DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=xxxj.xyz
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 28, 2026
Valid Until
July 27, 2026 32 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
0F:42:23:37:78:29:5E:67:0E:89:3B:BB:C8:33:B4:A0:07:44:83:90:66:08:42:32:09:CD:44:8F:34:DB:62:00
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
thestemkids.co *.thestemkids.co *.checkout.thestemkids.co *.shop.thestemkids.co *.track.thestemkids.co *.xs.thestemkids.co

Other domains in certificate

31419.co *.31419.co *.ww38.31419.co
331wellnessclub.org *.331wellnessclub.org *.admin.331wellnessclub.org *.hostmaster.331wellnessclub.org *.mail.331wellnessclub.org *.mta-sts.331wellnessclub.org *.sitemap.331wellnessclub.org *.www.331wellnessclub.org
*.31b386e1-cc50-4289-a6dd-8c26fc57e189.ankhilapunjab.com *.46c6731a-90df-4483-b8cf-be796f2292bf.ankhilapunjab.com *.a.ankhilapunjab.com *.ad.ankhilapunjab.com ankhilapunjab.com *.ankhilapunjab.com *.api.ankhilapunjab.com *.assets.ankhilapunjab.com *.autodiscover.ankhilapunjab.com *.ayjkgrfvkzvpn.ankhilapunjab.com *.bbe2e9f3-12d0-4757-bd35-e71da42e01f4.ankhilapunjab.com *.community.ankhilapunjab.com *.connect.ankhilapunjab.com *.f7818d95-8c1f-48ff-bb4d-fd0c99faf436.ankhilapunjab.com *.hostmaster.ankhilapunjab.com *.mx.ankhilapunjab.com *.new.ankhilapunjab.com *.office.ankhilapunjab.com *.pay.ankhilapunjab.com *.remote.ankhilapunjab.com *.testing.ankhilapunjab.com *.vkrcloffice.ankhilapunjab.com *.www.ankhilapunjab.com
biki.cc *.biki.cc *.blog.biki.cc *.m.biki.cc *.mail.biki.cc *.support.biki.cc *.wiki.biki.cc
*.asaka-uz.healthlipo.shop *.baitushumaccess.healthlipo.shop *.citilink.healthlipo.shop *.eldorado.healthlipo.shop *.haypost.healthlipo.shop healthlipo.shop *.healthlipo.shop *.imap3d.healthlipo.shop *.lalafo1.healthlipo.shop *.mx02.healthlipo.shop *.optimabank.healthlipo.shop *.oracle.healthlipo.shop *.osx.healthlipo.shop *.riamoneytransfer.healthlipo.shop *.server.healthlipo.shop *.ssl.healthlipo.shop *.web.healthlipo.shop
*.bbs.netlight.co *.chat.netlight.co *.mx.netlight.co netlight.co *.netlight.co *.www.netlight.co
phuamnpam.com *.phuamnpam.com
psoriasistreatmentlisticle.online *.psoriasistreatmentlisticle.online *.ww38.psoriasistreatmentlisticle.online
*.3nxyc.qajeeajk.top qajeeajk.top *.qajeeajk.top *.sbd1u.qajeeajk.top
scramby.io *.scramby.io
*.org.sozcuturkiye.com *.smhturkiye.sozcuturkiye.com sozcuturkiye.com *.sozcuturkiye.com
vogliounbimbo.it *.vogliounbimbo.it
xxxj.xyz *.xxxj.xyz