warn
TLS·18
Expiry window
lit up in run 3130.162.45.139: leaf certificate expires in 30 days
Fix: Renew the certificate now and automate future renewals.
A
score 96 / 100strong, minor polish possible
Run 3 2026-11-06 01:33 UTC 57 checks profile 5 2.3 s unchanged since 2026-11-06 last checked 2026-11-06
netray.info
Expiry
ECH
CORS
CSP
Suites
ECH
CORS
CSP
Suites
ECH
CORS
CSP
DNS A+
TLS A
HTTP A
EMAIL A+
IP A+
A+A+AA+A
A+A+AA+A+
A+A+AA+A+
Run 32026-11-06grade A
Run 3 · 2026-11-06 · grade A
latest run
Tap a line for its history. Step back with ‹ to replay a run.
11-0610-28
Each line carries its trace: 3 runs, newest on top.
hover a run to replay the spectrum · tap to pin
- pass
- warn
- fail
- fixed since run 2
- fixed since run 1
Since run 2
- new Expiry window TLS·18
unchanged since 2026-11-06; last checked 2026-11-06
4 lines need attention
Your certificate provider
1 lineYour web server configuration
2 lines
warn
HTTP·36
CORS policy
in all 3 runsAllows any origin (Access-Control-Allow-Origin: *)
Fix: Allow only an explicit list of trusted origins and send Access-Control-Allow-Credentials only for those.
warn
HTTP·38
Content Security Policy
in all 3 runsstyle-src contains 'unsafe-inline'
Fix: Send an enforced Content-Security-Policy with default-src, object-src 'none' and base-uri that restricts scripts to trusted origins.
Your DNS provider
1 line
warn
TLS·33
ECH advertised
in all 3 runs130.162.45.139: ECH not advertised in HTTPS DNS record
Fix: Publish the server's ECH configuration in the ech= parameter of the HTTPS record, once Encrypted Client Hello is enabled on the server.
Evidence
# netray.info
Grade A · score 96 / 100
## Open issues
- WARN `tls.expiry_window` Expiry window: 130.162.45.139: leaf certificate expires in 30 days
- WARN `tls.ech_advertised` ECH advertised: 130.162.45.139: ECH not advertised in HTTPS DNS record
- WARN `http.cors` CORS policy: Allows any origin (Access-Control-Allow-Origin: \*)
- WARN `http.csp` Content Security Policy: style-src contains 'unsafe-inline'
## Checks
| Code | Check | Status | Finding | Fix |
|---|---|---|---|---|
| `dns.dnssec` | DNSSEC signed | pass | | |
| `dns.dnskey_algorithm` | DNSKEY algorithm | pass | | |
| `dns.dnssec_rollover` | DNSSEC key rollover | pass | | |
| `dns.caa` | CAA records | pass | | |
| `dns.ns` | Nameserver redundancy | pass | | |
| `dns.ns_lame` | Lame delegation | pass | | |
| `dns.ns_delegation` | Delegation consistency | pass | | |
| `dns.cname_apex` | No CNAME at apex | pass | | |
| `dns.https_svcb` | HTTPS record | pass | | |
| `dns.ttl` | TTL range | pass | | |
| `tls.tls_reachable` | TLS reachable | pass | | |
| `tls.chain_trusted` | Chain trusted | pass | | |
| `tls.not_expired` | Certificate valid | pass | | |
| `tls.hostname_match` | Hostname match | pass | | |
| `tls.chain_complete` | Chain complete | pass | | |
| `tls.strong_signature` | Strong signature | pass | | |
| `tls.key_strength` | Key strength | pass | | |
| `tls.expiry_window` | Expiry window | warn | 130.162.45.139: leaf certificate expires in 30 days | Renew the certificate now and automate future renewals. |
| `tls.cert_lifetime` | Certificate lifetime | pass | | |
| `tls.san_quality` | SAN quality | pass | | |
| `tls.aia_reachability` | AIA reachable | not\_applicable | Chain is complete; AIA URLs not required for verification | |
| `tls.tls_version` | TLS version | pass | | |
| `tls.forward_secrecy` | Forward secrecy | pass | | |
| `tls.aead_cipher` | AEAD cipher | pass | | |
| `tls.legacy_versions` | Legacy protocol versions | pass | | |
| `tls.weak_suites` | Weak cipher suites | pass | | |
| `tls.ocsp_stapled` | OCSP stapling | not\_applicable | CA does not provide OCSP (CRL only) | |
| `tls.ct_logged` | CT logged | pass | | |
| `tls.caa_compliant` | CAA compliant | pass | | |
| `tls.dane_valid` | DANE valid | not\_applicable | DANE check skipped (requires DNSSEC) | |
| `tls.consistency` | Multi-IP consistency | not\_applicable | fewer than 2 IPs inspected | |
| `tls.alpn_consistency` | ALPN consistency | not\_applicable | fewer than 2 IPs inspected | |
| `tls.ech_advertised` | ECH advertised | warn | 130.162.45.139: ECH not advertised in HTTPS DNS record | Publish the server's ECH configuration in the ech= parameter of the HTTPS record, once Encrypted Client Hello is enabled on the server. |
| `http.https_redirect` | HTTPS redirect | pass | | |
| `http.hsts` | HSTS | pass | | |
| `http.cors` | CORS policy | warn | Allows any origin (Access-Control-Allow-Origin: \*) | Allow only an explicit list of trusted origins and send Access-Control-Allow-Credentials only for those. |
| `http.cookie_secure` | Secure cookies | not\_applicable | not applicable | |
| `http.csp` | Content Security Policy | warn | style-src contains 'unsafe-inline' | Send an enforced Content-Security-Policy with default-src, object-src 'none' and base-uri that restricts scripts to trusted origins. |
| `http.x_frame_options` | X-Frame-Options | pass | | |
| `http.x_content_type_options` | X-Content-Type-Options | pass | | |
| `http.referrer_policy` | Referrer-Policy | pass | | |
| `http.permissions_policy` | Permissions-Policy | pass | | |
| `http.coop` | Cross-Origin-Opener-Policy | pass | | |
| `http.deprecated_headers` | Deprecated headers | pass | | |
| `http.info_leakage` | Information leakage | pass | | |
| `http.caching` | Cache control | pass | | |
| `email.mx` | MX records | pass | only one MX record, but it resolves to 4 IP addresses | |
| `email.spf` | SPF | pass | | |
| `email.dkim` | DKIM | pass | | |
| `email.dmarc` | DMARC | pass | | |
| `email.mta_sts` | MTA-STS | pass | | |
| `email.tls_rpt` | TLS-RPT | pass | | |
| `email.bimi` | BIMI | pass | | |
| `email.dane` | SMTP DANE | not\_applicable | No DANE TLSA records | |
| `email.dnsbl` | DNS blocklists | pass | zen.spamhaus.org rejected the query (127.255.255.254); results from this zone are unreliable; zone bl.spamcop.net unreachable: timeout; dbl.spamhaus.org rejected the query (127.255.255.254); results from this zone are unreliable | |
| `email.fcrdns` | Forward-confirmed rDNS | pass | | |
| `ip.reputation` | IP reputation | pass | | |
section,item,field,value
checks,dns.dnssec,status,pass
checks,dns.dnssec,finding,
checks,dns.dnssec,fix,
checks,dns.dnskey_algorithm,status,pass
checks,dns.dnskey_algorithm,finding,
checks,dns.dnskey_algorithm,fix,
checks,dns.dnssec_rollover,status,pass
checks,dns.dnssec_rollover,finding,
checks,dns.dnssec_rollover,fix,
checks,dns.caa,status,pass
checks,dns.caa,finding,
checks,dns.caa,fix,
checks,dns.ns,status,pass
checks,dns.ns,finding,
checks,dns.ns,fix,
checks,dns.ns_lame,status,pass
checks,dns.ns_lame,finding,
checks,dns.ns_lame,fix,
checks,dns.ns_delegation,status,pass
checks,dns.ns_delegation,finding,
checks,dns.ns_delegation,fix,
checks,dns.cname_apex,status,pass
checks,dns.cname_apex,finding,
checks,dns.cname_apex,fix,
checks,dns.https_svcb,status,pass
checks,dns.https_svcb,finding,
checks,dns.https_svcb,fix,
checks,dns.ttl,status,pass
checks,dns.ttl,finding,
checks,dns.ttl,fix,
checks,tls.tls_reachable,status,pass
checks,tls.tls_reachable,finding,
checks,tls.tls_reachable,fix,
checks,tls.chain_trusted,status,pass
checks,tls.chain_trusted,finding,
checks,tls.chain_trusted,fix,
checks,tls.not_expired,status,pass
checks,tls.not_expired,finding,
checks,tls.not_expired,fix,
checks,tls.hostname_match,status,pass
checks,tls.hostname_match,finding,
checks,tls.hostname_match,fix,
checks,tls.chain_complete,status,pass
checks,tls.chain_complete,finding,
checks,tls.chain_complete,fix,
checks,tls.strong_signature,status,pass
checks,tls.strong_signature,finding,
checks,tls.strong_signature,fix,
checks,tls.key_strength,status,pass
checks,tls.key_strength,finding,
checks,tls.key_strength,fix,
checks,tls.expiry_window,status,warn
checks,tls.expiry_window,finding,130.162.45.139: leaf certificate expires in 30 days
checks,tls.expiry_window,fix,Renew the certificate now and automate future renewals.
