DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt

Certificate Information

Subject
CN=pelayos.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 24, 2026
Valid Until
May 25, 2026 89 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
6B:FF:8F:E4:41:D6:89:62:B0:A4:D5:90:C8:CF:3C:A7:24:DB:DF:6E:F7:AF:3C:DD:67:AF:C9:AB:8E:3C:95:E0
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
pelayos.com *.pelayos.com

Other domains in certificate

*.2563fec6-b08d-408d-9057-25ae0c6f2932.aigoesmlm.com aigoesmlm.com *.aigoesmlm.com *.mbvnudlj.aigoesmlm.com *.test.aigoesmlm.com
*.3ugcn.appsw9.xyz *.4kxnn.appsw9.xyz *.525v4.appsw9.xyz *.5qutp.appsw9.xyz *.5vs9r.appsw9.xyz appsw9.xyz *.appsw9.xyz *.ayfpk.appsw9.xyz *.d.appsw9.xyz *.fcvkr.appsw9.xyz *.ip4i2.appsw9.xyz *.lkzdx.appsw9.xyz *.meiqia.appsw9.xyz *.ndifg.appsw9.xyz *.svzzq.appsw9.xyz *.www.appsw9.xyz
brownground.com *.brownground.com *.sitemaps.brownground.com
*.3nxyc.careerstepjourney.xyz careerstepjourney.xyz *.careerstepjourney.xyz *.kwid9.careerstepjourney.xyz
chatjam.com *.chatjam.com *.exchangecorp.chatjam.com *.www.chatjam.com
drawn.us *.drawn.us *.sitemaps.drawn.us *.store.drawn.us
*.api.gbmart.in gbmart.in *.gbmart.in
*.admin.intimateexpressions.me *.connect.intimateexpressions.me *.hostmaster.intimateexpressions.me intimateexpressions.me *.intimateexpressions.me *.log.intimateexpressions.me *.m.intimateexpressions.me *.members.intimateexpressions.me *.sitemaps.intimateexpressions.me
klik-website-resmi-kami.church *.klik-website-resmi-kami.church *.recette.klik-website-resmi-kami.church
*.admin.manipurfinance.com *.cloud.manipurfinance.com *.m.manipurfinance.com manipurfinance.com *.manipurfinance.com
*.app.postmatch.team *.cpcalendars.postmatch.team *.cpcontacts.postmatch.team postmatch.team *.postmatch.team
*.admin.wealthyinvest.com *.app.wealthyinvest.com *.cart-stage.wealthyinvest.com *.cdn-cgi.wealthyinvest.com *.cdn-test.wealthyinvest.com *.cdn.wealthyinvest.com *.crm.wealthyinvest.com *.devops.wealthyinvest.com *.docker.wealthyinvest.com *.documentation.wealthyinvest.com *.git.wealthyinvest.com *.internal.wealthyinvest.com *.laravel.wealthyinvest.com *.nodejs.wealthyinvest.com *.ops.wealthyinvest.com *.pgsql.wealthyinvest.com *.pipeline.wealthyinvest.com *.proof.wealthyinvest.com *.root.wealthyinvest.com *.sitemap.wealthyinvest.com *.sitemaps.wealthyinvest.com *.smtp.wealthyinvest.com *.status.wealthyinvest.com *.upload.wealthyinvest.com *.version.wealthyinvest.com wealthyinvest.com *.wealthyinvest.com