DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=diip.global
Issuer
C=US, O=Let's Encrypt, CN=YR2
Valid From
June 01, 2026
Valid Until
August 30, 2026 84 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
59:6B:BC:59:9F:94:4A:55:89:CF:D7:D1:A8:1C:26:CD:E0:40:F7:DE:DA:19:3B:E8:1B:83:3F:00:D5:A5:1C:0A
Alternative Names
88 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

88 domains
cucksapp.com *.cucksapp.com *.5ebe40a6-d88a-4041-af13-a737d48b54f5.cucksapp.com *.api.cucksapp.com *.app.cucksapp.com *.assets.cucksapp.com *.blog.cucksapp.com *.demo.cucksapp.com *.dev.cucksapp.com *.hostmaster.cucksapp.com *.new.cucksapp.com *.zsua05.cucksapp.com

Other domains in certificate

diip.global *.diip.global *.staging.diip.global
gurunanakschoolandcollege.com *.gurunanakschoolandcollege.com *.ww25.gurunanakschoolandcollege.com
hmedv.sbs *.hmedv.sbs
jobsfidelity.com *.jobsfidelity.com *.mail.jobsfidelity.com *.ww25.jobsfidelity.com *.ww38.jobsfidelity.com
k9c9.cc *.k9c9.cc
*.americantourister.mehry.com *.dietcare.mehry.com *.hostmaster.mehry.com *.m.mehry.com mehry.com *.mehry.com *.sitemaps.mehry.com *.store.mehry.com *.wiki.mehry.com *.ww25.mehry.com *.ww41.mehry.com
*.big.mybadge.live *.bulksms.mybadge.live *.bulksmscdn.mybadge.live *.c.mybadge.live *.cdn.mybadge.live *.ckbgroup.mybadge.live *.e.mybadge.live *.events.mybadge.live *.gb.mybadge.live *.goodspotproof.mybadge.live *.macdn.mybadge.live mybadge.live *.mybadge.live *.portal.mybadge.live *.rsvp.mybadge.live
*.dev1.nerdclient.com *.dev11.nerdclient.com *.dev2.nerdclient.com *.dev3.nerdclient.com *.dev4.nerdclient.com *.dev5.nerdclient.com *.dev6.nerdclient.com *.dev7.nerdclient.com *.dev8.nerdclient.com *.dev9.nerdclient.com nerdclient.com *.nerdclient.com *.test.nerdclient.com *.testing.nerdclient.com
p6j.cc *.p6j.cc *.x.p6j.cc *.y.p6j.cc *.z.p6j.cc
tiendamaxya.co *.tiendamaxya.co *.ww25.tiendamaxya.co
*.0d5f.tsvuinyz.cc *.463.tsvuinyz.cc *.663a.tsvuinyz.cc *.7d32.tsvuinyz.cc *.d8e53.tsvuinyz.cc *.e6a.tsvuinyz.cc tsvuinyz.cc *.tsvuinyz.cc
*.89qi5sec.v9z2r09tcbgnzp7hihuf.top *.j1ol3tiq.v9z2r09tcbgnzp7hihuf.top *.rjuy4xrn.v9z2r09tcbgnzp7hihuf.top v9z2r09tcbgnzp7hihuf.top *.v9z2r09tcbgnzp7hihuf.top