checks,tls.cert_lifetime,status,pass
checks,tls.cert_lifetime,finding,
checks,tls.cert_lifetime,fix,
checks,tls.san_quality,status,pass
checks,tls.san_quality,finding,
checks,tls.san_quality,fix,
checks,tls.aia_reachability,status,not_applicable
checks,tls.aia_reachability,finding,Chain is complete; AIA URLs not required for verification
checks,tls.aia_reachability,fix,
checks,tls.tls_version,status,pass
checks,tls.tls_version,finding,
checks,tls.tls_version,fix,
checks,tls.forward_secrecy,status,pass
checks,tls.forward_secrecy,finding,
checks,tls.forward_secrecy,fix,
checks,tls.aead_cipher,status,pass
checks,tls.aead_cipher,finding,
checks,tls.aead_cipher,fix,
checks,tls.legacy_versions,status,pass
checks,tls.legacy_versions,finding,
checks,tls.legacy_versions,fix,
checks,tls.weak_suites,status,pass
checks,tls.weak_suites,finding,
checks,tls.weak_suites,fix,
checks,tls.ocsp_stapled,status,not_applicable
checks,tls.ocsp_stapled,finding,CA does not provide OCSP (CRL only)
checks,tls.ocsp_stapled,fix,
checks,tls.ct_logged,status,pass
checks,tls.ct_logged,finding,
checks,tls.ct_logged,fix,
checks,tls.caa_compliant,status,pass
checks,tls.caa_compliant,finding,
checks,tls.caa_compliant,fix,
checks,tls.dane_valid,status,not_applicable
checks,tls.dane_valid,finding,DANE check skipped (requires DNSSEC)
checks,tls.dane_valid,fix,
checks,tls.consistency,status,not_applicable
checks,tls.consistency,finding,fewer than 2 IPs inspected
checks,tls.consistency,fix,
checks,tls.alpn_consistency,status,not_applicable
checks,tls.alpn_consistency,finding,fewer than 2 IPs inspected
checks,tls.alpn_consistency,fix,
checks,tls.ech_advertised,status,warn
checks,tls.ech_advertised,finding,130.162.45.139: ECH not advertised in HTTPS DNS record
checks,tls.ech_advertised,fix,"Publish the server's ECH configuration in the ech= parameter of the HTTPS record, once Encrypted Client Hello is enabled on the server."
checks,http.https_redirect,status,pass
checks,http.https_redirect,finding,
checks,http.https_redirect,fix,
checks,http.hsts,status,pass
checks,http.hsts,finding,
checks,http.hsts,fix,
checks,http.cors,status,warn
checks,http.cors,finding,Allows any origin (Access-Control-Allow-Origin: *)
checks,http.cors,fix,Allow only an explicit list of trusted origins and send Access-Control-Allow-Credentials only for those.
checks,http.cookie_secure,status,not_applicable
checks,http.cookie_secure,finding,not applicable
checks,http.cookie_secure,fix,
checks,http.csp,status,warn
checks,http.csp,finding,style-src contains 'unsafe-inline'
checks,http.csp,fix,"Send an enforced Content-Security-Policy with default-src, object-src 'none' and base-uri that restricts scripts to trusted origins."
checks,http.x_frame_options,status,pass
checks,http.x_frame_options,finding,
checks,http.x_frame_options,fix,
checks,http.x_content_type_options,status,pass
checks,http.x_content_type_options,finding,
checks,http.x_content_type_options,fix,
checks,http.referrer_policy,status,pass
checks,http.referrer_policy,finding,
checks,http.referrer_policy,fix,
checks,http.permissions_policy,status,pass
checks,http.permissions_policy,finding,
checks,http.permissions_policy,fix,
checks,http.coop,status,pass
checks,http.coop,finding,
checks,http.coop,fix,
checks,http.deprecated_headers,status,pass
checks,http.deprecated_headers,finding,
checks,http.deprecated_headers,fix,
checks,http.info_leakage,status,pass
checks,http.info_leakage,finding,
checks,http.info_leakage,fix,
checks,http.caching,status,pass
checks,http.caching,finding,
checks,http.caching,fix,
checks,email.mx,status,pass
checks,email.mx,finding,"only one MX record, but it resolves to 4 IP addresses"
checks,email.mx,fix,
checks,email.spf,status,pass
checks,email.spf,finding,
checks,email.spf,fix,
checks,email.dkim,status,pass
checks,email.dkim,finding,
checks,email.dkim,fix,
checks,email.dmarc,status,pass
checks,email.dmarc,finding,
checks,email.dmarc,fix,
checks,email.mta_sts,status,pass
checks,email.mta_sts,finding,
checks,email.mta_sts,fix,
checks,email.tls_rpt,status,pass
checks,email.tls_rpt,finding,
checks,email.tls_rpt,fix,
checks,email.bimi,status,pass
checks,email.bimi,finding,
checks,email.bimi,fix,
checks,email.dane,status,not_applicable
checks,email.dane,finding,No DANE TLSA records
checks,email.dane,fix,
checks,email.dnsbl,status,pass
checks,email.dnsbl,finding,zen.spamhaus.org rejected the query (127.255.255.254); results from this zone are unreliable; zone bl.spamcop.net unreachable: timeout; dbl.spamhaus.org rejected the query (127.255.255.254); results from this zone are unreliable
checks,email.dnsbl,fix,
checks,email.fcrdns,status,pass
checks,email.fcrdns,finding,
checks,email.fcrdns,fix,
checks,ip.reputation,status,pass
checks,ip.reputation,finding,
checks,ip.reputation,fix,
dns.a,0,owner,netray.info.
dns.a,0,type,A
dns.a,0,ttl,600
dns.a,0,data,130.162.45.139
dns.aaaa,0,owner,netray.info.
dns.aaaa,0,type,AAAA
dns.aaaa,0,ttl,600
dns.aaaa,0,data,2603:c020:8023:6d00:0:c658:5b78:6699
dns.mx,0,owner,netray.info.
dns.mx,0,type,MX
dns.mx,0,ttl,3600
dns.mx,0,data,10 smtp.google.com.
dns.caa,0,owner,netray.info.
dns.caa,0,type,CAA
dns.caa,0,ttl,3600
dns.caa,0,data,"0 iodef ""mailto:hostmaster@netray.info"""
dns.caa,1,owner,netray.info.
dns.caa,1,type,CAA
dns.caa,1,ttl,3600
dns.caa,1,data,"0 issue ""letsencrypt.org"""
dns.caa,2,owner,netray.info.
dns.caa,2,type,CAA
dns.caa,2,ttl,3600
dns.caa,2,data,"0 issuewild ""letsencrypt.org"""
dns.ns,0,owner,netray.info.
dns.ns,0,type,NS
dns.ns,0,ttl,600
dns.ns,0,data,dns1.p04.nsone.net.
dns.ns,1,owner,netray.info.
dns.ns,1,type,NS
dns.ns,1,ttl,600
dns.ns,1,data,dns2.p04.nsone.net.
dns.ns,2,owner,netray.info.
dns.ns,2,type,NS
dns.ns,2,ttl,600
dns.ns,2,data,dns3.p04.nsone.net.
dns.ns,3,owner,netray.info.
dns.ns,3,type,NS
dns.ns,3,ttl,600
dns.ns,3,data,dns4.p04.nsone.net.
dns.https,0,owner,netray.info.
dns.https,0,type,HTTPS
dns.https,0,ttl,3600
dns.https,0,data,"1 . alpn=h2,h3"
dns.dnskey,0,owner,netray.info.
dns.dnskey,0,type,DNSKEY
dns.dnskey,0,ttl,600
dns.dnskey,0,data,256 3 13 3u9onSaqbxIlglXMHjh5Plcah8n2pXj0QuBVY/6YTdC6L/eUEYPDh57nOVJ8dd3fkPMrjt2Oij6J9EeLqyeuBw==
dns.dnskey,1,owner,netray.info.
dns.dnskey,1,type,DNSKEY
dns.dnskey,1,ttl,600
dns.dnskey,1,data,257 3 13 t+4DPP+MFZ0Cr7gAXiDYv6HTyXzq/O2ESVRLc/ysuh5xBXKIsjsj5baV1HzhBNo2F7mbsevsEo0/6UEL8+JBmA==
dns.ds,0,owner,netray.info.
dns.ds,0,type,DS
dns.ds,0,ttl,3600
dns.ds,0,data,48553 13 2 A643677CFFCBC4094D04B3C2ECDBEFB5D1B4CE4B09ED633666B94823014427FD
dns.nsec,0,owner,netray.info.
dns.nsec,0,type,NSEC
dns.nsec,0,ttl,600
dns.nsec,0,data,\000.netray.info. A NS SOA MX TXT AAAA RRSIG NSEC DNSKEY HTTPS CAA
dns.soa,0,owner,netray.info.
dns.soa,0,type,SOA
dns.soa,0,ttl,600
dns.soa,0,data,dns1.p04.nsone.net. hostmaster.nsone.net. 1775664304 16384 2048 1209600 3600
dns.txt,0,owner,netray.info.
dns.txt,0,type,TXT
dns.txt,0,ttl,3600
dns.txt,0,data,"""google-site-verification=O5UwjQdLJGrAGkEvcA6nTkVARpBcjZhQcTPw3jlII04"""
dns.txt,1,owner,netray.info.
