Open
Cached
·
just now
75/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=bloomingbudsbali.com
Issuer
C=US, O=Let's Encrypt, CN=YE2
Valid From
October 18, 2026
Valid Until
January 16, 2027
70 days
Public Key
ECDSA
256 bit
(P-256)
Adequate
Signature Algorithm
ECDSA-SHA384
SHA-256 Fingerprint
C2:5A:20:20:3A:62:23:C6:A5:1F:1B:FF:68:FC:31:78:74:E1:44:95:22:45:DA:CF:94:94:14:44:86:6E:22:90
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
abwebi.com
*.abwebi.com
181730.cn
*.181730.cn
209141.my
*.209141.my
2746.bid
*.2746.bid
3zx73k.top
*.3zx73k.top
572391.my
*.572391.my
59212.mba
*.59212.mba
60731.top
*.60731.top
651034.cn
*.651034.cn
69sauna.zone
*.69sauna.zone
*.staging.69sauna.zone
*.ww25.69sauna.zone
aaaag.vip
*.aaaag.vip
bloomingbudsbali.com
*.bloomingbudsbali.com
*.wildcard.bloomingbudsbali.com
*.ww25.bloomingbudsbali.com
*.ww38.bloomingbudsbali.com
campan-pyrenees.com
*.campan-pyrenees.com
chocolatehemp.com
*.chocolatehemp.com
dds-pnaqc.info
*.dds-pnaqc.info
digitalmarketingfirstaz.com
*.digitalmarketingfirstaz.com
digitalmarketingfirstfl.com
*.digitalmarketingfirstfl.com
digitalmarketingky.com
*.digitalmarketingky.com
doctorofpersonalchange.com
*.doctorofpersonalchange.com
elearningsolutions.com
*.elearningsolutions.com
fithub.studio
*.fithub.studio
*.ww25.fithub.studio
*.api.injectapps.xyz
*.app.injectapps.xyz
*.b54zj.injectapps.xyz
*.bzj.injectapps.xyz
*.cpcalendars.injectapps.xyz
*.dev.injectapps.xyz
injectapps.xyz
*.injectapps.xyz
*.wildcard.injectapps.xyz
*.demo.kuliyahan.com
*.kipkuliah.kuliyahan.com
kuliyahan.com
*.kuliyahan.com
*.mail.kuliyahan.com
*.ww25.kuliyahan.com
lebistrodescopains.net
*.lebistrodescopains.net
lnj.in
*.lnj.in
lynchburgva.org
*.lynchburgva.org
ph-park.com
*.ph-park.com
portalencomen.cfd
*.portalencomen.cfd
pushoperationssdk.info
*.pushoperationssdk.info
quatschzone.com
*.quatschzone.com
*.32.sonhador.bet
sonhador.bet
*.sonhador.bet
tamilpirates.lol
*.tamilpirates.lol
tartaletka.com
*.tartaletka.com
technologyeducationwatch.com
*.technologyeducationwatch.com
tradein.one
*.tradein.one
vusuta.xyz
*.vusuta.xyz
Other domains in certificate