Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.FIPv6 ReadinessActionIPv6 records exist but unreachableFIX
Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.
Advertising IPv6 (AAAA records) without a reachable server means IPv6-preferring clients silently fail every connection.
Learn more ▾ ▴
Modern browsers prefer IPv6 if AAAA exists (Happy Eyeballs algorithm). If the IPv6 server isn't reachable, browsers fall back to IPv4 — but with seconds of added latency per request. Either fix IPv6 reachability or remove the AAAA records.
Source: RFC 8305 (Happy Eyeballs)
BTLS Certificate Expiry & Recommendations54 days until leaf cert expires — 4 issues to addressREVIEW
Certificate validity
Recommended actions
- Add includeSubDomains to the HSTS directive
- Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records3 A records, 7 ms lookupPASS
| A | 172.67.70.226, 104.26.4.138, 104.26.5.138 |
| AAAA | 2606:4700:20::681a:58a, 2606:4700:20::681a:48a, 2606:4700:20::ac43:46e2 |
| CNAME | — |
| NS | hans.ns.cloudflare.com, naomi.ns.cloudflare.com |
| MX | 1 aspmx.l.google.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com 10 alt4.aspmx.l.google.com 10 alt3.aspmx.l.google.com |
| TXT | cursor-domain-verification-5p21cc=8cxGXzcACCGQ8rIilPgJZib1c google-site-verification=8tTbK_Ha58p_ky7XkbSVJD3E-1Cah_sixJwuoLV7uTo google-site-verification=V5rdoysBB3bQNxvdbgL0njjkR5ufY_PxfUD6voW2Blo google-site-verification=g5pTH4JY35JcSqcmMHwCos8L8CQPvG8NQnb1n81fqgA google-site-verification=hoLJHMr9fqqFedwduPegjN-iEuDDv_dmSO-b9EaECXo SPF v=spf1 include:spf.efwd.registrar-servers.com include:_spf.google.com ~all |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
A+Redirect ChainNo redirects — direct accessPASS
https://bun.sh
93 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://bun.sh | 200 | 93 ms | HTTP/1.1 | cloudflare |
A+Crawlabilityrobots.txt present, sitemap with 16909 URLsPASS
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
User-agent: *
Disallow: /readme
Allow: /
A+URL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Consistent
A+Domain Intelligencebun.sh — via MarkMonitor Inc., 4 years, 8 months old, hosted on CloudflarePASS
794 days
August 16, 2028
54 days
Issued by Google Trust Services
4 years, 8 months
Registered August 16, 2021
Status unknown
Protects against DNS spoofing
Cloudflare
ASN AS13335
104.26.5.138
MarkMonitor Inc.