DNS Gurus
Cached · just now
76/100 SECURITY SCORE

Certificate Information

Subject
CN=ampcloud1.online
Issuer
C=US, O=Let's Encrypt, CN=R13
Valid From
February 01, 2026
Valid Until
May 02, 2026 82 days
Public Key
RSA 4096 bit Strong
Signature Algorithm
SHA256-RSA
SHA-256 Fingerprint
B0:56:22:AB:53:D8:5A:A7:1E:43:BF:48:F0:97:2B:4D:D0:2C:47:A8:6C:23:D2:E4:D1:15:CC:63:9A:C7:50:4B
Alternative Names
90 domains

Security Configuration

TLS Protocols
TLS 1.2 TLS 1.3
Forward Secrecy
Supported (Modern clients use PFS)

HTTP Security Headers

Status
Strict-Transport-Security
Missing
Not configured
Content-Security-Policy
Missing
Not configured
X-Frame-Options
Missing
Not configured
X-Content-Type-Options
Missing
Not configured
Referrer-Policy
Missing
Not configured
Permissions-Policy
Missing
Not configured
Recommendations
  • • Add Strict-Transport-Security header with max-age of at least 1 year
  • • Add Content-Security-Policy header to prevent XSS attacks
  • • Add X-Frame-Options: DENY or SAMEORIGIN to prevent clickjacking
  • • Add X-Content-Type-Options: nosniff
  • • Add Referrer-Policy header (recommended: strict-origin-when-cross-origin)
  • • Consider adding Permissions-Policy to control browser features

CAA Records (Certificate Authority Authorization)

CAA Records
Not Configured (Any CA can issue certificates)
CAA Issues
  • • No CAA records configured - any CA can issue certificates
Recommendations
  • • Implement CAA records to restrict which CAs can issue certificates for your domain
  • • This adds an extra layer of security against unauthorized certificate issuance
  • • Example: Add CAA record 'example.com. CAA 0 issue "letsencrypt.org"'
  • • Consider adding 'iodef' record to receive security incident reports

Subject Alternative Names

90 domains
squiz.cc *.squiz.cc

Other domains in certificate

*.1xbetgiris.ampcloud1.online *.1xbetpoker.ampcloud1.online ampcloud1.online *.ampcloud1.online *.betbaba.ampcloud1.online *.rivalo.ampcloud1.online
andalia.com *.andalia.com *.m.andalia.com *.s.andalia.com *.test.andalia.com
bactel.com *.bactel.com *.portal.bactel.com *.sslvpn2.bactel.com *.sslvpn3.bactel.com
bhzx1.vip *.bhzx1.vip
chongwuyongpin.com *.chongwuyongpin.com *.vpn.chongwuyongpin.com
chumsreferral.com *.chumsreferral.com *.events.chumsreferral.com *.pro.chumsreferral.com *.terra.chumsreferral.com
citizenv.eu *.citizenv.eu *.forum.citizenv.eu
*.ahxprjfbbvadmin.eastcoperth.com.au eastcoperth.com.au *.eastcoperth.com.au *.landing-page.eastcoperth.com.au *.mail.eastcoperth.com.au *.market.eastcoperth.com.au *.ww25.eastcoperth.com.au
foodey.co.uk *.foodey.co.uk
haydisohbet.net *.haydisohbet.net *.norepy.haydisohbet.net
*.ci.jsblom.com *.hotfix.jsblom.com *.insight.jsblom.com jsblom.com *.jsblom.com *.p.jsblom.com *.scan1.jsblom.com *.ww25.jsblom.com *.www.jsblom.com
*.hostmaster.justiceclothes.com justiceclothes.com *.justiceclothes.com
karagounis.com *.karagounis.com *.test.karagounis.com
matildadjerf.com *.matildadjerf.com *.sso.matildadjerf.com
*.domain.pixelsshopbd.com *.education.pixelsshopbd.com *.movie.pixelsshopbd.com pixelsshopbd.com *.pixelsshopbd.com *.prottoy.pixelsshopbd.com *.web.pixelsshopbd.com
socceronlin.me *.socceronlin.me
*.portal.sorda.com sorda.com *.sorda.com
thebesttherapy.com *.thebesttherapy.com *.ww1.thebesttherapy.com *.ww38.thebesttherapy.com
toools.co *.toools.co
*.login.vymgo.be vymgo.be *.vymgo.be
*.uk.watersiderestaurant.uk watersiderestaurant.uk *.watersiderestaurant.uk
wificalling.net *.wificalling.net
*.comune.zionsgate.info zionsgate.info *.zionsgate.info