DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=19j21.xyz
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
February 03, 2026
Valid Until
May 04, 2026 80 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
C2:51:FE:48:47:DF:AA:1E:9C:11:7F:7F:06:93:7E:F8:F4:88:4D:77:07:B2:7A:3D:FF:85:A8:1D:34:B9:BF:62
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
dayhome.com *.dayhome.com *.ww1.dayhome.com

Other domains in certificate

10762.net *.10762.net *.v1.10762.net
19j21.xyz *.19j21.xyz *.ww12.19j21.xyz *.ww25.19j21.xyz *.www.19j21.xyz
appdownload.store *.appdownload.store *.myapps.appdownload.store *.webdisk.appdownload.store
arisastore.com *.arisastore.com
bobshippingservice.com *.bobshippingservice.com *.ww25.bobshippingservice.com
btclk.com *.btclk.com *.ww11.btclk.com *.ww38.btclk.com
*.app.bushytwatsvideos.xyz bushytwatsvideos.xyz *.bushytwatsvideos.xyz *.www.bushytwatsvideos.xyz
campana.store *.campana.store
coeju.in *.coeju.in *.random.coeju.in *.ww38.coeju.in
electricscootersforadultshq.co.uk *.electricscootersforadultshq.co.uk *.sitemap.electricscootersforadultshq.co.uk
hv-veeperks.com *.hv-veeperks.com
jav91.fun *.jav91.fun
k8pachinko.cc *.k8pachinko.cc *.ww25.k8pachinko.cc *.ww38.k8pachinko.cc
kolonpolyp.de *.kolonpolyp.de *.ww38.kolonpolyp.de
*.com.kpilot.org kpilot.org *.kpilot.org
*.ac.loveesoo.com loveesoo.com *.loveesoo.com
*.as.monofunction.com *.eu.monofunction.com monofunction.com *.monofunction.com *.owa.monofunction.com *.rd.monofunction.com *.rds.monofunction.com *.rdweb.monofunction.com *.remote.monofunction.com *.us.monofunction.com
myrightsqld.com.au *.myrightsqld.com.au *.ww16.myrightsqld.com.au *.ww25.myrightsqld.com.au
nexi.com.au *.nexi.com.au *.po.nexi.com.au *.sniper.nexi.com.au
ranvir.com *.ranvir.com *.test.ranvir.com
*.apps.recibidos.com recibidos.com *.recibidos.com *.remote.recibidos.com *.sslvpn.recibidos.com
*.ra.saintecroix.com *.rd.saintecroix.com saintecroix.com *.saintecroix.com *.vpn2.saintecroix.com
semi-bola.online *.semi-bola.online *.www.semi-bola.online
zheit.de *.zheit.de