dns.txt,1,type,TXT
dns.txt,1,ttl,3600
dns.txt,1,data,"""v=spf1 include:_spf.google.com ~all"""
email.mx,smtp.google.com,host,smtp.google.com
email.mx,smtp.google.com,preference,10
email.mx,smtp.google.com,cname,
email.mx_addresses,142.251.127.27,address,142.251.127.27
email.mx_addresses,142.251.127.27,host,smtp.google.com
email.mx_addresses,142.251.127.26,address,142.251.127.26
email.mx_addresses,142.251.127.26,host,smtp.google.com
email.mx_addresses,2a00:1450:4001:c21::1a,address,2a00:1450:4001:c21::1a
email.mx_addresses,2a00:1450:4001:c21::1a,host,smtp.google.com
email.mx_addresses,2a00:1450:4001:c21::1b,address,2a00:1450:4001:c21::1b
email.mx_addresses,2a00:1450:4001:c21::1b,host,smtp.google.com
email.spf,,record,v=spf1 include:_spf.google.com ~all
email.spf,,authorized_prefixes,74.125.0.0/16
email.spf,,authorized_prefixes,209.85.128.0/17
email.spf,,authorized_prefixes,2001:4860:4864::/56
email.spf,,authorized_prefixes,2404:6800:4864::/56
email.spf,,authorized_prefixes,2607:f8b0:4864::/56
email.spf,,authorized_prefixes,2800:3f0:4864::/56
email.spf,,authorized_prefixes,2a00:1450:4864::/56
email.spf,,authorized_prefixes,2c0f:fb50:4864::/56
email.spf,,lookup_count,1
email.spf,,void_lookups,0
email.dmarc,,record,v=DMARC1; p=reject; rua=mailto:hostmaster@netray.info; ruf=mailto:hostmaster@netray.info
email.dmarc,,p,reject
email.dmarc,,rua,mailto:hostmaster@netray.info
email.dmarc,,ruf,mailto:hostmaster@netray.info
email.mta_sts,,record,v=STSv1; id=20260408000000
email.mta_sts,,id,20260408000000
email.mta_sts,,policy_status,200
email.mta_sts,,content_type,text/plain; charset=utf-8
email.mta_sts_policy,0,text,"version: STSv1
mode: enforce
mx: smtp.google.com
max_age: 86400
"
email.tls_rpt,,record,v=TLSRPTv1; rua=mailto:hostmaster@netray.info
email.tls_rpt,,rua,mailto:hostmaster@netray.info
email.bimi,,record,v=BIMI1; l=https://netray.info/bimi-logo.svg
email.bimi,,l,https://netray.info/bimi-logo.svg
email.bimi,,logo_fetch,ok
email.dnssec,,dnskey_present,true
email.dkim,google#1,key,google#1
email.dkim,google#1,selector,google
email.dkim,google#1,state,ok
email.dkim,google#1,key_type,rsa
email.dkim,google#1,bits,2048
email.dnsbl,142.251.127.27@zen.spamhaus.org,query,142.251.127.27@zen.spamhaus.org
email.dnsbl,142.251.127.27@zen.spamhaus.org,zone,zen.spamhaus.org
email.dnsbl,142.251.127.27@zen.spamhaus.org,target,142.251.127.27
email.dnsbl,142.251.127.27@zen.spamhaus.org,answered,false
email.dnsbl,142.251.127.27@zen.spamhaus.org,answer,127.255.255.254
email.dnsbl,142.251.127.26@zen.spamhaus.org,query,142.251.127.26@zen.spamhaus.org
email.dnsbl,142.251.127.26@zen.spamhaus.org,zone,zen.spamhaus.org
email.dnsbl,142.251.127.26@zen.spamhaus.org,target,142.251.127.26
email.dnsbl,142.251.127.26@zen.spamhaus.org,answered,false
email.dnsbl,142.251.127.26@zen.spamhaus.org,answer,127.255.255.254
email.dnsbl,142.251.127.27@b.barracudacentral.org,query,142.251.127.27@b.barracudacentral.org
email.dnsbl,142.251.127.27@b.barracudacentral.org,zone,b.barracudacentral.org
email.dnsbl,142.251.127.27@b.barracudacentral.org,target,142.251.127.27
email.dnsbl,142.251.127.27@b.barracudacentral.org,answered,true
email.dnsbl,142.251.127.27@b.barracudacentral.org,answer,
email.dnsbl,142.251.127.26@b.barracudacentral.org,query,142.251.127.26@b.barracudacentral.org
email.dnsbl,142.251.127.26@b.barracudacentral.org,zone,b.barracudacentral.org
email.dnsbl,142.251.127.26@b.barracudacentral.org,target,142.251.127.26
email.dnsbl,142.251.127.26@b.barracudacentral.org,answered,true
email.dnsbl,142.251.127.26@b.barracudacentral.org,answer,
email.dnsbl,142.251.127.27@bl.spamcop.net,query,142.251.127.27@bl.spamcop.net
email.dnsbl,142.251.127.27@bl.spamcop.net,zone,bl.spamcop.net
email.dnsbl,142.251.127.27@bl.spamcop.net,target,142.251.127.27
email.dnsbl,142.251.127.27@bl.spamcop.net,answered,false
email.dnsbl,142.251.127.27@bl.spamcop.net,answer,
email.dnsbl,142.251.127.26@bl.spamcop.net,query,142.251.127.26@bl.spamcop.net
email.dnsbl,142.251.127.26@bl.spamcop.net,zone,bl.spamcop.net
email.dnsbl,142.251.127.26@bl.spamcop.net,target,142.251.127.26
email.dnsbl,142.251.127.26@bl.spamcop.net,answered,false
email.dnsbl,142.251.127.26@bl.spamcop.net,answer,
email.dnsbl_domain,netray.info@dbl.spamhaus.org,query,netray.info@dbl.spamhaus.org
email.dnsbl_domain,netray.info@dbl.spamhaus.org,zone,dbl.spamhaus.org
email.dnsbl_domain,netray.info@dbl.spamhaus.org,target,netray.info
email.dnsbl_domain,netray.info@dbl.spamhaus.org,answered,false
email.dnsbl_domain,netray.info@dbl.spamhaus.org,answer,127.255.255.254
email.fcrdns,142.251.127.27,address,142.251.127.27
email.fcrdns,142.251.127.27,ptr,lcfrai-in-f27.1e100.net.
email.fcrdns,142.251.127.27,confirmed,true
email.fcrdns,142.251.127.26,address,142.251.127.26
email.fcrdns,142.251.127.26,ptr,lcfrai-in-f26.1e100.net.
email.fcrdns,142.251.127.26,confirmed,true
email.fcrdns,2a00:1450:4001:c21::1a,address,2a00:1450:4001:c21::1a
email.fcrdns,2a00:1450:4001:c21::1a,ptr,lcfrai-in-f26.1e100.net.
email.fcrdns,2a00:1450:4001:c21::1a,confirmed,true
email.fcrdns,2a00:1450:4001:c21::1b,address,2a00:1450:4001:c21::1b
email.fcrdns,2a00:1450:4001:c21::1b,ptr,lcfrai-in-f27.1e100.net.
