SSL Report:
bol.garage.click
(34.77.178.136)
Assessed on: Wed, 19 Nov 2025 17:33:11 UTC
| Clear cache
Summary
0
20
40
60
80
100
Certificate
Protocol Support
Key Exchange
Cipher Strength
Visit our documentation page
for more information, configuration guides, and books. Known issues are documented
here.
Server sent invalid/disabled HSTS policy. See below for further information. MORE INFO »
This server supports TLS 1.3. MORE INFO »
DNS Certification Authority Authorization (CAA) Policy found for this domain.
MORE INFO »
Certificate #1: RSA 2048 bits (SHA256withRSA)
|
|
Configuration
| Protocols | |
| TLS 1.3 | Yes |
| TLS 1.2 | Yes |
| TLS 1.1 | No |
| TLS 1.0 | No |
| SSL 3 | No |
| SSL 2 | No |
| Cipher Suites | ||
|
# TLS 1.3 (suites in server-preferred order)
|
||
TLS_AES_256_GCM_SHA384 (0x1302)
ECDH x25519 (eq. 3072 bits RSA) FS
|
256 | |
TLS_CHACHA20_POLY1305_SHA256 (0x1303)
ECDH x25519 (eq. 3072 bits RSA) FS
|
256 | |
TLS_AES_128_GCM_SHA256 (0x1301)
ECDH x25519 (eq. 3072 bits RSA) FS
|
128 | |
|
# TLS 1.2 (suites in server-preferred order)
|
||
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030)
ECDH x25519 (eq. 3072 bits RSA) FS
|
256 | |
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x9f)
DH 2048 bits FS
|
256 | |
TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8)
ECDH x25519 (eq. 3072 bits RSA) FS
|
256 | |
TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xccaa)
DH 2048 bits FS
|
256 | |
TLS_DHE_RSA_WITH_AES_256_CCM_8 (0xc0a3)
DH 2048 bits FS
|
256 | |
TLS_DHE_RSA_WITH_AES_256_CCM (0xc09f)
DH 2048 bits FS
|
256 | |
TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384 (0xc061)
ECDH x25519 (eq. 3072 bits RSA) FS
|
256 | |
TLS_DHE_RSA_WITH_ARIA_256_GCM_SHA384 (0xc053)
DH 2048 bits FS
|
256 | |
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f)
ECDH x25519 (eq. 3072 bits RSA) FS
|
128 | |
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x9e)
DH 2048 bits FS
|
128 | |
TLS_DHE_RSA_WITH_AES_128_CCM_8 (0xc0a2)
DH 2048 bits FS
|
128 | |
TLS_DHE_RSA_WITH_AES_128_CCM (0xc09e)
DH 2048 bits FS
|
128 | |
TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256 (0xc060)
ECDH x25519 (eq. 3072 bits RSA) FS
|
128 | |
TLS_DHE_RSA_WITH_ARIA_128_GCM_SHA256 (0xc052)
DH 2048 bits FS
|
128 | |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028)
ECDH x25519 (eq. 3072 bits RSA) FS
WEAK
|
256 | |
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 (0x6b)
DH 2048 bits FS
WEAK
|
256 | |
TLS_ECDHE_RSA_WITH_CAMELLIA_256_CBC_SHA384 (0xc077)
ECDH x25519 (eq. 3072 bits RSA) FS
WEAK
|
256 | |
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA256 (0xc4)
DH 2048 bits FS
WEAK
|
256 | |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 (0xc027)
ECDH x25519 (eq. 3072 bits RSA) FS
WEAK
|
128 | |
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 (0x67)
DH 2048 bits FS
WEAK
|
128 | |
TLS_ECDHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (0xc076)
ECDH x25519 (eq. 3072 bits RSA) FS
WEAK
|
128 | |
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA256 (0xbe)
DH 2048 bits FS
WEAK
|
128 | |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014)
ECDH x25519 (eq. 3072 bits RSA) FS
WEAK
|
256 | |
TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x39)
DH 2048 bits FS
WEAK
|
256 | |
TLS_DHE_RSA_WITH_CAMELLIA_256_CBC_SHA (0x88)
DH 2048 bits FS
WEAK
|
256 | |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013)
ECDH x25519 (eq. 3072 bits RSA) FS
WEAK
|
128 | |
TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x33)
DH 2048 bits FS
WEAK
|
128 | |
TLS_DHE_RSA_WITH_CAMELLIA_128_CBC_SHA (0x45)
DH 2048 bits FS
WEAK
|
128 | |
TLS_RSA_WITH_AES_256_GCM_SHA384 (0x9d)
