DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=nascentcash.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 27, 2026
Valid Until
July 26, 2026 41 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
D7:7B:1E:82:FD:F0:FB:AD:0A:60:1E:19:44:78:5F:65:04:14:75:EA:78:C6:67:40:9D:38:F4:81:8A:3B:A7:CD
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
grugs.com *.grugs.com *.random.grugs.com *.ww.grugs.com

Other domains in certificate

cgext.com *.cgext.com *.new.cgext.com
fapsluit.com *.fapsluit.com
frivolesausgehen.de *.frivolesausgehen.de
hkd.au *.hkd.au *.ww16.hkd.au
jamethoki.xyz *.jamethoki.xyz *.www.jamethoki.xyz
*.cloud.jogoconsciente.com jogoconsciente.com *.jogoconsciente.com *.rd.jogoconsciente.com *.rds.jogoconsciente.com *.rdweb.jogoconsciente.com
largewomen.com.au *.largewomen.com.au
*.cpanel.letsstage.com letsstage.com *.letsstage.com *.m.letsstage.com
mombangteen.com *.mombangteen.com
muddymatch.co.uk *.muddymatch.co.uk *.ww25.muddymatch.co.uk *.ww38.muddymatch.co.uk
*.admin.nascentcash.com *.api.nascentcash.com *.assets.nascentcash.com *.blog.nascentcash.com *.cf418dd4-1c95-4a83-8808-eabafd0911b5.nascentcash.com *.demo.nascentcash.com *.dev.nascentcash.com nascentcash.com *.nascentcash.com *.sjgvytesting.nascentcash.com *.staging.nascentcash.com *.temp.nascentcash.com *.testing.nascentcash.com *.wp.nascentcash.com
pokehouse.com *.pokehouse.com *.ww38.pokehouse.com
schuldscheinformular.de *.schuldscheinformular.de *.ww16.schuldscheinformular.de
*.hr.soordash.com soordash.com *.soordash.com *.ww25.soordash.com *.ww38.soordash.com
*.cpcalendars.street-walkers.com street-walkers.com *.street-walkers.com *.ww25.street-walkers.com *.ww38.street-walkers.com
*.dns.tdautofonance.com *.hostmaster.tdautofonance.com *.mx7.tdautofonance.com tdautofonance.com *.tdautofonance.com
*.cqbdri.trail-lite.com *.pipeline.trail-lite.com *.rgfn.trail-lite.com trail-lite.com *.trail-lite.com *.ww1.trail-lite.com *.ww16.trail-lite.com *.ww25.trail-lite.com *.www.trail-lite.com
uspsliteblue.org *.uspsliteblue.org *.www.uspsliteblue.org
*.ebay.woodendrinkcoaster.com *.sitemaps.woodendrinkcoaster.com woodendrinkcoaster.com *.woodendrinkcoaster.com
*.www.xn--gtv772d.com xn--gtv772d.com *.xn--gtv772d.com