ad-firm.org *.ww25.ad-firm.org *.ww38.ad-firm.org
gzqqjy.cn *.gzqqjy.cn *.llx.gzqqjy.cn *.snh4h.gzqqjy.cn *.ztsi.gzqqjy.cn
jcxp.com *.jcxp.com *.ns1.jcxp.com *.random.jcxp.com *.skk1y6hhs82u9vtaqzkvhm.jcxp.com *.ww38.jcxp.com
*.dev.ohcoloring.info ohcoloring.info *.ohcoloring.info *.v2.ohcoloring.info
*.1b498c70-ddee-4980-8f4b-5c8f623bba24.winktheapp.com *.4262717f-a904-4307-a562-af4a891a9bcb.winktheapp.com *.7a99d21d-2dde-4a3c-92eb-3db7b9bd4cfe.winktheapp.com *.access.winktheapp.com *.admin.winktheapp.com *.anyconnect.winktheapp.com *.api.winktheapp.com *.app.winktheapp.com *.apps.winktheapp.com *.assets.winktheapp.com *.autodiscover.winktheapp.com *.blog.winktheapp.com *.bumtqvpn2.winktheapp.com *.client.winktheapp.com *.cloud.winktheapp.com *.connectvpn.winktheapp.com *.demo.winktheapp.com *.dev.winktheapp.com *.gateway.winktheapp.com *.ghctylogin.winktheapp.com *.hostmaster.winktheapp.com *.login.winktheapp.com *.m.winktheapp.com *.mail.winktheapp.com *.mobile.winktheapp.com *.office.winktheapp.com *.owa.winktheapp.com *.portal.winktheapp.com *.rdp.winktheapp.com *.rds.winktheapp.com *.rdweb.winktheapp.com *.remote.winktheapp.com *.remoteaccess.winktheapp.com *.rndfgdev.winktheapp.com *.rudtvaxi.winktheapp.com *.secureaccess.winktheapp.com *.shop.winktheapp.com *.ssl.winktheapp.com *.sslvpn.winktheapp.com *.test.winktheapp.com *.ts.winktheapp.com *.vpn.winktheapp.com *.vpn1.winktheapp.com *.vpn2.winktheapp.com *.vvbcujrgfikrmzsrdp.winktheapp.com *.web.winktheapp.com *.webconnect.winktheapp.com *.webmail.winktheapp.com *.webvpn.winktheapp.com *.wildcard.winktheapp.com winktheapp.com *.winktheapp.com *.www.winktheapp.com