WEAK
|
256 | |
TLS_RSA_WITH_AES_256_CCM_8 (0xc0a1)
WEAK
|
256 | |
TLS_RSA_WITH_AES_256_CCM (0xc09d)
WEAK
|
256 | |
TLS_RSA_WITH_ARIA_256_GCM_SHA384 (0xc051)
WEAK
|
256 | |
TLS_RSA_WITH_AES_128_GCM_SHA256 (0x9c)
WEAK
|
128 | |
TLS_RSA_WITH_AES_128_CCM_8 (0xc0a0)
WEAK
|
128 | |
TLS_RSA_WITH_AES_128_CCM (0xc09c)
WEAK
|
128 | |
TLS_RSA_WITH_ARIA_128_GCM_SHA256 (0xc050)
WEAK
|
128 | |
TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d)
WEAK
|
256 | |
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA256 (0xc0)
WEAK
|
256 | |
TLS_RSA_WITH_AES_128_CBC_SHA256 (0x3c)
WEAK
|
128 | |
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA256 (0xba)
WEAK
|
128 | |
TLS_RSA_WITH_AES_256_CBC_SHA (0x35)
WEAK
|
256 | |
TLS_RSA_WITH_CAMELLIA_256_CBC_SHA (0x84)
WEAK
|
256 | |
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f)
WEAK
|
128 | |
TLS_RSA_WITH_CAMELLIA_128_CBC_SHA (0x41)
WEAK
|
128 | |
| Handshake Simulation | |||
| Android 4.4.2 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Android 5.0.0 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
| Android 6.0 | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
| Android 7.0 | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH x25519 FS |
| Android 8.0 | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH x25519 FS |
| Android 8.1 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH x25519 FS |
| Android 9.0 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH x25519 FS |
| BingPreview Jan 2015 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Chrome 49 / XP SP3 | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 ECDH secp256r1 FS |
| Chrome 69 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH x25519 FS |
| Chrome 70 / Win 10 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH x25519 FS |
| Chrome 80 / Win 10 R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH x25519 FS |
| Firefox 31.3.0 ESR / Win 7 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ECDH secp256r1 FS |
| Firefox 47 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 ECDH secp256r1 FS |
| Firefox 49 / XP SP3 | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Firefox 62 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH x25519 FS |
| Firefox 73 / Win 10 R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH x25519 FS |
| Googlebot Feb 2018 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH x25519 FS |
| IE 11 / Win 7 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 DH 2048 FS |
| IE 11 / Win 8.1 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 DH 2048 FS |
| IE 11 / Win Phone 8.1 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ECDH secp256r1 FS |
| IE 11 / Win Phone 8.1 Update R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 DH 2048 FS |
| IE 11 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Edge 15 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH x25519 FS |
| Edge 16 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH x25519 FS |
| Edge 18 / Win 10 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH x25519 FS |
| Edge 13 / Win Phone 10 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Java 8u161 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Java 11.0.3 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Java 12.0.1 | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| OpenSSL 1.0.1l R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| OpenSSL 1.0.2s R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| OpenSSL 1.1.0k R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH x25519 FS |
| OpenSSL 1.1.1c R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH x25519 FS |
