DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=finfindr.me
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
January 03, 2026
Valid Until
April 03, 2026 52 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
8D:99:56:0D:8F:B0:D9:2A:F4:06:D2:97:BC:7D:D2:B7:EB:95:69:F8:37:B8:7A:FA:8F:28:D6:95:B3:F8:39:E9
Alternative Names
78 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

78 domains
popsound.com *.popsound.com *.dbis.popsound.com *.ftp.popsound.com *.ftp2.popsound.com *.tw.popsound.com

Other domains in certificate

bdclaim.co.uk *.bdclaim.co.uk *.sms.bdclaim.co.uk *.uplift.bdclaim.co.uk
chathamsoar.com *.chathamsoar.com
chodua.xyz *.chodua.xyz *.dddd.chodua.xyz *.f3ac518a-186e-4ca2-a9e5-c02f334c771e.chodua.xyz *.m.chodua.xyz *.root.chodua.xyz *.website.chodua.xyz
countryhouselife.com *.countryhouselife.com *.mail.countryhouselife.com
dy1an.xyz *.dy1an.xyz *.hks.dy1an.xyz *.integration-bi.dy1an.xyz *.sandbox.dy1an.xyz *.ww25.dy1an.xyz
finfindr.me *.finfindr.me
huoxingyzm.com *.huoxingyzm.com
inkrishna.com *.inkrishna.com
javth.net *.javth.net *.player.javth.net
khelostarindia.com *.khelostarindia.com
mangamobi.net *.mangamobi.net *.random.mangamobi.net
maximumservicesinc.info *.maximumservicesinc.info
*.bi.myherbaliife.com *.login.myherbaliife.com myherbaliife.com *.myherbaliife.com *.random.myherbaliife.com *.ww25.myherbaliife.com
ntlysearchingf.info *.ntlysearchingf.info
pizzeriabellaitalia2.com *.pizzeriabellaitalia2.com
righymove.co.uk *.righymove.co.uk
rtopk.com *.rtopk.com
salvationhairdressing.co.uk *.salvationhairdressing.co.uk *.test.salvationhairdressing.co.uk
*.bbs.starcinema21.com *.dc-199395c0d3c5.starcinema21.com *.imax.starcinema21.com *.m.starcinema21.com *.mpelicula.starcinema21.com *.pelicula.starcinema21.com *.sitemap.starcinema21.com starcinema21.com *.starcinema21.com *.stream.starcinema21.com *.ww12.starcinema21.com *.www.starcinema21.com
*.mail4.yankeebaseball.com *.out.yankeebaseball.com *.ww38.yankeebaseball.com yankeebaseball.com *.yankeebaseball.com