DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Detected Technologies

See all in URL Inspect 1
Let's Encrypt logo Let's Encrypt Active incidents

Certificate Information

Subject
CN=debtmag.info
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
May 05, 2026
Valid Until
August 03, 2026 85 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
5F:8C:C4:FC:0C:42:CA:2B:D9:B6:1E:2E:CE:5C:33:3B:80:B6:67:F6:5E:4F:A6:81:09:45:98:36:9C:34:6C:CA
Alternative Names
89 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured Analyze
Content-Security-Policy-Report-Only
Missing
Not configured Analyze
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

89 domains
plys.com *.plys.com *.bailuy68.plys.com *.cothill.plys.com *.gwurnymynydd.plys.com *.holleysa.plys.com *.ileyda.plys.com *.judithlayton.plys.com *.kencard.plys.com *.mcluanhinu.plys.com *.neo73.plys.com *.sudars.plys.com

Other domains in certificate

*.94ca297b-9680-42e4-a5f3-adacc44cc9cf.babymoca.com *.a.babymoca.com *.api.babymoca.com *.app.babymoca.com babymoca.com *.babymoca.com *.beheer.babymoca.com *.demo.babymoca.com *.dev.babymoca.com *.insight.babymoca.com *.load.babymoca.com *.rds.babymoca.com *.staging.babymoca.com *.test.babymoca.com *.www.babymoca.com
*.1h5ya2.callanalysisgpt.com *.admin.callanalysisgpt.com *.api.callanalysisgpt.com *.app.callanalysisgpt.com *.apps.callanalysisgpt.com *.backend.callanalysisgpt.com callanalysisgpt.com *.callanalysisgpt.com *.demo.callanalysisgpt.com *.dev.callanalysisgpt.com *.docs.callanalysisgpt.com *.git.callanalysisgpt.com *.gitlab.callanalysisgpt.com *.login.callanalysisgpt.com *.m.callanalysisgpt.com *.mail.callanalysisgpt.com *.new.callanalysisgpt.com *.nzkotadmin.callanalysisgpt.com *.remote.callanalysisgpt.com *.stage.callanalysisgpt.com *.staging.callanalysisgpt.com *.test.callanalysisgpt.com *.testing.callanalysisgpt.com *.vpn.callanalysisgpt.com *.www.callanalysisgpt.com
clashparadise.io *.clashparadise.io *.staging.clashparadise.io
*.4fad44f4-8ea3-4e13-bb6c-c7aac7a497aa.debtmag.info debtmag.info *.debtmag.info
*.96c54.f8efyhj.top f8efyhj.top *.f8efyhj.top
jarabowtie.com *.jarabowtie.com *.rds2.jarabowtie.com
kaufidee.com *.kaufidee.com *.membros.kaufidee.com *.wuayctest.kaufidee.com *.www.kaufidee.com
oblero.com *.oblero.com *.www.oblero.com
*.133e74eb-eb91-4b9d-a45d-d9ab2155196a.rpi.in *.admin.rpi.in *.ajbeual.rpi.in *.al.rpi.in *.api.rpi.in *.autodiscover.rpi.in *.county.rpi.in *.dev.rpi.in *.pk3.rpi.in *.ramdsaath.rpi.in rpi.in *.rpi.in *.www.rpi.in
virtualtelemetry.com *.virtualtelemetry.com *.ww16.virtualtelemetry.com *.ww25.virtualtelemetry.com