DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=cxxny.cn
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 28, 2026
Valid Until
August 26, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
67:7E:02:C8:7C:9A:CE:A8:CD:BF:2C:FF:E5:BE:BA:C7:D3:29:62:6B:E2:A4:46:76:DA:6D:AD:A4:2E:B1:B9:57
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
xr-radius.com *.xr-radius.com

Other domains in certificate

cxxny.cn *.cxxny.cn
dreampairsitalia.com *.dreampairsitalia.com
enigmozo.com *.enigmozo.com
ev6j48.cyou *.ev6j48.cyou
exatas.xyz *.exatas.xyz
exploredestinations.click *.exploredestinations.click
family-lawyers-144079804.click *.family-lawyers-144079804.click
generaltg.com *.generaltg.com
gequbaomp3.com *.gequbaomp3.com
gnbyo.qpon *.gnbyo.qpon
goldrateinoman.com *.goldrateinoman.com
gorialiu.com *.gorialiu.com
guapro.com *.guapro.com
icyinfinity.com *.icyinfinity.com
insuretechaiq.com *.insuretechaiq.com
nammm14.xyz *.nammm14.xyz
newbreakingbarrierz.com *.newbreakingbarrierz.com
nokadobeyi.sbs *.nokadobeyi.sbs
obet66.com *.obet66.com
oddsspot.xyz *.oddsspot.xyz
officialballotbox.com *.officialballotbox.com
opendata.co *.opendata.co
papaganteng.com *.papaganteng.com
pigunugile.sbs *.pigunugile.sbs
shadowmaster979.shop *.shadowmaster979.shop
shill.tv *.shill.tv
shopbuyshop.online *.shopbuyshop.online
sirens.co *.sirens.co
smarthell.com *.smarthell.com
smile2706.monster *.smile2706.monster
smokyrecipe.com *.smokyrecipe.com
syjx123.cn *.syjx123.cn
throwbackweekend.com *.throwbackweekend.com
twincitiesguide.org *.twincitiesguide.org
upatwist.com *.upatwist.com
usevida.info *.usevida.info
usholic.com *.usholic.com
v32ca.lol *.v32ca.lol
www777f.me *.www777f.me
xn--oyyv2r.com *.xn--oyyv2r.com
yestosho.online *.yestosho.online
yinflow.io *.yinflow.io
zorpy.pro *.zorpy.pro
zugx2.lol *.zugx2.lol