email.fcrdns,2a00:1450:4001:c21::1b,confirmed,true
email.summary,,grade,A
http.port80,0,url,http://netray.info/
http.port80,0,status,301
http.port80,0,location,https://netray.info/
http.port80_probe,,url,http://netray.info/
http.port80_probe,,status_code,200
http.port80_probe,,redirects_to_https,true
http.headers,access-control-allow-origin,name,access-control-allow-origin
http.headers,access-control-allow-origin,value,*
http.headers,cache-control,name,cache-control
http.headers,cache-control,value,no-cache
http.headers,content-encoding,name,content-encoding
http.headers,content-encoding,value,gzip
http.headers,content-security-policy,name,content-security-policy
http.headers,content-security-policy,value,default-src 'self'; script-src 'self' 'sha256-FBZufGszYN+NT1Qfwwcpw8g3UwIyffzP+zXtvQP53zc='; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src 'self' https://stats.uptimerobot.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self' https://netray.info https://*.netray.info
http.headers,content-type,name,content-type
http.headers,content-type,value,text/html; charset=utf-8
http.headers,cross-origin-opener-policy,name,cross-origin-opener-policy
http.headers,cross-origin-opener-policy,value,same-origin
http.headers,cross-origin-resource-policy,name,cross-origin-resource-policy
http.headers,cross-origin-resource-policy,value,cross-origin
http.headers,date,name,date
http.headers,date,value,"Fri, 06 Nov 2026 01:33:18 GMT"
http.headers,permissions-policy,name,permissions-policy
http.headers,permissions-policy,value,"camera=(), microphone=(), geolocation=(), payment=()"
http.headers,referrer-policy,name,referrer-policy
http.headers,referrer-policy,value,strict-origin-when-cross-origin
http.headers,strict-transport-security,name,strict-transport-security
http.headers,strict-transport-security,value,max-age=31536000; includeSubDomains; preload
http.headers,vary,name,vary
http.headers,vary,value,"accept-encoding, origin, access-control-request-method, access-control-request-headers"
http.headers,x-content-type-options,name,x-content-type-options
http.headers,x-content-type-options,value,nosniff
http.headers,x-frame-options,name,x-frame-options
http.headers,x-frame-options,value,DENY
http.headers,x-request-id,name,x-request-id
http.headers,x-request-id,value,01a1ae7d-1fa5-727e-ab39-1ba31b0ef202
http.csp,0,report_only,false
http.csp,0,issue_count,1
http.csp,1,directive,default-src
http.csp,1,source,'self'
http.csp,2,directive,script-src
http.csp,2,source,'self'
http.csp,2,source,'sha256-FBZufGszYN+NT1Qfwwcpw8g3UwIyffzP+zXtvQP53zc='
http.csp,3,directive,style-src
http.csp,3,source,'self'
http.csp,3,source,'unsafe-inline'
http.csp,3,issue,style-src contains 'unsafe-inline'
http.csp,4,directive,font-src
http.csp,4,source,'self'
http.csp,5,directive,img-src
http.csp,5,source,'self'
http.csp,5,source,data:
http.csp,6,directive,connect-src
http.csp,6,source,'self'
http.csp,6,source,https://stats.uptimerobot.com
http.csp,7,directive,frame-ancestors
http.csp,7,source,'none'
http.csp,8,directive,base-uri
http.csp,8,source,'self'
http.csp,9,directive,object-src
http.csp,9,source,'none'
http.csp,10,directive,form-action
http.csp,10,source,'self'
http.csp,10,source,https://netray.info
http.csp,10,source,https://*.netray.info
http.hsts,,max_age,31536000
http.hsts,,include_subdomains,true
http.hsts,,preload,true
http.caching,,directive,no-cache
http.caching,,vary,accept-encoding
http.caching,,vary,origin
http.caching,,vary,access-control-request-method
http.caching,,vary,access-control-request-headers
http.isolation,,coop,same-origin
http.isolation,,corp,cross-origin
http.isolation,,missing,cross-origin-embedder-policy
http.server,,final_url,https://netray.info/
http.server,,status_code,200
http.server,,http_version,h2
http.server,,inspection_ms,444 ms
http.server,,address,130.162.45.139
http.server,,org,Oracle Corporation
http.server,,network_type,cloud
http.cors,,allows_any_origin,true
http.cors,,reflects_origin,false
http.cors,,allows_credentials,false
http.cors,,allow_origin,*
ip.addresses,130.162.45.139,address,130.162.45.139
ip.addresses,130.162.45.139,asn,AS31898
ip.addresses,130.162.45.139,org,Oracle Corporation
ip.addresses,130.162.45.139,prefix,130.162.32.0/19
ip.addresses,130.162.45.139,network_type,cloud
ip.addresses,130.162.45.139,country,Germany
ip.addresses,130.162.45.139,city,Frankfurt am Main
ip.addresses,130.162.45.139,spamhaus,false
ip.addresses,130.162.45.139,c2,false
ip.addresses,130.162.45.139,tor,false
ip.addresses,130.162.45.139,vpn,false
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,address,2603:c020:8023:6d00:0:c658:5b78:6699
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,asn,AS31898
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,org,Oracle Corporation
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,prefix,2603:c020:8000::/35
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,network_type,datacenter
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,country,Germany
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,city,Frankfurt am Main
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,spamhaus,false
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,c2,false
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,tor,false
ip.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,vpn,false
tls.addresses,130.162.45.139,address,130.162.45.139
tls.addresses,130.162.45.139,port,443
tls.addresses,130.162.45.139,outcome,ok
tls.addresses,130.162.45.139,message,
tls.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,address,2603:c020:8023:6d00:0:c658:5b78:6699
tls.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,port,443
tls.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,outcome,NOT_TESTED_FROM_HERE
tls.addresses,2603:c020:8023:6d00:0:c658:5b78:6699,message,Network unreachable (os error 101)
tls.chain@130.162.45.139:443,0,position,leaf
tls.chain@130.162.45.139:443,0,subject,CN=netray.info
tls.chain@130.162.45.139:443,0,issuer,"C=US, O=Let's Encrypt, CN=YR2"
tls.chain@130.162.45.139:443,0,sans,netray.info
tls.chain@130.162.45.139:443,0,not_before,2026-09-07T21:47:50Z
tls.chain@130.162.45.139:443,0,not_after,2026-12-06T21:47:49Z
tls.chain@130.162.45.139:443,0,days_remaining,30
tls.chain@130.162.45.139:443,0,key,RSA 4096
tls.chain@130.162.45.139:443,0,signature_algorithm,sha256WithRSAEncryption
tls.chain@130.162.45.139:443,0,fingerprint_sha256,01:85:DC:66:B0:87:75:B9:57:8A:6F:8A:6B:F9:42:40:69:38:BA:82:12:C6:8A:84:39:29:EE:90:85:90:BD:76
tls.chain@130.162.45.139:443,0,fingerprint_sha1,6C:BB:59:A5:4D:EA:27:01:32:CA:FB:3B:84:36:7C:0F:AF:02:CB:88
tls.chain@130.162.45.139:443,0,serial,05:A4:2F:BC:F3:FE:DD:E3:32:EE:77:E9:91:67:6B:41:61:E6
tls.chain@130.162.45.139:443,0,policy,DV
tls.chain@130.162.45.139:443,0,self_signed,false
tls.chain@130.162.45.139:443,0,expired,false
tls.chain@130.162.45.139:443,0,ca_issuers_url,http://yr2.i.lencr.org/
tls.chain@130.162.45.139:443,1,position,intermediate
tls.chain@130.162.45.139:443,1,subject,"C=US, O=Let's Encrypt, CN=YR2"
tls.chain@130.162.45.139:443,1,issuer,"C=US, O=ISRG, CN=Root YR"
tls.chain@130.162.45.139:443,1,not_before,2025-09-03T00:00:00Z
tls.chain@130.162.45.139:443,1,not_after,2028-09-02T23:59:59Z
tls.chain@130.162.45.139:443,1,days_remaining,666
tls.chain@130.162.45.139:443,1,key,RSA 2048
tls.chain@130.162.45.139:443,1,signature_algorithm,sha256WithRSAEncryption
tls.chain@130.162.45.139:443,1,fingerprint_sha256,23:8B:85:A0:09:9C:65:B9:70:47:7D:57:24:F1:A1:D4:75:CE:50:58:CF:FE:4E:FA:87:33:89:9B:DB:86:3C:47
tls.chain@130.162.45.139:443,1,fingerprint_sha1,2D:74:D6:DF:D9:6E:EA:55:AD:7B:AA:FA:0D:3C:65:52:B2:DA:DC:37
tls.chain@130.162.45.139:443,1,serial,4E:BD:24:94:7E:24:D3:94:80:2D:84:A5:2F:D5:B3:19
tls.chain@130.162.45.139:443,1,policy,OV
tls.chain@130.162.45.139:443,1,self_signed,false
tls.chain@130.162.45.139:443,1,expired,false
tls.chain@130.162.45.139:443,1,ca_issuers_url,http://yr.i.lencr.org/
tls.chain@130.162.45.139:443,2,position,intermediate
tls.chain@130.162.45.139:443,2,subject,"C=US, O=ISRG, CN=Root YR"