| Safari 6 / iOS 6.0.1 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 ECDH secp256r1 FS |
| Safari 7 / iOS 7.1 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 ECDH secp256r1 FS |
| Safari 7 / OS X 10.9 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 ECDH secp256r1 FS |
| Safari 8 / iOS 8.4 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 ECDH secp256r1 FS |
| Safari 8 / OS X 10.10 R | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 ECDH secp256r1 FS |
| Safari 9 / iOS 9 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Safari 9 / OS X 10.11 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Safari 10 / iOS 10 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Safari 10 / OS X 10.12 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Safari 12.1.2 / MacOS 10.14.6 Beta R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH x25519 FS |
| Safari 12.1.1 / iOS 12.3.1 R | - | TLS 1.3 | TLS_AES_256_GCM_SHA384 ECDH x25519 FS |
| Apple ATS 9 / iOS 9 R | RSA 2048 (SHA256) | TLS 1.2 > http/1.1 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| Yahoo Slurp Jan 2015 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
| YandexBot Jan 2015 | RSA 2048 (SHA256) | TLS 1.2 | TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 ECDH secp256r1 FS |
|
# Not simulated clients (Protocol mismatch)
|
|||
| Android 2.3.7 No SNI 2 |
Protocol mismatch (not simulated) |
||
| Android 4.0.4 |
Protocol mismatch (not simulated) |
||
| Android 4.1.1 |
Protocol mismatch (not simulated) |
||
| Android 4.2.2 |
Protocol mismatch (not simulated) |
||
| Android 4.3 |
Protocol mismatch (not simulated) |
||
| Baidu Jan 2015 |
Protocol mismatch (not simulated) |
||
| IE 6 / XP No FS 1 No SNI 2 |
Protocol mismatch (not simulated) |
||
| IE 7 / Vista |
Protocol mismatch (not simulated) |
||
| IE 8 / XP No FS 1 No SNI 2 |
Protocol mismatch (not simulated) |
||
| IE 8-10 / Win 7 R |
Protocol mismatch (not simulated) |
||
| IE 10 / Win Phone 8.0 |
Protocol mismatch (not simulated) |
||
| Java 6u45 No SNI 2 |
Protocol mismatch (not simulated) |
||
| Java 7u25 |
Protocol mismatch (not simulated) |
||
| OpenSSL 0.9.8y |
Protocol mismatch (not simulated) |
||
| Safari 5.1.9 / OS X 10.6.8 |
Protocol mismatch (not simulated) |
||
| Safari 6.0.4 / OS X 10.8.4 R |
Protocol mismatch (not simulated) |
||
| (1) Clients that do not support Forward Secrecy (FS) are excluded when determining support for it. | |||
| (2) No support for virtual SSL hosting (SNI). Connects to the default site if the server uses SNI. | |||
| (3) Only first connection attempt simulated. Browsers sometimes retry with a lower protocol version. | |||
| (R) Denotes a reference browser or client, with which we expect better effective security. | |||
| (All) We use defaults, but some platforms do not use their best protocols and features (e.g., Java 6 & 7, older IE). | |||
| (All) Certificate trust is not checked in handshake simulation, we only perform TLS handshake. | |||
| Protocol Details | |
| Secure Renegotiation | Supported |
| Secure Client-Initiated Renegotiation | No |
| Insecure Client-Initiated Renegotiation | No |
| BEAST attack | Mitigated server-side (more info) |
| POODLE (SSLv3) | No, SSL 3 not supported (more info) |
| POODLE (TLS) | No (more info) |
| Zombie POODLE | No (more info)
TLS 1.2 : 0xc027
|
| GOLDENDOODLE | No (more info)
TLS 1.2 : 0xc027
|
| OpenSSL 0-Length | No (more info)
TLS 1.2 : 0xc027
|
| Sleeping POODLE | No (more info)
TLS 1.2 : 0xc027
|
| Downgrade attack prevention | Yes, TLS_FALLBACK_SCSV supported (more info) |
| SSL/TLS compression | No |
