Open
Cached
·
just now
77/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=cobalt.shop
Issuer
C=US, O=Google Trust Services, CN=WR3
Valid From
July 07, 2026
Valid Until
October 05, 2026
42 days
Public Key
RSA
2048 bit
Adequate
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
3E:D4:13:30:FE:F1:5E:03:04:6F:3C:31:40:4F:5F:50:4F:94:90:65:81:CC:C0:B7:98:D3:F8:3F:D9:EF:45:F3
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Present
max-age=31556926
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Increase HSTS max-age to at least 1 year and add includeSubDomains
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
100 domains
petmacia.com
aceit.com.ng
portal.aerobinder.com
www.ai-for-all.in
www.alleppeybackwatertours.net
ametrics.mx
andredtran.me
aradone.me
bee-liber.com
blasig.dev
staging.camai.ai
www.coastalboilers.net
cobalt.shop
ctrlv.design
damefestival.es
def-cps.in
www.dentnationnaples.com
downshimau.com
dreduardogomez.com
easingapps.com
digiphy.easysignage.app
enunicorn.com
auth.life-dev.everbine.com
fenerbahcevizyon35.com
account.fitnesscare.app
auth.flexr.in
garnetservices.com.au
grandfunded.com
lucki.happyapp.studio
dev.hwdevelopment.ca
www.imelvilentcia.com
innobizsac.pe
jauntkit.com
jkcool.fi
www.johnsoniwa.com
jsinternational.com.gt
nasa.ksug.ai
app.kyoseil-am.com
leaderfox.app
www.leaderfox.app
lexora1.com
demo-apply.lightningreach.org
prevlab360.liidutpl.ec
magicgrocer.com
www.majidsas.com
www.manyhf.com
dev.masungi360.org
delivery.library.mfu.app
www.mobigraph.co
moonbridge.network
auth.mustauto.com.br
narniaescapes.com
nganaqta.my.id
www.northedgelabs.com
novegroupint.com
ourloveliveson.com
kiosk-boyd.patrontek.com
pejsky.sk
perumalcraneservice.com
planetradio.online
www.playhearts-online.com
www.pokerpeeps.com
www.pravicatech.com
app.prod.psychofacile.com
rainbowgirlspucollege.com
rainbowinnovativeacademy.com
raunyexports.com
realitymind.org
realvia.mx
boda-maintenance.rean.in
dashboard.recidiviz.org
reevrs.com
refer.rewardstamp.app
saicabservice.in
agenda.sastrala.id
shipspotter.org
sinhaventures.in
www.skyalive.co
slater-dev.co.za
www.smlamod.com
www.smoothoperator.app
snap-stock.media
sodoservices.com
spin360.io
opening.starthaven.com
www.themcalc.ca
hospitalmoments.tlcforkids.org.au
tokenweather.com
tristantam.dev
truckcheck.app
tskr.space
poliba.udubari.org
vaporamx.com
development.vendpark.io
engage.urbanaparks.voyagernetz.us
staging.www.x200labs.com
publisher.yakoffice.app
yername.com
yls.hair
zajfitfight.pl
Other domains in certificate