DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=hashes.zip
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 02, 2026
Valid Until
August 31, 2026 88 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
BA:46:D5:75:25:4C:6C:23:17:82:CE:EF:08:A5:25:3F:ED:A0:14:B1:68:55:B0:1F:5A:9C:44:B0:16:1D:54:76
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
pixic.com *.pixic.com *.accounts.pixic.com *.bi.pixic.com *.cn.pixic.com *.cpanel.pixic.com *.docs.pixic.com *.jp.pixic.com *.kuro.pixic.com *.m.pixic.com *.project.pixic.com *.ro.pixic.com *.superset.pixic.com *.wildcard.pixic.com *.ww25.pixic.com *.www.pixic.com

Other domains in certificate

*.admin.arthroskopie.com arthroskopie.com *.arthroskopie.com *.preprod.arthroskopie.com *.superset.arthroskopie.com *.ww1.arthroskopie.com
hashes.zip *.hashes.zip
*.4vc5ij.intact-nfr.info *.8befna.intact-nfr.info intact-nfr.info *.intact-nfr.info
mamahuhu.live *.mamahuhu.live *.portal.mamahuhu.live
*.ciscoasa.nastya.com *.cpcontacts.nastya.com *.crm.nastya.com *.fotozona.nastya.com *.gadalina.nastya.com *.gateway.nastya.com *.gmail.nastya.com *.hostmaster.nastya.com *.itz.nastya.com *.l.nastya.com *.m.nastya.com *.mail.nastya.com nastya.com *.nastya.com *.o.nastya.com *.owa.nastya.com *.qot.nastya.com *.rd.nastya.com *.relay.nastya.com *.ru.nastya.com *.server.nastya.com *.sslvpn.nastya.com *.wiki.nastya.com *.ww1.nastya.com *.ww16.nastya.com *.ww17.nastya.com *.www.nastya.com
opticai.com.au *.opticai.com.au
*.mx.optimumwater.net optimumwater.net *.optimumwater.net
*.0hc.szbuyfood.com *.0vd.szbuyfood.com *.6lf.szbuyfood.com *.blog.szbuyfood.com *.bvn.szbuyfood.com *.cdn.szbuyfood.com *.dhl.szbuyfood.com *.email.szbuyfood.com *.go.szbuyfood.com *.guanggao.szbuyfood.com *.l9d.szbuyfood.com *.pf8.szbuyfood.com szbuyfood.com *.szbuyfood.com *.www.szbuyfood.com *.xfl.szbuyfood.com
*.uat.wwwbackcountry.com *.ww5.wwwbackcountry.com wwwbackcountry.com *.wwwbackcountry.com
*.rdweb.xn--jlq254ako1amww.com xn--jlq254ako1amww.com *.xn--jlq254ako1amww.com
*.m.xn--udss75afva.com *.rdweb.xn--udss75afva.com xn--udss75afva.com *.xn--udss75afva.com