DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=waterboilers.in
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 11, 2026
Valid Until
August 09, 2026 67 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
99:50:01:D8:98:B0:0D:17:A7:FB:4D:28:53:67:FA:AC:88:CF:8A:03:EA:4B:51:76:75:92:84:5D:87:3D:8B:E5
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
buckstar.coffee *.buckstar.coffee

Other domains in certificate

0kmint.xyz *.0kmint.xyz *.1d817.0kmint.xyz *.78z68.0kmint.xyz *.8joac.0kmint.xyz *.95vhx.0kmint.xyz *.ayfpk.0kmint.xyz *.b54zj.0kmint.xyz *.fz4qv.0kmint.xyz *.rkuvx.0kmint.xyz *.s5kjz.0kmint.xyz *.uugt9.0kmint.xyz
454542.co *.454542.co
automotivemachineshops.art *.automotivemachineshops.art
awsblogs.info *.awsblogs.info
bjaddict.com *.bjaddict.com
brandanoplumbing.com *.brandanoplumbing.com
*.admin.easyatm.com.tw easyatm.com.tw *.easyatm.com.tw *.ez02.easyatm.com.tw *.ezo.easyatm.com.tw *.mail5.easyatm.com.tw
hentau.com *.hentau.com *.ww.hentau.com *.ww16.hentau.com
lovecalculate.xyz *.lovecalculate.xyz *.ww38.lovecalculate.xyz
myroyalmailemployeeshares.co.uk *.myroyalmailemployeeshares.co.uk *.random.myroyalmailemployeeshares.co.uk *.ww16.myroyalmailemployeeshares.co.uk *.ww17.myroyalmailemployeeshares.co.uk *.ww25.myroyalmailemployeeshares.co.uk
*.demo.needleprintsociety.com needleprintsociety.com *.needleprintsociety.com *.ww17.needleprintsociety.com
pt777bali.top *.pt777bali.top
richhuey.com *.richhuey.com
rmump.gdn *.rmump.gdn
rusvote.sbs *.rusvote.sbs
sedao.my *.sedao.my
silacreative.com *.silacreative.com
swimsuitvestsale.com *.swimsuitvestsale.com
tgjewels.cn *.tgjewels.cn
tipsei.com *.tipsei.com
topshelfrestoration.com *.topshelfrestoration.com
trademarkgoods.com *.trademarkgoods.com
travelintuitionhub.xyz *.travelintuitionhub.xyz
victoriaprofitness.com *.victoriaprofitness.com
*.api.waterboilers.in waterboilers.in *.waterboilers.in
xbhymh.com *.xbhymh.com
xn--6krr5s.com *.xn--6krr5s.com
xn--tirtbasks-17a96db20d.com *.xn--tirtbasks-17a96db20d.com
xn--xhq477e.com *.xn--xhq477e.com
yakingacor.xyz *.yakingacor.xyz
ydkfblog.com *.ydkfblog.com
yg02.net *.yg02.net