Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=www.collosus.ai
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 29, 2026
Valid Until
October 27, 2026
67 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
01:14:82:4F:B8:7A:1E:F2:88:A2:8E:4C:EC:90:B5:3E:54:BD:27:B7:7B:D6:7C:07:56:E6:59:54:62:57:5C:B0
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
hrvt.dev
115room.com
4meta.dev
a-ej.com
www.acodingcompany.com
agingclock.tech
profile.ak7studios.store
auth.alinaspanish.com
ccca.almacreation.co.jp
nsgi.almeraim.com
taos-ski-valley.app.alpinemedia.com
altodetorremar.com
andosando.xyz
villanova.appbraincenter.com
speakie.areser.net
astralsoftware.co
asyncronix.in
betsolar.io
biajanteads.online
www.bluedotecommerce.org
blumesolutions.com.br
auth.bonnapp.nl
promo.boutiquedoacai.com
brooks-patton.com
calculadora.pe
2048.calvinln.com
www.cinemaccademia.it
www.collosus.ai
dev.webpay.api.creamly.by
dl.dacopa.com
daddyandkitty.com
www.datstrategy.buzz
blog.eddern.no
www.eyd.dev
avalon.fmsys360.us
tester.fridaplatform.online
www.getchoreless.com
gfc.io
goldoptim.com
www.guyennecapital.com
www.healthrevolt.org
homecodestudio.com
launchpad-dev.hotwax.io
mobile.inft.co
www.app.iprofe.com.br
www.kaibaier.de
www.kajack.page
kalpakrushi.com
keralagroup.org
dev.leyline.im
influencer-beta.lifo.ai
luckyclaww.com
marriage-angelic.com
materialconnect.co.za
www.mercadoimoveis.net.br
mesrendements.com
www.mflearning.in
miboda.app
app-homolog.milkmanager.com.br
millionshirtmom.org
modhumotilibrary.com
mosil.studio
musicq.club
nutifix.ee
offensiveshell.com
owenpropertyholdings.co.uk
ipos-app.oz-tms.com
auth.pay4myfeedback.app
piqross.com
redirect302.moonscale.net
reedit.au
reservesmanager.com
richardmezadri.com.br
ross-sf.com
www.rsvp.party
scown.nz
sdenterprises01.in
sempritwoodworks.com
coordination.dev.service.work
showrypeng.com
stmble.co
www.studentslearninghub.co.uk
vania-master-frame.talentlytica.com
tappi.live
thecontractgenerator.com
www.thedriftingcru.com
thegreatamericanvirtualbirthdayquilt.com
www.tokiwaya.dev
reservas.turistorexp.com
www.twentyninek.org
tzager.com
www.uoarocketry.org
www.vaultactivation.com
vcongroups.com
vector3.com.mx
www.viaventuras.com
vigorwitaminy.com.pl
yashnilsaha.me
zamchema.org
www.zeyadnaguib.com
Other domains in certificate