tls.chain@130.162.45.139:443,2,issuer,"C=US, O=Internet Security Research Group, CN=ISRG Root X1"
tls.chain@130.162.45.139:443,2,not_before,2026-05-13T00:00:00Z
tls.chain@130.162.45.139:443,2,not_after,2032-09-02T23:59:59Z
tls.chain@130.162.45.139:443,2,days_remaining,2127
tls.chain@130.162.45.139:443,2,key,RSA 4096
tls.chain@130.162.45.139:443,2,signature_algorithm,sha256WithRSAEncryption
tls.chain@130.162.45.139:443,2,fingerprint_sha256,07:26:39:D0:B1:40:D5:BF:FA:E1:6A:D9:C3:F6:CC:60:86:04:06:21:F5:1E:E6:1A:6D:46:A8:91:5C:07:CF:76
tls.chain@130.162.45.139:443,2,fingerprint_sha1,AB:9D:02:63:24:4D:D0:32:6E:B6:70:15:70:5A:66:7E:79:CF:E9:98
tls.chain@130.162.45.139:443,2,serial,00:F2:4B:6D:17:F9:D9:AD:7C:B1:C9:FE:A7:87:82:69:9F
tls.chain@130.162.45.139:443,2,policy,OV
tls.chain@130.162.45.139:443,2,self_signed,false
tls.chain@130.162.45.139:443,2,expired,false
tls.chain@130.162.45.139:443,2,ca_issuers_url,http://x1.i.lencr.org/
tls.handshake@130.162.45.139:443,,version,TLSv1.3
tls.handshake@130.162.45.139:443,,cipher_suite,TLS13_AES_128_GCM_SHA256
tls.handshake@130.162.45.139:443,,key_exchange_group,X25519
tls.handshake@130.162.45.139:443,,sni,netray.info
tls.handshake@130.162.45.139:443,,ocsp_stapled,false
tls.handshake@130.162.45.139:443,,ech,false
tls.handshake@130.162.45.139:443,,handshake_ms,127 ms
tls.probes@130.162.45.139:443,,ssl3,disabled
tls.probes@130.162.45.139:443,,ssl3_answer,alert protocol_version
tls.probes@130.162.45.139:443,,tls1_0,disabled
tls.probes@130.162.45.139:443,,tls1_0_answer,alert protocol_version
tls.probes@130.162.45.139:443,,tls1_1,disabled
tls.probes@130.162.45.139:443,,tls1_1_answer,alert protocol_version
tls.probes@130.162.45.139:443,,tls1_2,enabled
tls.probes@130.162.45.139:443,,tls1_2_answer,server_hello TLSv1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
tls.probes@130.162.45.139:443,,tls1_3,enabled
tls.probes@130.162.45.139:443,,tls1_3_answer,handshake TLSv1.3
tls.probes@130.162.45.139:443,,suites_insecure,refused
tls.probes@130.162.45.139:443,,suites_insecure_answer,alert handshake_failure
tls.probes@130.162.45.139:443,,suites_cbc,refused
tls.probes@130.162.45.139:443,,suites_cbc_answer,alert handshake_failure
tls.probes@130.162.45.139:443,,suites_static_rsa,refused
tls.probes@130.162.45.139:443,,suites_static_rsa_answer,alert handshake_failure
tls.protocols,,ssl3,disabled
tls.protocols,,tls1_0,disabled
tls.protocols,,tls1_1,disabled
tls.protocols,,tls1_2,enabled
tls.protocols,,tls1_3,enabled
tls.protocols,,suites_insecure,refused
tls.protocols,,suites_cbc,refused
tls.protocols,,suites_static_rsa,refused
tls.protocols,,forward_secrecy_all_suites,true
tls.ct,130.162.45.139,address,130.162.45.139
tls.ct,130.162.45.139,sct_count,2
tls.ct,130.162.45.139,log_ids,"d809553b944f7affc816196f944f85abb0f8fc5e8755260f15d12e72bb454b14, 6cfe501943a85ea916bc52d133e4dcc91ef1411c7d258420d173809e1818eb3a"
{"id":"WjP1e44d","domain":"netray.info","created_at":1793928800,"last_seen_at":1793994166,"predecessor_id":"DlNwSiJd","profile_version":5,"grade":"A","engine_version":"0.31.0","run":{"profile_version":5,"engine_version":"0.31.0","evidence_schema_version":1,"grade":"A","complete":true,"sections":[{"protocol":"dns","outcome":"measured","reason":null},{"protocol":"email","outcome":"measured","reason":null},{"protocol":"http","outcome":"measured","reason":null},{"protocol":"ip","outcome":"measured","reason":null},{"protocol":"tls","outcome":"measured","reason":null}],"checks":[{"id":"dns.caa","status":"pass","evidence":["dns.caa"]},{"id":"dns.cname_apex","status":"pass","evidence":["dns.cname","dns.soa"]},{"id":"dns.dnssec","status":"pass","evidence":["dns.dnskey","dns.ds","dns.nsec","dns.nsec3"]},{"id":"dns.dnskey_algorithm","status":"pass","evidence":["dns.dnskey"]},{"id":"dns.dnssec_rollover","status":"pass","evidence":["dns.dnskey","dns.ds"]},{"id":"dns.https_svcb","status":"pass","evidence":["dns.https","dns.svcb"]},{"id":"dns.ns","status":"pass","evidence":["dns.ns"]},{"id":"dns.ns_lame","status":"pass","evidence":["dns.ns"]},{"id":"dns.ns_delegation","status":"pass","evidence":["dns.ns"]},{"id":"dns.ttl","status":"pass","evidence":["dns.a","dns.aaaa","dns.mx","dns.caa","dns.ns","dns.https","dns.cname","dns.dnskey","dns.ds","dns.nsec","dns.nsec3","dns.soa","dns.svcb","dns.txt"]},{"id":"email.mx","status":"pass","findings":["only one MX record, but it resolves to 4 IP addresses"],"evidence":["email.mx","email.mx_addresses"]},{"id":"email.spf","status":"pass","evidence":["email.spf","email.mx_addresses"]},{"id":"email.dkim","status":"pass","evidence":["email.dkim"]},{"id":"email.dmarc","status":"pass","evidence":["email.dmarc"]},{"id":"email.mta_sts","status":"pass","evidence":["email.mta_sts","email.mta_sts_policy","email.mx"]},{"id":"email.tls_rpt","status":"pass","evidence":["email.tls_rpt","email.mx"]},{"id":"email.bimi","status":"pass","evidence":["email.bimi","email.mx"]},{"id":"email.dane","status":"not_applicable","findings":["No DANE TLSA records"]},{"id":"email.dnsbl","status":"pass","findings":["zen.spamhaus.org rejected the query (127.255.255.254); results from this zone are unreliable","zone bl.spamcop.net unreachable: timeout","dbl.spamhaus.org rejected the query (127.255.255.254); results from this zone are unreliable"],"evidence":["email.dnsbl","email.dnsbl_domain","email.mx"]},{"id":"email.fcrdns","status":"pass","evidence":["email.fcrdns","email.mx"]},{"id":"http.https_redirect","status":"pass","evidence":["http.port80","http.port80_probe"]},{"id":"http.hsts","status":"pass","evidence":["http.headers","http.hsts"]},{"id":"http.cors","status":"warn","findings":["Allows any origin (Access-Control-Allow-Origin: *)"],"evidence":["http.cors"]},{"id":"http.cookie_secure","status":"not_applicable","findings":["not applicable"],"evidence":["http.cookies"]},{"id":"http.csp","status":"warn","findings":["style-src contains 'unsafe-inline'"],"evidence":["http.headers","http.csp"]},{"id":"http.x_frame_options","status":"pass","evidence":["http.headers"]},{"id":"http.x_content_type_options","status":"pass","evidence":["http.headers"]},{"id":"http.referrer_policy","status":"pass","evidence":["http.headers"]},{"id":"http.permissions_policy","status":"pass","evidence":["http.headers"]},{"id":"http.coop","status":"pass","evidence":["http.headers","http.isolation"]},{"id":"http.deprecated_headers","status":"pass","evidence":["http.headers"]},{"id":"http.info_leakage","status":"pass","evidence":["http.headers"]},{"id":"http.caching","status":"pass","evidence":["http.headers","http.caching"]},{"id":"ip.reputation","status":"pass","evidence":["ip.addresses"]},{"id":"tls.tls_reachable","status":"pass","evidence":["tls.addresses"]},{"id":"tls.chain_trusted","status":"pass","evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.not_expired","status":"pass","evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.hostname_match","status":"pass","evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.chain_complete","status":"pass","evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.strong_signature","status":"pass","evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.key_strength","status":"pass","evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.expiry_window","status":"warn","findings":["130.162.45.139: leaf certificate expires in 30 days"],"evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.cert_lifetime","status":"pass","evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.san_quality","status":"pass","evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.aia_reachability","status":"not_applicable","findings":["Chain is complete; AIA URLs not required for verification"],"evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.tls_version","status":"pass","evidence":["tls.handshake@130.162.45.139:443"]},{"id":"tls.forward_secrecy","status":"pass","evidence":["tls.handshake@130.162.45.139:443"]},{"id":"tls.aead_cipher","status":"pass","evidence":["tls.handshake@130.162.45.139:443"]},{"id":"tls.legacy_versions","status":"pass","evidence":["tls.probes@130.162.45.139:443","tls.protocols"]},{"id":"tls.weak_suites","status":"pass","evidence":["tls.probes@130.162.45.139:443","tls.protocols"]},{"id":"tls.ct_logged","status":"pass","evidence":["tls.ct"]},{"id":"tls.ocsp_stapled","status":"not_applicable","findings":["CA