gyanis.ai — domain check, WHOIS, DNS & reputation

HTML metadata

Title

Gyanis | AI Study App for JEE, NEET, UPSC, CBSE & State Boards

Description

Gyanis helps students plan, learn and track for JEE, NEET, UPSC, CBSE and State Boards. Flow plans your day and drills MCQs; Aura supports well-being; Vibe converts lessons into audio.

Language

en-IN

Canonical

https://gyanis.ai

Translations

en ×6

Open Graph

url: https://gyanis.ai
title: Gyanis | AI Study App for JEE, NEET, UPSC, CBSE & State Boards
locale: en_IN
description: Gyanis helps students plan, learn and track for JEE, NEET, UPSC, CBSE and State Boards. Flow plans your day and drills MCQs; Aura supports well-being; Vibe converts lessons into audio.

Technology

CDN: Amazon CloudFront
CMS: Next.js

Analytics

Google Analytics
Google Tag Manager

Third-party hosts loaded (6)

www.googletagmanager.com×3
accounts.google.com×1
storage.googleapis.com×1
www.google-analytics.com×1
www.google.com×1
www.gstatic.com×1

Social

Contact

Address: Sharjah Research Technology and Innovation Park, Sharjah, AE

DNS records live

NS

ns-1178.awsdns-19.org
ns-1598.awsdns-07.co.uk
ns-415.awsdns-51.com
ns-560.awsdns-06.net

MX

1 smtp.google.com

Verified for

Google

Email authentication weak

SPF

not published

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

google: v=DKIM1;k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDXhn8ZVVbpJM2CZWPse/xlV6plOm3S0FpKr1Pyt8wh8khx3V0SCPuYERHKdmDCMCyRqf65zpziEUUg7dp8BB48…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx8ekyxuyP1S5cOVZ7rlP/IFYg6HjNHjBUGnqEvV7mWUAnZoNuxTc3ZLMltk+mGL+mVJQkFeKaEmjlS3od…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNjQL+1nkbVRuwhvzco7yRalA0PmUrao/tMx/5MID/3ESzyku9m6/3VIfo+pSN80HEf1Q0gZ55yO33vkpi…

selectors probed

Certificate (current)

Amazon RSA 2048 M04

from 2025-10-12 to 2026-11-11

Expires in 158 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://gyanis.ai/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; object-src 'none'; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' blob: https://tagmanager.google.com https://www.googletagmanager.com/ https://googleads.g.doubleclick.net https://www.google-analytics.com https://tagassistant.google.com https://apis.google.com https://accounts.google.com https://www.gstatic.com https://www.google.com https://www.grecaptcha.com https://recaptcha.google.com https://checkout.razorpay.com https://*.razorpay.com https://rzp.io https://js.stripe.com https://m.stripe.com https://m.stripe.network https://in.fw-cdn.com https://*.freshchat.com https://*.freshworks.com https://*.myfreshworks.com; script-src-elem 'self' 'unsafe-inline' blob: https://tagmanager.google.com https://www.googletagmanager.com/ https://googleads.g.doubleclick.net https://www.google-analytics.com https://tagassistant.google.com https://apis.google.com https://accounts.google.com https://www.gstatic.com https://www.google.com https://www.g
strict-transport-security: max-age=31536000; includeSubDomains; preload
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: same-site

Links to (5)

Linked from (1)

takeai.org×1