DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=goldsandhh.xyz
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 14, 2026
Valid Until
August 12, 2026 85 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
14:EA:3B:1C:90:24:BB:99:C7:A6:EC:62:EC:36:4E:13:0F:BD:09:06:1C:09:8C:52:3F:76:29:70:49:73:4B:D3
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
nerds.in *.nerds.in *.demo.nerds.in *.hostmaster.nerds.in *.m.nerds.in *.staging.nerds.in *.www.nerds.in

Other domains in certificate

09094.sbs *.09094.sbs *.my.09094.sbs *.portal.09094.sbs
8fk.buzz *.8fk.buzz *.abcd123.8fk.buzz *.s.8fk.buzz *.sitemaps.8fk.buzz *.ww16.8fk.buzz *.ww25.8fk.buzz *.ww38.8fk.buzz *.www.8fk.buzz
asje.org *.asje.org
*.assets.athyphenates.com athyphenates.com *.athyphenates.com *.pop.athyphenates.com *.www.athyphenates.com
bankly.net *.bankly.net *.hostmaster.bankly.net *.m.bankly.net *.openfinance.bankly.net *.staging.bankly.net
*.app.cucksapp.com *.assets.cucksapp.com *.blog.cucksapp.com cucksapp.com *.cucksapp.com *.demo.cucksapp.com *.dev.cucksapp.com *.hostmaster.cucksapp.com *.new.cucksapp.com *.zsua05.cucksapp.com
*.admin.cukongbet.help cukongbet.help *.cukongbet.help *.demo.cukongbet.help *.hostmaster.cukongbet.help *.new.cukongbet.help *.rosu0d.cukongbet.help
*.32.darkegy.xyz darkegy.xyz *.darkegy.xyz *.sitemap.darkegy.xyz *.www.darkegy.xyz
*.ai.day-jazz.info *.bot.day-jazz.info day-jazz.info *.day-jazz.info
gobolkabanaadir.vote *.gobolkabanaadir.vote *.uat.gobolkabanaadir.vote
goldsandhh.xyz *.goldsandhh.xyz *.sitemap.goldsandhh.xyz
nrivkotu.com *.nrivkotu.com *.ww38.nrivkotu.com
onethingmedia.com *.onethingmedia.com
openadlermailhub.com *.openadlermailhub.com
*.fkpzjz.orbit-leaf.art orbit-leaf.art *.orbit-leaf.art
otfgang.xyz *.otfgang.xyz
phimsexhayvl.net *.phimsexhayvl.net
*.comune.realview.studio realview.studio *.realview.studio
*.32.woodrow.studio woodrow.studio *.woodrow.studio
*.dev.xn--li4aq2h.com *.hostmaster.xn--li4aq2h.com *.new.xn--li4aq2h.com xn--li4aq2h.com *.xn--li4aq2h.com