| RC4 | No |
| Heartbeat (extension) | No |
| Heartbleed (vulnerability) | No (more info) |
| Ticketbleed (vulnerability) | No (more info) |
| OpenSSL CCS vuln. (CVE-2014-0224) | No (more info) |
| OpenSSL Padding Oracle vuln. (CVE-2016-2107) |
No (more info) |
| ROBOT (vulnerability) | No (more info) |
| Forward Secrecy | Yes (with most browsers) ROBUST (more info) |
| ALPN | Yes http/1.1 |
| NPN | Yes http/1.1 |
| Session resumption (caching) | Yes |
| Session resumption (tickets) | No |
| OCSP stapling | Yes |
| Strict Transport Security (HSTS) | Invalid
Server provided more than one HSTS header
|
| HSTS Preloading | Chrome Edge Firefox IE |
| Public Key Pinning (HPKP) | No (more info) |
| Public Key Pinning Report-Only | No |
| Public Key Pinning (Static) | No (more info) |
| Long handshake intolerance | No |
| TLS extension intolerance | No |
| TLS version intolerance | No |
| Incorrect SNI alerts | No |
| Uses common DH primes | No |
| DH public server param (Ys) reuse | No |
| ECDH public server param reuse | No |
| Supported Named Groups | x25519, secp256r1, x448, secp521r1, secp384r1 (server preferred order) |
| SSL 2 handshake compatibility | No |
| 0-RTT enabled | No |
|
|
|
1 https://bol.garage.click/
(HTTP/1.1 302 Found)
| 1 | |
| Server | nginx | |
| Date | Wed, 19 Nov 2025 17:31:07 GMT | |
| Content-Length | 0 | |
| Connection | close | |
| Cache-Control | max-age=86400,must-revalidate | |
| Location | https://bol.garage.click/Home/Login?ReturnUrl=%2F | |
| Strict-Transport-Security | max-age=31536000 | |
| X-Content-Type-Options | nosniff | |
| Referrer-Policy | no-referrer | |
| X-XSS-Protection | 1; mode=block | |
| Content-Security-Policy | script-src 'self' *.github.io *.google.it *.google.com *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.datatables.net *.rawgit.com rawgit.com unpkg.com 'nonce-613121d7992b9e790b20e530fecc1c45' 'nonce-b09fa1e63a3ba378872bcd6af9a3ba5e' 'nonce-af20f7303fb41f4c28e44e5dc29de6e1' 'nonce-8a2f7395ebfd25da900920adde10f820' 'nonce-5d6e876b20e9436208f63360b3de60f7' 'nonce-77a10ae5a04c52e47dd5f838db5e214a' 'nonce-9d9bf7271afb9aa3d9a1b3817d1afa9f' 'nonce-2ad0e930fff672f20fbd13d231ae4f23' 'nonce-52070e4b30df0036ef78f811b0048b23' 'nonce-bcf42bffbb10be0d024d9647507eb3de' 'nonce-1f3eeb72d3ac0dbabdd3afe89978b54d' 'nonce-1d4951ec29656a2c86577602a5f24180' 'nonce-45a9cbc191e9606897f2e1b88fed28fc' 'nonce-136bf4f1f8b732a0f223260533dbcd27' 'nonce-d353c9d131d5c0eca2765f2af546f738' 'nonce-6e686482ca5c9ec1a4ac3e698ad07708' 'nonce-b38c1d8d12ad2c91fd8e171fe990f692' 'nonce-b4f9a4c17804c6e9fdbd7bfc0abb48fa' 'nonce-b22905a4051335e77098f1012e14e17e' 'nonce-d2ae516d7bc33d5ddac0a8dc00e08571' 'nonce-22fb9c80fbd3337959dba1ac543359e6' 'nonce-614b37715afcd9215d0cf632d27a38db' 'nonce-2f7cef62bc4135f2049bc57acabddee0' 'nonce-d519cc6d31472a5a4b95c1e14d0f2b43' 'nonce-45fab0cd09889359548017707a9bb143' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-KnWgrSAyXdHl6OMqJKCcV9Uqfn02sNPH8dxFNLpSk2A=' 'sha256-cwZgAPm2CTAW2GLDlL0o2J5isI4Gr0wno+xO/MvtT3s=' 'sha256-2sOqPTXgMd8OxZwPrgj+1wCYasj6jkgRQGJYYs92xEc=';style-src 'self' *.github.io *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.datatables.net *.rawgit.com rawgit.com unpkg.com 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-KnWgrSAyXdHl6OMqJKCcV9Uqfn02sNPH8dxFNLpSk2A=' 'sha256-cwZgAPm2CTAW2GLDlL0o2J5isI4Gr0wno+xO/MvtT3s=' 'sha256-2sOqPTXgMd8OxZwPrgj+1wCYasj6jkgRQGJYYs92xEc=' 'sha256-H8px2weacVIa4ShU1edGjuIQPJqbpxG3nHPNhcdAm7A=' 'sha256-xI3LX8cKPJS72ea9yPreCeNCgPQ/tF+F/uBoT1Q4Np4=';img-src 'self' *.github.io *.google.it *.google.com *.google-analytics.com *.googletagmanager.com data: unpkg.com *.openstreetmap.org *.gstatic.com;font-src 'self' *.github.io *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.datatables.net *.rawgit.com rawgit.com unpkg.com;form-action 'self';block-all-mixed-content;; | |
