DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=kormushka.com
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
May 22, 2026
Valid Until
August 20, 2026 74 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
57:EA:9B:24:F0:96:9D:61:6F:BB:13:2C:36:48:55:96:DE:79:7C:B2:F5:99:C6:96:AF:20:DC:B3:FE:B0:E6:3D
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
aestheticworld.com *.aestheticworld.com *.archive.aestheticworld.com *.m.aestheticworld.com *.www.aestheticworld.com

Other domains in certificate

daftkey.com *.daftkey.com *.dns.daftkey.com *.m.daftkey.com *.stats.daftkey.com
*.cpanel.gogoanime.uno gogoanime.uno *.gogoanime.uno *.hostmaster.gogoanime.uno *.mail.gogoanime.uno *.webmail.gogoanime.uno *.www.gogoanime.uno
*.art.kormushka.com *.f2a0f8e2-b3a8-4eb7-b878-e3f9b09a9ab2.kormushka.com kormushka.com *.kormushka.com *.sitemap.kormushka.com *.sitemaps.kormushka.com *.www.kormushka.com
*.bot.naja-chk.site *.go.naja-chk.site *.ig.naja-chk.site *.movie.naja-chk.site naja-chk.site *.naja-chk.site *.s.naja-chk.site *.tech.naja-chk.site
ophely.store *.ophely.store
pangpangth.com *.pangpangth.com
*.bmwwww.pengasih.com *.drvpn.pengasih.com *.exchange.pengasih.com *.forticlient.pengasih.com *.fortinet.pengasih.com *.gate.pengasih.com *.gateway.pengasih.com pengasih.com *.pengasih.com *.ra.pengasih.com *.random.pengasih.com *.remote.pengasih.com *.smtp.pengasih.com *.sslvpn.pengasih.com *.vpn.pengasih.com *.webvpn.pengasih.com *.ww16.pengasih.com *.ww25.pengasih.com
pg036.my *.pg036.my
pheromoan.co *.pheromoan.co
pirateskunk.com *.pirateskunk.com
pla-netx.com *.pla-netx.com *.ww16.pla-netx.com
*.home.roll168k.biz *.m.roll168k.biz roll168k.biz *.roll168k.biz *.sitemap.roll168k.biz *.web.roll168k.biz *.www.roll168k.biz
samudra69.org *.samudra69.org *.www.samudra69.org
*.docu.samudra69.vip samudra69.vip *.samudra69.vip *.www.samudra69.vip
*.com.sweetandpussy.com *.media.sweetandpussy.com sweetandpussy.com *.sweetandpussy.com *.ww1.sweetandpussy.com
*.admin.timemarketing.it *.backend.timemarketing.it timemarketing.it *.timemarketing.it
vintageclassics.com.au *.vintageclassics.com.au *.ww16.vintageclassics.com.au