Checking DNSSEC, CAA, NS, MX, RDAP expiry, and 4 mail blacklists...
Checking DNSSEC, CAA, NS, MX, RDAP expiry, and 4 mail blacklists...
DNS health for
Checked 5/14/2026, 11:58:42 PM · 7190ms
Major issues found. Domain is exposed.
This operation was aborted
No CAA records published. Any CA can issue certs for this domain.
checked IP: 170.10.152.242 (MX usb-smtp-inbound-2.mimecast.com), 170.10.150.242 (MX usb-smtp-inbound-2.mimecast.com)
Domain intel on cvs.com
✓ Malware / phishing intel: clean
Domain is not on any malware-distribution feed we track.
✓ Active threat intel: clean
No active C2 / botnet IOCs against this domain.
Registered 1996-01-30 - established
Established domains rarely host phishing infrastructure.
for cvs.com
Let's Encrypt is the most common free CA. If you also use a paid CA (Sectigo, DigiCert, etc.), add additional `0 issue "<ca-host>"` records for each.
@0 issue "letsencrypt.org"Authorise wildcard cert issuance. Drop this record if you never need wildcard certs.
@0 issuewild "letsencrypt.org"Where to send incident reports if a CA detects an unauthorised issuance attempt. Point at a real mailbox.
@0 iodef "mailto:[email protected]"AI-assisted remediation
Wiredepth Pro sends this report to our AI engine and streams back a 30-day rollout plan tailored to cvs.com, with provider-specific tips when we can infer them from the data. 10 playbooks per month on Pro, 100 on MSP.
Or share this URL with the team that owns the records.