does not provide OCSP (CRL only)"],"evidence":["tls.handshake@130.162.45.139:443"]},{"id":"tls.caa_compliant","status":"pass","evidence":["dns.caa"]},{"id":"tls.dane_valid","status":"not_applicable","findings":["DANE check skipped (requires DNSSEC)"],"evidence":["tls.chain@130.162.45.139:443"]},{"id":"tls.consistency","status":"not_applicable","findings":["fewer than 2 IPs inspected"],"evidence":["tls.chain@130.162.45.139:443","tls.handshake@130.162.45.139:443"]},{"id":"tls.alpn_consistency","status":"not_applicable","findings":["fewer than 2 IPs inspected"],"evidence":["tls.handshake@130.162.45.139:443"]},{"id":"tls.ech_advertised","status":"warn","findings":["130.162.45.139: ECH not advertised in HTTPS DNS record"],"evidence":["tls.handshake@130.162.45.139:443","dns.https"]}],"blocks":[{"id":"dns.a","title":"A","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"A"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"130.162.45.139"}}]}},{"id":"dns.aaaa","title":"AAAA","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"AAAA"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"2603:c020:8023:6d00:0:c658:5b78:6699"}}]}},{"id":"dns.mx","title":"MX","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"MX"},"ttl":{"t":"int","v":3600},"data":{"t":"text","v":"10 smtp.google.com."}}]}},{"id":"dns.caa","title":"CAA","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"CAA"},"ttl":{"t":"int","v":3600},"data":{"t":"text","v":"0 iodef \"mailto:hostmaster@netray.info\""}},{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"CAA"},"ttl":{"t":"int","v":3600},"data":{"t":"text","v":"0 issue \"letsencrypt.org\""}},{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"CAA"},"ttl":{"t":"int","v":3600},"data":{"t":"text","v":"0 issuewild \"letsencrypt.org\""}}]}},{"id":"dns.ns","title":"NS","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"NS"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"dns1.p04.nsone.net."}},{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"NS"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"dns2.p04.nsone.net."}},{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"NS"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"dns3.p04.nsone.net."}},{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"NS"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"dns4.p04.nsone.net."}}]}},{"id":"dns.https","title":"HTTPS","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"HTTPS"},"ttl":{"t":"int","v":3600},"data":{"t":"text","v":"1 . alpn=h2,h3"}}]}},{"id":"dns.cname","title":"CNAME","shape":{"kind":"records","data":[]}},{"id":"dns.dnskey","title":"DNSKEY","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"DNSKEY"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"256 3 13 3u9onSaqbxIlglXMHjh5Plcah8n2pXj0QuBVY/6YTdC6L/eUEYPDh57nOVJ8dd3fkPMrjt2Oij6J9EeLqyeuBw=="}},{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"DNSKEY"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"257 3 13 t+4DPP+MFZ0Cr7gAXiDYv6HTyXzq/O2ESVRLc/ysuh5xBXKIsjsj5baV1HzhBNo2F7mbsevsEo0/6UEL8+JBmA=="}}]}},{"id":"dns.ds","title":"DS","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"DS"},"ttl":{"t":"int","v":3600},"data":{"t":"text","v":"48553 13 2 A643677CFFCBC4094D04B3C2ECDBEFB5D1B4CE4B09ED633666B94823014427FD"}}]}},{"id":"dns.nsec","title":"NSEC","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"NSEC"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"\\000.netray.info. A NS SOA MX TXT AAAA RRSIG NSEC DNSKEY HTTPS CAA"}}]}},{"id":"dns.nsec3","title":"NSEC3","shape":{"kind":"records","data":[]}},{"id":"dns.soa","title":"SOA","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"SOA"},"ttl":{"t":"int","v":600},"data":{"t":"text","v":"dns1.p04.nsone.net. hostmaster.nsone.net. 1775664304 16384 2048 1209600 3600"}}]}},{"id":"dns.svcb","title":"SVCB","shape":{"kind":"records","data":[]}},{"id":"dns.txt","title":"TXT","shape":{"kind":"records","data":[{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"TXT"},"ttl":{"t":"int","v":3600},"data":{"t":"text","v":"\"google-site-verification=O5UwjQdLJGrAGkEvcA6nTkVARpBcjZhQcTPw3jlII04\""}},{"owner":{"t":"text","v":"netray.info."},"type":{"t":"text","v":"TXT"},"ttl":{"t":"int","v":3600},"data":{"t":"text","v":"\"v=spf1 include:_spf.google.com ~all\""}}]}},{"id":"email.mx","title":"MX","shape":{"kind":"table","data":{"key":"host","columns":["host","preference","cname"],"rows":[[{"t":"text","v":"smtp.google.com"},{"t":"int","v":10},{"t":"text","v":""}]]}}},{"id":"email.mx_addresses","title":"MX addresses","shape":{"kind":"table","data":{"key":"address","columns":["address","host"],"rows":[[{"t":"addr","v":"142.251.127.27"},{"t":"text","v":"smtp.google.com"}],[{"t":"addr","v":"142.251.127.26"},{"t":"text","v":"smtp.google.com"}],[{"t":"addr","v":"2a00:1450:4001:c21::1a"},{"t":"text","v":"smtp.google.com"}],[{"t":"addr","v":"2a00:1450:4001:c21::1b"},{"t":"text","v":"smtp.google.com"}]]}}},{"id":"email.spf","title":"SPF","shape":{"kind":"fields","data":[["record",{"t":"text","v":"v=spf1 include:_spf.google.com ~all"}],["authorized_prefixes",{"t":"text","v":"74.125.0.0/16"}],["authorized_prefixes",{"t":"text","v":"209.85.128.0/17"}],["authorized_prefixes",{"t":"text","v":"2001:4860:4864::/56"}],["authorized_prefixes",{"t":"text","v":"2404:6800:4864::/56"}],["authorized_prefixes",{"t":"text","v":"2607:f8b0:4864::/56"}],["authorized_prefixes",{"t":"text","v":"2800:3f0:4864::/56"}],["authorized_prefixes",{"t":"text","v":"2a00:1450:4864::/56"}],["authorized_prefixes",{"t":"text","v":"2c0f:fb50:4864::/56"}],["lookup_count",{"t":"int","v":1}],["void_lookups",{"t":"int","v":0}]]}},{"id":"email.dmarc","title":"DMARC","shape":{"kind":"fields","data":[["record",{"t":"text","v":"v=DMARC1; p=reject; rua=mailto:hostmaster@netray.info; ruf=mailto:hostmaster@netray.info"}],["p",{"t":"text","v":"reject"}],["rua",{"t":"text","v":"mailto:hostmaster@netray.info"}],["ruf",{"t":"text","v":"mailto:hostmaster@netray.info"}]]}},{"id":"email.mta_sts","title":"MTA-STS","shape":{"kind":"fields","data":[["record",{"t":"text","v":"v=STSv1; id=20260408000000"}],["id",{"t":"text","v":"20260408000000"}],["policy_status",{"t":"int","v":200}],["content_type",{"t":"text","v":"text/plain; charset=utf-8"}]]}},{"id":"email.mta_sts_policy","title":"MTA-STS policy","shape":{"kind":"text","data":"version: STSv1\nmode: enforce\nmx: smtp.google.com\nmax_age: 86400\n"}},{"id":"email.tls_rpt","title":"TLS-RPT","shape":{"kind":"fields","data":[["record",{"t":"text","v":"v=TLSRPTv1; rua=mailto:hostmaster@netray.info"}],["rua",{"t":"text","v":"mailto:hostmaster@netray.info"}]]}},{"id":"email.bimi","title":"BIMI","shape":{"kind":"fields","data":[["record",{"t":"text","v":"v=BIMI1; l=https://netray.info/bimi-logo.svg"}],["l",{"t":"text","v":"https://netray.info/bimi-logo.svg"}],["logo_fetch",{"t":"text","v":"ok"}]]}},{"id":"email.dnssec","title":"DNSSEC","shape":{"kind":"fields","data":[["dnskey_present",{"t":"bool","v":true}]]}},{"id":"email.dkim","title":"DKIM keys","shape":{"kind":"table","data":{"key":"key","columns":["key","selector","state","key_type","bits"],"rows":[[{"t":"text","v":"google#1"},{"t":"text","v":"google"},{"t":"text","v":"ok"},{"t":"text","v":"rsa"},{"t":"text","v":"2048"}]]}}},{"id":"email.dane","title":"DANE