Open
Cached
·
just now
76/100
SECURITY SCORE
Detected Technologies
Certificate Information
Subject
CN=cambodialifestyle.com
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
April 15, 2026
Valid Until
July 14, 2026
71 days
Public Key
RSA
4096 bit
Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
00:AB:88:B2:64:C1:40:7E:4B:7A:FD:95:26:E3:46:D0:5D:7A:39:26:B2:BD:7D:4B:B6:67:A8:3A:16:1B:10:86
Alternative Names
Security Configuration
TLS Protocols
TLS 1.2
TLS 1.3
Forward Secrecy
Supported
(Modern clients use PFS)
HTTP Security Headers
Status
Strict-Transport-Security
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
- • Add Strict-Transport-Security header with max-age of at least 1 year
- • Add Content-Security-Policy header to prevent XSS attacks
- • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
- • Add X-Content-Type-Options: nosniff
- • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
- • Consider adding Permissions-Policy to control browser features
CAA Records (Certificate Authority Authorization)
CAA Records
Not Configured
(Any CA can issue certificates)
CAA Issues
- • No CAA records configured - any CA can issue certificates
Recommendations
- • Implement CAA records to restrict which CAs can issue certificates for your domain
- • This adds an extra layer of security against unauthorized certificate issuance
- • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
- • Consider adding 'iodef' record to receive security incident reports
Subject Alternative Names
90 domains
thatheadofyours.info
*.thatheadofyours.info
cambodialifestyle.com
*.cambodialifestyle.com
catpremier.com
*.catpremier.com
collaba2a.com
*.collaba2a.com
get-around-39165.click
*.get-around-39165.click
givco.sx
*.givco.sx
guibonfoods.com
*.guibonfoods.com
gynaekologin.com
*.gynaekologin.com
hajung.com
*.hajung.com
hiresolarinstaller.com
*.hiresolarinstaller.com
idnsaqut.com
*.idnsaqut.com
innovatediy.live
*.innovatediy.live
internshipfinders.com
*.internshipfinders.com
kaq5236.cc
*.kaq5236.cc
keeldesign.com
*.keeldesign.com
kimetz.org
*.kimetz.org
lbankshield.info
*.lbankshield.info
leamingtonphotos.com
*.leamingtonphotos.com
lesbianporns.net
*.lesbianporns.net
lightiscollaborative.com
*.lightiscollaborative.com
limitedcollectibles.com
*.limitedcollectibles.com
mercatorusso.com
*.mercatorusso.com
mfgcsp1.buzz
*.mfgcsp1.buzz
mimblewimble.net
*.mimblewimble.net
moviehdpoint.com
*.moviehdpoint.com
mtsprocessengineering.com
*.mtsprocessengineering.com
mykidismywhy.com
*.mykidismywhy.com
numbersourcing.com
*.numbersourcing.com
onluckcasino.com
*.onluckcasino.com
orbforge.com
*.orbforge.com
ourlivingvaluesdigest.com
*.ourlivingvaluesdigest.com
outliergpt.com
*.outliergpt.com
pgbm.koeln
*.pgbm.koeln
physiohero.com
*.physiohero.com
plumbersaas.com
*.plumbersaas.com
poppyplaypark.com
*.poppyplaypark.com
prosmartleadai.co
*.prosmartleadai.co
tasqerteam.com
*.tasqerteam.com
theagenticchat.com
*.theagenticchat.com
theutopias.com
*.theutopias.com
tkbpyq.life
*.tkbpyq.life
turkyereli.info
*.turkyereli.info
tyre-shp.sbs
*.tyre-shp.sbs
uclocals.com
*.uclocals.com
ud62jm.cyou
*.ud62jm.cyou
Other domains in certificate