| Permissions-Policy | accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() | |
| Strict-Transport-Security | max-age=63072000; includeSubdomains; preload | |
| X-Frame-Options | SAMEORIGIN | |
| X-Content-Type-Options | nosniff | |
|
2 https://bol.garage.click/Home/Login?ReturnUrl=%2F
(HTTP/1.1 302 Found)
| 2 | |
| Server | nginx | |
| Date | Wed, 19 Nov 2025 17:31:08 GMT | |
| Content-Length | 0 | |
| Connection | close | |
| Cache-Control | no-cache,no-store | |
| Expires | Thu, 01 Jan 1970 00:00:00 GMT | |
| Location | /Error/AccessDenied?msg=Accesso%20non%20consentito! | |
| Pragma | no-cache | |
| Set-Cookie | .AspNetCore.Cookies=; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; secure; samesite=lax; httponly | |
| Strict-Transport-Security | max-age=31536000 | |
| X-Content-Type-Options | nosniff | |
| Referrer-Policy | no-referrer | |
| X-XSS-Protection | 1; mode=block | |
| Content-Security-Policy | script-src 'self' *.github.io *.google.it *.google.com *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.datatables.net *.rawgit.com rawgit.com unpkg.com 'nonce-40d7040a24795817d104f25b5213d696' 'nonce-600dc7c7c00b9b46e1f0bb46a98b3b8a' 'nonce-763cab37881a2519d300b1f0f8564b35' 'nonce-6f3bdd1620ed4c5cda7ead998ea442a4' 'nonce-6c1268c03667dde8dcf8b1515ca67417' 'nonce-0230b94a0423c372a73e407612f538e4' 'nonce-8e2560a10faddbc18d3ee9625d757e75' 'nonce-07961ab3406baec5b7bb8ef5eb00a60a' 'nonce-56ce8b575cf73fcf44b88e300fb47c18' 'nonce-3528d33e50f24ecfc0ec11872265d272' 'nonce-fbe47d694d56d4d9102d1f26a7af6d1d' 'nonce-c42eaf4453cdca9ddf03d0597010e52b' 'nonce-a27e4919bb0722e007ffa7a1c5386a26' 'nonce-bb7204d07fa1c27b75bc518e4a270b9f' 'nonce-f9994bc51a3de89be3f4eb8a0fc9f1ef' 'nonce-d0de0701c6a6e6f2149d987fd6e27130' 'nonce-b644db2e694234fe575c1c892b3243db' 'nonce-c4e6d5876694498aaf7ae28bf0b5ac16' 'nonce-a654aa3bbbfb5e8932d9f546f967ce21' 'nonce-3d9d07ce308ceaca46462b3f31bacd7b' 'nonce-529a0ea4a5943432d9a08ccc3867f1dc' 'nonce-bccf803a25b3ec138f1d46dbfa1a9cc0' 'nonce-1cb6f88508e5872fc07f85943ec04292' 'nonce-81128406297904ff29f56741139e6ad3' 'nonce-a11ed785a38c7888c4285459359b44d0' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-KnWgrSAyXdHl6OMqJKCcV9Uqfn02sNPH8dxFNLpSk2A=' 'sha256-cwZgAPm2CTAW2GLDlL0o2J5isI4Gr0wno+xO/MvtT3s=' 'sha256-2sOqPTXgMd8OxZwPrgj+1wCYasj6jkgRQGJYYs92xEc=';style-src 'self' *.github.io *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.datatables.net *.rawgit.com rawgit.com unpkg.com 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-KnWgrSAyXdHl6OMqJKCcV9Uqfn02sNPH8dxFNLpSk2A=' 'sha256-cwZgAPm2CTAW2GLDlL0o2J5isI4Gr0wno+xO/MvtT3s=' 'sha256-2sOqPTXgMd8OxZwPrgj+1wCYasj6jkgRQGJYYs92xEc=' 'sha256-H8px2weacVIa4ShU1edGjuIQPJqbpxG3nHPNhcdAm7A=' 'sha256-xI3LX8cKPJS72ea9yPreCeNCgPQ/tF+F/uBoT1Q4Np4=';img-src 'self' *.github.io *.google.it *.google.com *.google-analytics.com *.googletagmanager.com data: unpkg.com *.openstreetmap.org *.gstatic.com;font-src 'self' *.github.io *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.datatables.net *.rawgit.com rawgit.com unpkg.com;form-action 'self';block-all-mixed-content;; | |
| Permissions-Policy | accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() | |
| Strict-Transport-Security | max-age=63072000; includeSubdomains; preload | |
| X-Frame-Options | SAMEORIGIN | |
| X-Content-Type-Options | nosniff | |
|
3 https://bol.garage.click/Error/AccessDenied?msg=Accesso%20non%20consentito!
