DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=fxccash.shop
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
December 10, 2025
Valid Until
March 10, 2026 35 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
2D:D4:62:0A:45:6B:9F:AD:CD:B2:DA:F2:EC:A3:7D:C0:01:5B:67:EB:00:7E:6E:96:22:AD:0E:68:97:8B:F4:93
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
temu-temu.com *.temu-temu.com *.tk.temu-temu.com

Other domains in certificate

*.api.bluesungroup.shop bluesungroup.shop *.bluesungroup.shop *.old.bluesungroup.shop
ctsrx.com *.ctsrx.com *.ww25.ctsrx.com
*.asterisk.datind.com datind.com *.datind.com *.de.datind.com *.en.datind.com *.internet.datind.com *.members.datind.com *.samp.datind.com *.ww38.datind.com
denalicreations.com *.denalicreations.com
fxccash.shop *.fxccash.shop
goldprices.au *.goldprices.au
*.awstats.hok12.cc hok12.cc *.hok12.cc *.js.hok12.cc *.www.hok12.cc
*.1012562632.itune.store *.1019442026.itune.store *.1054502004.itune.store *.1063962993.itune.store *.1073341917.itune.store *.1091023785.itune.store *.1124177762.itune.store *.1132213599.itune.store *.1132503396.itune.store *.1162227323.itune.store *.1171564453.itune.store *.1240079167.itune.store *.1254037943.itune.store *.1290660991.itune.store *.1314963982.itune.store *.1416771824.itune.store *.1448498274.itune.store *.1453647169.itune.store *.333425918.itune.store *.349447615.itune.store *.396836856.itune.store *.399922064.itune.store *.404990064.itune.store *.429901773.itune.store *.468996152.itune.store *.491730359.itune.store *.536049508.itune.store *.629797415.itune.store *.640360962.itune.store *.743769885.itune.store *.849747345.itune.store *.909110675.itune.store *.944683176.itune.store itune.store *.itune.store
mantarcesitleri.com *.mantarcesitleri.com
*.baseline.msrch.com *.demo.msrch.com *.dev.msrch.com *.i.msrch.com msrch.com *.msrch.com *.ncfe.msrch.com *.oem.msrch.com *.preprod.msrch.com *.sfx.msrch.com
*.ebooks.nacho.digital nacho.digital *.nacho.digital
*.sitemaps.tvpass.net tvpass.net *.tvpass.net *.webmail.tvpass.net
tyrerepairs.au *.tyrerepairs.au
*.random.urbano.live urbano.live *.urbano.live