TLSA","shape":{"kind":"table","data":{"key":"record","columns":["record","host","usage","selector","matching_type"],"rows":[]}}},{"id":"email.dnsbl","title":"DNSBL","shape":{"kind":"table","data":{"key":"query","columns":["query","zone","target","answered","answer"],"rows":[[{"t":"text","v":"142.251.127.27@zen.spamhaus.org"},{"t":"text","v":"zen.spamhaus.org"},{"t":"text","v":"142.251.127.27"},{"t":"bool","v":false},{"t":"text","v":"127.255.255.254"}],[{"t":"text","v":"142.251.127.26@zen.spamhaus.org"},{"t":"text","v":"zen.spamhaus.org"},{"t":"text","v":"142.251.127.26"},{"t":"bool","v":false},{"t":"text","v":"127.255.255.254"}],[{"t":"text","v":"142.251.127.27@b.barracudacentral.org"},{"t":"text","v":"b.barracudacentral.org"},{"t":"text","v":"142.251.127.27"},{"t":"bool","v":true},{"t":"text","v":""}],[{"t":"text","v":"142.251.127.26@b.barracudacentral.org"},{"t":"text","v":"b.barracudacentral.org"},{"t":"text","v":"142.251.127.26"},{"t":"bool","v":true},{"t":"text","v":""}],[{"t":"text","v":"142.251.127.27@bl.spamcop.net"},{"t":"text","v":"bl.spamcop.net"},{"t":"text","v":"142.251.127.27"},{"t":"bool","v":false},{"t":"text","v":""}],[{"t":"text","v":"142.251.127.26@bl.spamcop.net"},{"t":"text","v":"bl.spamcop.net"},{"t":"text","v":"142.251.127.26"},{"t":"bool","v":false},{"t":"text","v":""}]]}}},{"id":"email.dnsbl_domain","title":"DNSBL (domain)","shape":{"kind":"table","data":{"key":"query","columns":["query","zone","target","answered","answer"],"rows":[[{"t":"text","v":"netray.info@dbl.spamhaus.org"},{"t":"text","v":"dbl.spamhaus.org"},{"t":"text","v":"netray.info"},{"t":"bool","v":false},{"t":"text","v":"127.255.255.254"}]]}}},{"id":"email.fcrdns","title":"FCrDNS","shape":{"kind":"table","data":{"key":"address","columns":["address","ptr","confirmed"],"rows":[[{"t":"addr","v":"142.251.127.27"},{"t":"text","v":"lcfrai-in-f27.1e100.net."},{"t":"bool","v":true}],[{"t":"addr","v":"142.251.127.26"},{"t":"text","v":"lcfrai-in-f26.1e100.net."},{"t":"bool","v":true}],[{"t":"addr","v":"2a00:1450:4001:c21::1a"},{"t":"text","v":"lcfrai-in-f26.1e100.net."},{"t":"bool","v":true}],[{"t":"addr","v":"2a00:1450:4001:c21::1b"},{"t":"text","v":"lcfrai-in-f27.1e100.net."},{"t":"bool","v":true}]]}}},{"id":"email.summary","title":"Summary","shape":{"kind":"fields","data":[["grade",{"t":"text","v":"A"}]]}},{"id":"http.redirects","title":"Redirects","shape":{"kind":"chain","data":[]}},{"id":"http.port80","title":"Port 80 redirects","shape":{"kind":"chain","data":[[["url",{"t":"text","v":"http://netray.info/"}],["status",{"t":"int","v":301}],["location",{"t":"text","v":"https://netray.info/"}]]]}},{"id":"http.port80_probe","title":"Port 80 probe","shape":{"kind":"fields","data":[["url",{"t":"text","v":"http://netray.info/"}],["status_code",{"t":"int","v":200}],["redirects_to_https",{"t":"bool","v":true}]]}},{"id":"http.headers","title":"Response headers","shape":{"kind":"table","data":{"key":"name","columns":["name","value"],"rows":[[{"t":"text","v":"access-control-allow-origin"},{"t":"text","v":"*"}],[{"t":"text","v":"cache-control"},{"t":"text","v":"no-cache"}],[{"t":"text","v":"content-encoding"},{"t":"text","v":"gzip"}],[{"t":"text","v":"content-security-policy"},{"t":"text","v":"default-src 'self'; script-src 'self' 'sha256-FBZufGszYN+NT1Qfwwcpw8g3UwIyffzP+zXtvQP53zc='; style-src 'self' 'unsafe-inline'; font-src 'self'; img-src 'self' data:; connect-src 'self' https://stats.uptimerobot.com; frame-ancestors 'none'; base-uri 'self'; object-src 'none'; form-action 'self' https://netray.info https://*.netray.info"}],[{"t":"text","v":"content-type"},{"t":"text","v":"text/html; charset=utf-8"}],[{"t":"text","v":"cross-origin-opener-policy"},{"t":"text","v":"same-origin"}],[{"t":"text","v":"cross-origin-resource-policy"},{"t":"text","v":"cross-origin"}],[{"t":"text","v":"date"},{"t":"text","v":"Fri, 06 Nov 2026 01:33:18 GMT"}],[{"t":"text","v":"permissions-policy"},{"t":"text","v":"camera=(), microphone=(), geolocation=(), payment=()"}],[{"t":"text","v":"referrer-policy"},{"t":"text","v":"strict-origin-when-cross-origin"}],[{"t":"text","v":"strict-transport-security"},{"t":"text","v":"max-age=31536000; includeSubDomains; preload"}],[{"t":"text","v":"vary"},{"t":"text","v":"accept-encoding, origin, access-control-request-method, access-control-request-headers"}],[{"t":"text","v":"x-content-type-options"},{"t":"text","v":"nosniff"}],[{"t":"text","v":"x-frame-options"},{"t":"text","v":"DENY"}],[{"t":"text","v":"x-request-id"},{"t":"text","v":"01a1ae7d-1fa5-727e-ab39-1ba31b0ef202"}]]}}},{"id":"http.csp","title":"Content Security Policy","shape":{"kind":"tree","data":{"fields":[["report_only",{"t":"bool","v":false}],["issue_count",{"t":"int","v":1}]],"children":[{"fields":[["directive",{"t":"text","v":"default-src"}],["source",{"t":"text","v":"'self'"}]],"children":[]},{"fields":[["directive",{"t":"text","v":"script-src"}],["source",{"t":"text","v":"'self'"}],["source",{"t":"text","v":"'sha256-FBZufGszYN+NT1Qfwwcpw8g3UwIyffzP+zXtvQP53zc='"}]],"children":[]},{"fields":[["directive",{"t":"text","v":"style-src"}],["source",{"t":"text","v":"'self'"}],["source",{"t":"text","v":"'unsafe-inline'"}],["issue",{"t":"text","v":"style-src contains 'unsafe-inline'"}]],"children":[]},{"fields":[["directive",{"t":"text","v":"font-src"}],["source",{"t":"text","v":"'self'"}]],"children":[]},{"fields":[["directive",{"t":"text","v":"img-src"}],["source",{"t":"text","v":"'self'"}],["source",{"t":"text","v":"data:"}]],"children":[]},{"fields":[["directive",{"t":"text","v":"connect-src"}],["source",{"t":"text","v":"'self'"}],["source",{"t":"text","v":"https://stats.uptimerobot.com"}]],"children":[]},{"fields":[["directive",{"t":"text","v":"frame-ancestors"}],["source",{"t":"text","v":"'none'"}]],"children":[]},{"fields":[["directive",{"t":"text","v":"base-uri"}],["source",{"t":"text","v":"'self'"}]],"children":[]},{"fields":[["directive",{"t":"text","v":"object-src"}],["source",{"t":"text","v":"'none'"}]],"children":[]},{"fields":[["directive",{"t":"text","v":"form-action"}],["source",{"t":"text","v":"'self'"}],["source",{"t":"text","v":"https://netray.info"}],["source",{"t":"text","v":"https://*.netray.info"}]],"children":[]}]}}},{"id":"http.hsts","title":"HSTS","shape":{"kind":"fields","data":[["max_age",{"t":"int","v":31536000}],["include_subdomains",{"t":"bool","v":true}],["preload",{"t":"bool","v":true}]]}},{"id":"http.caching","title":"Caching","shape":{"kind":"fields","data":[["directive",{"t":"text","v":"no-cache"}],["vary",{"t":"text","v":"accept-encoding"}],["vary",{"t":"text","v":"origin"}],["vary",{"t":"text","v":"access-control-request-method"}],["vary",{"t":"text","v":"access-control-request-headers"}]]}},{"id":"http.isolation","title":"Cross-origin isolation","shape":{"kind":"fields","data":[["coop",{"t":"text","v":"same-origin"}],["corp",{"t":"text","v":"cross-origin"}],["missing",{"t":"text","v":"cross-origin-embedder-policy"}]]}},{"id":"http.server","title":"Server","shape":{"kind":"fields","data":[["final_url",{"t":"text","v":"https://netray.info/"}],["status_code",{"t":"int","v":200}],["http_version",{"t":"text","v":"h2"}],["inspection_ms",{"t":"duration","v":444}],["address",{"t":"addr","v":"130.162.45.139"}],["org",{"t":"text","v":"Oracle Corporation"}],["network_type",{"t":"text","v":"cloud"}]]}},{"id":"http.cors","title":"CORS","shape":{"kind":"fields","data":[["allows_any_origin",{"t":"bool","v":true}],["reflects_origin",{"t":"bool","v":false}],["allows_credentials",{"t":"bool","v":false}],["allow_origin",{"t":"text","v":"*"}]]}},{"id":"http.cookies","title":"Cookies","shape":{"kind":"table","data":{"key":"cookie","columns":["cookie","name","secure","http_only","same_site"],"rows":[]}}},{"id":"ip.addresses","title":"Addresses","shape":{"kind":"table","data":{"key":"address","columns":["address","asn","org","prefix","network_type","country","city","spamhaus","c2","tor","vpn"],"rows":[[{"t":"addr","v":"130.162.45.139"},{"t":"text","v":"AS31898"},{"t":"text","v":"Oracle Corporation"},{"t":"text","v":"130.162.32.0/19"},{"t":"text","v":"cloud"},{"t":"text","v":"Germany"},{"t":"text","v":"Frankfurt am Main"},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false}],[{"t":"addr","v":"2603:c020:8023:6d00:0:c658:5b78:6699"},{"t":"text","v":"AS31898"},{"t":"text","v":"Oracle Corporation"},{"t":"text","v":"2603:c020:8000::/35"},{"t":"text","v":"datacenter"},{"t":"text","v":"Germany"},{"t":"text","v":"Frankfurt am