DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=67911.nexus
Issuer
C=US, O=Let's Encrypt, CN=R12
Valid From
April 30, 2026
Valid Until
July 29, 2026 77 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3A:17:1C:01:EE:F9:97:37:82:A6:37:77:20:B4:87:80:05:15:E9:56:87:E0:66:FC:4A:42:E2:26:EA:9F:CA:12
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
coldagdncy.com *.coldagdncy.com

Other domains in certificate

10810.sx *.10810.sx
26601404.vip *.26601404.vip
42590.co *.42590.co
5376998.cc *.5376998.cc
5378628.cc *.5378628.cc
61355.work *.61355.work
64c55417017c20bb.com *.64c55417017c20bb.com
67911.nexus *.67911.nexus
69571.center *.69571.center
70918.cab *.70918.cab
71015.blog *.71015.blog
83b3b4b539e04fe3.com *.83b3b4b539e04fe3.com
89042.cab *.89042.cab
alipay3.cam *.alipay3.cam
apisderm.com *.apisderm.com
billieeilishfragrences.com *.billieeilishfragrences.com
bpbud.one *.bpbud.one
coldrava.info *.coldrava.info
colivare.com *.colivare.com
concert.me *.concert.me
creatorventurehub.com *.creatorventurehub.com
curatedtechnologyteam.com *.curatedtechnologyteam.com
digstaking.com *.digstaking.com
djmy84.qpon *.djmy84.qpon
dlyvra.com *.dlyvra.com
dufihv.cyou *.dufihv.cyou
gibyjo.pro *.gibyjo.pro
grandmothcellertrwjhuwrghjutretyru.pro *.grandmothcellertrwjhuwrghjutretyru.pro
hellogetchaserr.com *.hellogetchaserr.com
hyc01698.cc *.hyc01698.cc
kanduconstruction.com *.kanduconstruction.com
leadostra.com *.leadostra.com
liquidgoldmamas.com *.liquidgoldmamas.com
lomera.sbs *.lomera.sbs
neurabotiq.com *.neurabotiq.com
prashanthhospitals.in *.prashanthhospitals.in
qwavia.com *.qwavia.com
reachlov.info *.reachlov.info
sharedideaspoint.sbs *.sharedideaspoint.sbs
super-cryptovision.quest *.super-cryptovision.quest
thefutureisherehubbb.com *.thefutureisherehubbb.com
tkyfqx.cyou *.tkyfqx.cyou
vapolinatopingy.cfd *.vapolinatopingy.cfd
vintners.live *.vintners.live