DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=fcw.us
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 03, 2026
Valid Until
July 02, 2026 37 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
14:6E:10:9D:D3:21:5A:A6:52:74:E2:68:B6:C7:7D:09:84:84:76:6A:08:3C:43:93:96:E9:35:D4:DB:74:E8:A9
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
oflove.com *.oflove.com *.parce.oflove.com *.ww25.oflove.com *.www.oflove.com

Other domains in certificate

africanwallart.com *.africanwallart.com
*.a.botanicalsfreshcare.com *.bluesky.botanicalsfreshcare.com botanicalsfreshcare.com *.botanicalsfreshcare.com *.random.botanicalsfreshcare.com *.ww25.botanicalsfreshcare.com *.ww38.botanicalsfreshcare.com
byjufutureschool.com *.byjufutureschool.com *.ww25.byjufutureschool.com
cheaphomeloans.com.au *.cheaphomeloans.com.au *.ww25.cheaphomeloans.com.au
concursomuseumaritimodobrasil.org *.concursomuseumaritimodobrasil.org
dickjohnsonheritage.com.au *.dickjohnsonheritage.com.au *.ww25.dickjohnsonheritage.com.au
enviofacil.it *.enviofacil.it *.staging.enviofacil.it
fcw.us *.fcw.us *.wildcard.fcw.us
formax23.xyz *.formax23.xyz *.ww25.formax23.xyz
improponibile.it *.improponibile.it
macedonians.com.au *.macedonians.com.au *.ww38.macedonians.com.au
*.a.mexoroblo.com mexoroblo.com *.mexoroblo.com *.wp.mexoroblo.com
ninja168.world *.ninja168.world *.www.ninja168.world
*.a.pantheon.com.au *.dialoggroup.pantheon.com.au *.icemedia.pantheon.com.au *.integration.pantheon.com.au pantheon.com.au *.pantheon.com.au *.portal.pantheon.com.au *.ww25.pantheon.com.au
*.e5b344d3-2297-446c-8146-93b77df28365.playsingles.com *.ftp.playsingles.com playsingles.com *.playsingles.com *.v2.playsingles.com *.vpn.playsingles.com
*.analyze.rafal.it *.app.rafal.it *.data.rafal.it *.dev.rafal.it *.intel.rafal.it *.mail.rafal.it *.mail2.rafal.it rafal.it *.rafal.it
*.admin.secondnationalbank.com *.outlook.secondnationalbank.com secondnationalbank.com *.secondnationalbank.com *.ww1.secondnationalbank.com *.www.secondnationalbank.com
self-cateringorkney.co.uk *.self-cateringorkney.co.uk *.ww38.self-cateringorkney.co.uk
*.helpdesk.utcyouthstemacademies.com utcyouthstemacademies.com *.utcyouthstemacademies.com
*.server.xn--pokretzanarodidravu-av-n1e.online xn--pokretzanarodidravu-av-n1e.online *.xn--pokretzanarodidravu-av-n1e.online
*.students.yolandaforgovernor.org *.townhall.yolandaforgovernor.org *.www.yolandaforgovernor.org yolandaforgovernor.org *.yolandaforgovernor.org