Main"},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false},{"t":"bool","v":false}]]}}},{"id":"tls.addresses","title":"Addresses","shape":{"kind":"table","data":{"key":"address","columns":["address","port","outcome","message"],"rows":[[{"t":"addr","v":"130.162.45.139"},{"t":"int","v":443},{"t":"text","v":"ok"},{"t":"text","v":""}],[{"t":"addr","v":"2603:c020:8023:6d00:0:c658:5b78:6699"},{"t":"int","v":443},{"t":"text","v":"NOT_TESTED_FROM_HERE"},{"t":"text","v":"Network unreachable (os error 101)"}]]}}},{"id":"tls.chain@130.162.45.139:443","title":"Certificate chain 130.162.45.139:443","shape":{"kind":"chain","data":[[["position",{"t":"text","v":"leaf"}],["subject",{"t":"text","v":"CN=netray.info"}],["issuer",{"t":"text","v":"C=US, O=Let's Encrypt, CN=YR2"}],["sans",{"t":"text","v":"netray.info"}],["not_before",{"t":"time","v":"2026-09-07T21:47:50Z"}],["not_after",{"t":"time","v":"2026-12-06T21:47:49Z"}],["days_remaining",{"t":"int","v":30}],["key",{"t":"text","v":"RSA 4096"}],["signature_algorithm",{"t":"text","v":"sha256WithRSAEncryption"}],["fingerprint_sha256",{"t":"text","v":"01:85:DC:66:B0:87:75:B9:57:8A:6F:8A:6B:F9:42:40:69:38:BA:82:12:C6:8A:84:39:29:EE:90:85:90:BD:76"}],["fingerprint_sha1",{"t":"text","v":"6C:BB:59:A5:4D:EA:27:01:32:CA:FB:3B:84:36:7C:0F:AF:02:CB:88"}],["serial",{"t":"text","v":"05:A4:2F:BC:F3:FE:DD:E3:32:EE:77:E9:91:67:6B:41:61:E6"}],["policy",{"t":"text","v":"DV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ca_issuers_url",{"t":"text","v":"http://yr2.i.lencr.org/"}]],[["position",{"t":"text","v":"intermediate"}],["subject",{"t":"text","v":"C=US, O=Let's Encrypt, CN=YR2"}],["issuer",{"t":"text","v":"C=US, O=ISRG, CN=Root YR"}],["not_before",{"t":"time","v":"2025-09-03T00:00:00Z"}],["not_after",{"t":"time","v":"2028-09-02T23:59:59Z"}],["days_remaining",{"t":"int","v":666}],["key",{"t":"text","v":"RSA 2048"}],["signature_algorithm",{"t":"text","v":"sha256WithRSAEncryption"}],["fingerprint_sha256",{"t":"text","v":"23:8B:85:A0:09:9C:65:B9:70:47:7D:57:24:F1:A1:D4:75:CE:50:58:CF:FE:4E:FA:87:33:89:9B:DB:86:3C:47"}],["fingerprint_sha1",{"t":"text","v":"2D:74:D6:DF:D9:6E:EA:55:AD:7B:AA:FA:0D:3C:65:52:B2:DA:DC:37"}],["serial",{"t":"text","v":"4E:BD:24:94:7E:24:D3:94:80:2D:84:A5:2F:D5:B3:19"}],["policy",{"t":"text","v":"OV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ca_issuers_url",{"t":"text","v":"http://yr.i.lencr.org/"}]],[["position",{"t":"text","v":"intermediate"}],["subject",{"t":"text","v":"C=US, O=ISRG, CN=Root YR"}],["issuer",{"t":"text","v":"C=US, O=Internet Security Research Group, CN=ISRG Root X1"}],["not_before",{"t":"time","v":"2026-05-13T00:00:00Z"}],["not_after",{"t":"time","v":"2032-09-02T23:59:59Z"}],["days_remaining",{"t":"int","v":2127}],["key",{"t":"text","v":"RSA 4096"}],["signature_algorithm",{"t":"text","v":"sha256WithRSAEncryption"}],["fingerprint_sha256",{"t":"text","v":"07:26:39:D0:B1:40:D5:BF:FA:E1:6A:D9:C3:F6:CC:60:86:04:06:21:F5:1E:E6:1A:6D:46:A8:91:5C:07:CF:76"}],["fingerprint_sha1",{"t":"text","v":"AB:9D:02:63:24:4D:D0:32:6E:B6:70:15:70:5A:66:7E:79:CF:E9:98"}],["serial",{"t":"text","v":"00:F2:4B:6D:17:F9:D9:AD:7C:B1:C9:FE:A7:87:82:69:9F"}],["policy",{"t":"text","v":"OV"}],["self_signed",{"t":"bool","v":false}],["expired",{"t":"bool","v":false}],["ca_issuers_url",{"t":"text","v":"http://x1.i.lencr.org/"}]]]}},{"id":"tls.handshake@130.162.45.139:443","title":"Handshake 130.162.45.139:443","shape":{"kind":"fields","data":[["version",{"t":"text","v":"TLSv1.3"}],["cipher_suite",{"t":"text","v":"TLS13_AES_128_GCM_SHA256"}],["key_exchange_group",{"t":"text","v":"X25519"}],["sni",{"t":"text","v":"netray.info"}],["ocsp_stapled",{"t":"bool","v":false}],["ech",{"t":"bool","v":false}],["handshake_ms",{"t":"duration","v":127}]]}},{"id":"tls.probes@130.162.45.139:443","title":"Protocol probes 130.162.45.139:443","shape":{"kind":"fields","data":[["ssl3",{"t":"text","v":"disabled"}],["ssl3_answer",{"t":"text","v":"alert protocol_version"}],["tls1_0",{"t":"text","v":"disabled"}],["tls1_0_answer",{"t":"text","v":"alert protocol_version"}],["tls1_1",{"t":"text","v":"disabled"}],["tls1_1_answer",{"t":"text","v":"alert protocol_version"}],["tls1_2",{"t":"text","v":"enabled"}],["tls1_2_answer",{"t":"text","v":"server_hello TLSv1.2 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256"}],["tls1_3",{"t":"text","v":"enabled"}],["tls1_3_answer",{"t":"text","v":"handshake TLSv1.3"}],["suites_insecure",{"t":"text","v":"refused"}],["suites_insecure_answer",{"t":"text","v":"alert handshake_failure"}],["suites_cbc",{"t":"text","v":"refused"}],["suites_cbc_answer",{"t":"text","v":"alert handshake_failure"}],["suites_static_rsa",{"t":"text","v":"refused"}],["suites_static_rsa_answer",{"t":"text","v":"alert handshake_failure"}]]}},{"id":"tls.protocols","title":"Protocols and features","shape":{"kind":"fields","data":[["ssl3",{"t":"text","v":"disabled"}],["tls1_0",{"t":"text","v":"disabled"}],["tls1_1",{"t":"text","v":"disabled"}],["tls1_2",{"t":"text","v":"enabled"}],["tls1_3",{"t":"text","v":"enabled"}],["suites_insecure",{"t":"text","v":"refused"}],["suites_cbc",{"t":"text","v":"refused"}],["suites_static_rsa",{"t":"text","v":"refused"}],["forward_secrecy_all_suites",{"t":"bool","v":true}]]}},{"id":"tls.ct","title":"Certificate Transparency","shape":{"kind":"table","data":{"key":"address","columns":["address","sct_count","log_ids"],"rows":[[{"t":"addr","v":"130.162.45.139"},{"t":"int","v":2},{"t":"text","v":"d809553b944f7affc816196f944f85abb0f8fc5e8755260f15d12e72bb454b14, 6cfe501943a85ea916bc52d133e4dcc91ef1411c7d258420d173809e1818eb3a"}]]}}}]}}
Key records · 11 record types answered
| Type | Data | TTL |
|---|---|---|
| A | 130.162.45.139 | 600 |
| AAAA | 2603:c020:8023:6d00:0:c658:5b78:6699 | 600 |
| NS | dns1.p04.nsone.net. | 600 |
| NS | dns2.p04.nsone.net. | 600 |
| NS | dns3.p04.nsone.net. | 600 |
| NS | dns4.p04.nsone.net. | 600 |
| CAA | 0 iodef "mailto:hostmaster@netray.info" | 3600 |
| CAA | 0 issue "letsencrypt.org" | 3600 |
| CAA | 0 issuewild "letsencrypt.org" | 3600 |
| DS | 48553 13 2 A643677CFFCBC4094D04B3C2ECDBEFB5D1B4CE4B09ED633666B9… | 3600 |
← swipe the table
Feeds lines: DNS·01 DNSSEC · DNS·03 Rollover · DNS·04 CAA · DNS·05 NS · DNS·06 Lame NS · DNS·07 Deleg · DNS·10 TTL · TLS·29 CAA ok
Certificate chain · port 443 · 1 address, consistent
| # | Subject | Issuer | Key | Not after |
|---|---|---|---|---|
| 0 | netray.info | YR2 | RSA 4096 | 2026-12-06 |
| 1 | YR2 | Root YR | RSA 2048 | 2028-09-02 |
| 2 | Root YR | ISRG Root X1 | RSA 4096 | 2032-09-02 |
← swipe the table
Feeds lines: TLS·12 Trust · TLS·13 Expired · TLS·14 Hostname · TLS·15 Chain · TLS·16 Sig · TLS·17 Key · TLS·18 Expiry · TLS·19 Lifetime · TLS·20 SAN · TLS·21 AIA · TLS·30 DANE · TLS·31 Consist
Response · 200 · h2 · https://netray.info/
| Header | Value |
|---|---|
| strict-transport-security | max-age=31536000; includeSubDomains; preload |
| content-security-policy | default-src 'self'; script-src 'self' 'sha256-FBZufGszYN+NT1Qfw… |
| x-frame-options | DENY |
| x-content-type-options | nosniff |
| referrer-policy | strict-origin-when-cross-origin |
| permissions-policy | camera=(), microphone=(), geolocation=(), payment=() |
← swipe the table
Feeds lines: HTTP·35 HSTS · HTTP·38 CSP · HTTP·39 XFO · HTTP·40 XCTO · HTTP·41 Referrer · HTTP·42 Perms · HTTP·43 COOP · HTTP·44 Legacy · HTTP·45 Leakage · HTTP·46 Caching
Mail records · 1 MX host
| Record | Value |
|---|---|
| MX | 10 smtp.google.com |
| SPF | v=spf1 include:_spf.google.com ~all |
| DMARC | v=DMARC1; p=reject; rua=mailto:hostmaster@netray.info; ruf=mail… |
| MTA-STS | v=STSv1; id=20260408000000 |
| TLS-RPT | v=TLSRPTv1; rua=mailto:hostmaster@netray.info |
| DKIM | google: ok, rsa 2048 |
| BIMI | v=BIMI1; l=https://netray.info/bimi-logo.svg |
← swipe the table
Feeds lines: MAIL·47 MX · MAIL·48 SPF · MAIL·49 DKIM · MAIL·50 DMARC · MAIL·51 MTA-STS · MAIL·52 TLS-RPT · MAIL·53 BIMI · MAIL·55 DNSBL · MAIL·56 FCrDNS
Addresses · 2 addresses
| Address | ASN | Org | Country | Network | Listed |
|---|---|---|---|---|---|
| 130.162.45.139 | AS31898 | Oracle Corporation | Germany | cloud | none |
| 2603:c020:8023:6d00:0:c658:5b78:6699 | AS31898 | Oracle Corporation | Germany | datacenter | none |
← swipe the table
This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.