DNS Gurus
Cached · just now
75/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=statuspic.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 01, 2026
Valid Until
December 30, 2026 51 days
Public Key
ECDSA 256 bit (P-256) Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
3C:43:AF:EE:5E:F1:BB:1A:4D:3D:92:E2:8B:D6:A6:43:4C:85:FA:98:75:2F:C7:D3:9C:70:4C:AC:20:E2:03:27
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
statuspic.com *.statuspic.com *.aaa.statuspic.com *.admin.statuspic.com *.api.statuspic.com *.bot.statuspic.com *.demo.statuspic.com *.hc67db.statuspic.com *.insights.statuspic.com *.m.statuspic.com *.random.statuspic.com *.services.statuspic.com *.staging.statuspic.com *.statistics.statuspic.com *.vpn.statuspic.com *.yqczkrandom.statuspic.com

Other domains in certificate

19972.org *.19972.org *.test.19972.org
*.0081.iap2022.com *.0270.iap2022.com *.09fd.iap2022.com *.0ab0.iap2022.com *.0abf.iap2022.com *.1614.iap2022.com *.1c19.iap2022.com *.22a7.iap2022.com *.3209.iap2022.com *.3784.iap2022.com *.4084.iap2022.com *.4bd8.iap2022.com *.4c5a.iap2022.com *.4f07.iap2022.com *.6cdc.iap2022.com *.6fd6.iap2022.com *.708a.iap2022.com *.7930.iap2022.com *.85bd.iap2022.com *.86ae.iap2022.com *.8eea.iap2022.com *.9c90.iap2022.com *.a2ab.iap2022.com *.a40b.iap2022.com *.a7ae.iap2022.com *.a82b.iap2022.com *.a9b7.iap2022.com *.ab60.iap2022.com *.b18c.iap2022.com *.b296.iap2022.com *.b41a.iap2022.com *.b6fd.iap2022.com *.b816.iap2022.com *.bf67.iap2022.com *.d146.iap2022.com *.dad6.iap2022.com *.e12f.iap2022.com *.e1e0.iap2022.com *.e321.iap2022.com *.e626.iap2022.com *.eb7b.iap2022.com *.f1cd.iap2022.com *.f41c.iap2022.com *.f816.iap2022.com iap2022.com *.iap2022.com
ph.works *.ph.works *.wowl.ph.works *.wowreg.ph.works
registration.now *.registration.now *.usagetrackingagent.registration.now
*.staging.tokenpockaet.pro tokenpockaet.pro *.tokenpockaet.pro
*.app.vavadai48.com *.corp.vavadai48.com *.dev.vavadai48.com *.internal.vavadai48.com *.staging.vavadai48.com vavadai48.com *.vavadai48.com
*.demo.wealthbuilders.investments *.m.wealthbuilders.investments wealthbuilders.investments *.wealthbuilders.investments
*.git.xdammam.com xdammam.com *.xdammam.com