Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=colane.com
Issuer
C=US, O=Let's Encrypt, CN=YE1
Valid From
September 27, 2026
Valid Until
December 26, 2026
59 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
8F:4E:6A:D9:4F:07:E3:51:43:C7:E7:08:BE:CC:BB:ED:83:24:6A:DC:D6:E1:BA:F7:8F:DF:3F:C1:54:63:C9:9C
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
89 domains
playkabet.info
*.playkabet.info
*.7m5fxg.bedroomlink.pics
*.account.bedroomlink.pics
*.adm.bedroomlink.pics
*.admin.bedroomlink.pics
*.app.bedroomlink.pics
*.backend.bedroomlink.pics
bedroomlink.pics
*.bedroomlink.pics
*.beta.bedroomlink.pics
*.chat.bedroomlink.pics
*.dashboard.bedroomlink.pics
*.my.bedroomlink.pics
*.rustore.bedroomlink.pics
*.shop.bedroomlink.pics
*.staging.bedroomlink.pics
bs6v1cc.top
*.bs6v1cc.top
casibomturkey.bet
*.casibomturkey.bet
*.poc.casibomturkey.bet
colane.com
*.colane.com
*.mex.colane.com
dinmani.com
*.dinmani.com
*.random.dinmani.com
*.www.dinmani.com
*.dwqbn.exadult.com
exadult.com
*.exadult.com
*.iayzr.exadult.com
*.ozbpa.exadult.com
*.ponfz.exadult.com
*.qultg.exadult.com
*.web.exadult.com
*.wr6nb.exadult.com
*.yidp0.exadult.com
*.dev.fondox.net
fondox.net
*.fondox.net
*.webmail.fondox.net
*.ww7.fondox.net
forexa.ca
*.forexa.ca
funfantasyfootball.com
*.funfantasyfootball.com
*.admin.inima.it
*.backend.inima.it
*.demo.inima.it
*.forum.inima.it
*.hostmaster.inima.it
inima.it
*.inima.it
*.intel.inima.it
*.italia.inima.it
*.server.inima.it
*.superset.inima.it
*.visual.inima.it
*.api.lipedemanetworkcanada.com
*.demo.lipedemanetworkcanada.com
lipedemanetworkcanada.com
*.lipedemanetworkcanada.com
*.sitemap.lipedemanetworkcanada.com
*.webdisk.lipedemanetworkcanada.com
*.admin.luvshauna.com
*.api.luvshauna.com
*.apps.luvshauna.com
*.cdn.luvshauna.com
*.dev.luvshauna.com
luvshauna.com
*.luvshauna.com
*.panel.luvshauna.com
*.pay.luvshauna.com
*.testing.luvshauna.com
*.admin.nztyy901125.top
nztyy901125.top
*.nztyy901125.top
playkabet.click
*.playkabet.click
*.api.printymerch.com
printymerch.com
*.printymerch.com
sdaproviders.au
ww38.sdaproviders.au
www.sdaproviders.au
zknh630.org
*.zknh630.org
Other domains in certificate