(HTTP/1.1 200 OK)
| 3 | |
| Server | nginx | |
| Date | Wed, 19 Nov 2025 17:31:09 GMT | |
| Content-Type | text/html; charset=utf-8 | |
| Transfer-Encoding | chunked | |
| Connection | close | |
| Cache-Control | max-age=86400,must-revalidate | |
| Strict-Transport-Security | max-age=31536000 | |
| X-Content-Type-Options | nosniff | |
| Referrer-Policy | no-referrer | |
| X-XSS-Protection | 1; mode=block | |
| Content-Security-Policy | script-src 'self' *.github.io *.google.it *.google.com *.google-analytics.com *.googletagmanager.com *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.datatables.net *.rawgit.com rawgit.com unpkg.com 'nonce-148e91a884cf67b0efe91454d8ed4e90' 'nonce-dd454e794c32ede85790913761150edf' 'nonce-8024c8f33f7ef05943739367fe644204' 'nonce-0136e3514244a7025cd53467acda0f9b' 'nonce-35b78c6cf9a02aab6cca21119701b880' 'nonce-47924ea278eec1b9a7a4535a3b626344' 'nonce-a43da9f2a2c2b9dc8a7006be759e883e' 'nonce-87c8b212e55d94dea0a1f296259faa07' 'nonce-7407663662bd1452aefacab4c5a12d60' 'nonce-59f2773853766ed53873b2cf98a257cb' 'nonce-8fa2bd2b6cca2509691ba251ed2d6b97' 'nonce-f078a881d13567e3937a837beabbf4b3' 'nonce-735c88eea2ab79f7cfbe25b36c45cacb' 'nonce-467dfdcbcafb41a8ed0885bd9e98f9aa' 'nonce-8a33df406c872cdf6c6ec554ba96e181' 'nonce-eeba2eeda36e22c00d6cd033a11d55c0' 'nonce-4505db56c57101acc75f785b9b61c776' 'nonce-71865b8ba07e6aa5517737396a505067' 'nonce-04bee234c413ed944445e5af86b72c78' 'nonce-61407bb7585fadb60db764af98862896' 'nonce-b2cd0a0325e32cbadade0ac9260429e0' 'nonce-78bf666ae8d3e99607f020bcc85bba42' 'nonce-1d9cb42ad593c34f47772c8f0ecb70a6' 'nonce-e5a33431e096358ad61f8ae9e5e0f3b9' 'nonce-ba45aa39b19e04742108fcea76e7443e' 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-KnWgrSAyXdHl6OMqJKCcV9Uqfn02sNPH8dxFNLpSk2A=' 'sha256-cwZgAPm2CTAW2GLDlL0o2J5isI4Gr0wno+xO/MvtT3s=' 'sha256-2sOqPTXgMd8OxZwPrgj+1wCYasj6jkgRQGJYYs92xEc=';style-src 'self' *.github.io *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.datatables.net *.rawgit.com rawgit.com unpkg.com 'sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=' 'sha256-KnWgrSAyXdHl6OMqJKCcV9Uqfn02sNPH8dxFNLpSk2A=' 'sha256-cwZgAPm2CTAW2GLDlL0o2J5isI4Gr0wno+xO/MvtT3s=' 'sha256-2sOqPTXgMd8OxZwPrgj+1wCYasj6jkgRQGJYYs92xEc=' 'sha256-H8px2weacVIa4ShU1edGjuIQPJqbpxG3nHPNhcdAm7A=' 'sha256-xI3LX8cKPJS72ea9yPreCeNCgPQ/tF+F/uBoT1Q4Np4=';img-src 'self' *.github.io *.google.it *.google.com *.google-analytics.com *.googletagmanager.com data: unpkg.com *.openstreetmap.org *.gstatic.com;font-src 'self' *.github.io *.google.com *.googleapis.com *.gstatic.com *.fontawesome.com *.cloudflare.com *.datatables.net *.rawgit.com rawgit.com unpkg.com;form-action 'self';block-all-mixed-content;; | |
| Permissions-Policy | accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() | |
| Strict-Transport-Security | max-age=63072000; includeSubdomains; preload | |
| X-Frame-Options | SAMEORIGIN | |
| X-Content-Type-Options | nosniff | |
| Miscellaneous | |
| Test date | Wed, 19 Nov 2025 17:30:58 UTC |
| Test duration | 133.545 seconds |
| HTTP status code | 200 |
| HTTP server signature | nginx |
| Server hostname | 136.178.77.34.bc.googleusercontent.com |
SSL Report v2.4.1
