Skip to content
https://doonkoob.ir

Infrastructure

· 17 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
83
GRADE
B
FIX
2
REVIEW
7
PASS
8
INFO
0
Probed from Santa Clara, United States
200 OK
Checks
17
8 PASS 7 REVIEW 2 FIX
D
Multi-Resolver DNS Speed
Action
Mean 231ms across 3 resolvers (spread 341ms)
FIX
Mean 231ms across 3 resolvers (spread 341ms)
Info::
Cloudflare: 67ms
Got: 67ms via 1.1.1.1:53
Info::
Quad9: 220ms
Got: 220ms via 9.9.9.9:53
Info::
Google: 408ms
Got: 408ms via 8.8.8.8:53
Info::
High latency spread between resolvers: 341ms (min 67ms / max 408ms)
Wide gap between the fastest and slowest public resolver suggests a geographic anycast issue or an authoritative-server cache problem. Users in different regions will see materially different DNS times.
D
CDN & Delivery
Action
No CDN (document or assets)
FIX
No CDN (document or assets)
Warning::
No CDN (document or assets)
Neither the HTML document nor the page's subresources are served through an edge network. A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN (document or assets)

Consider using a CDN to improve global delivery speed and reduce origin load.

B
DNSSEC
Unsigned (DNSSEC not deployed)
REVIEW
Unsigned (DNSSEC not deployed)
Info::
DNSSEC is not deployed
The zone is not DNSSEC-signed. Users on validating resolvers (Cloudflare 1.1.1.1, Quad9 9.9.9.9, growing default in mobile resolvers) get no protection against DNS spoofing for this domain. Most registrars now offer DNSSEC at a single click; consider enabling it for sites where authenticity matters (banking, healthcare, government).
B
CAA Records
No CAA records (any CA may issue certificates)
REVIEW
No CAA records (any CA may issue certificates)
Info::
No CAA records published
Without CAA records, any publicly-trusted CA can issue certificates for this domain. Adding a CAA record (`yourdomain. IN CAA 0 issue "letsencrypt.org"`) restricts issuance to CAs you authorize. Required by CAB Forum baseline since 2017; the default of 'any CA' is widely supported but is the broader attack surface for issuance fraud.
C
Reverse DNS
Action
0/2 IPs match cert SAN
REVIEW
0/2 IPs match cert SAN
Info::
PTR lookup failed for 185.143.234.131: lookup 185.143.234.131: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 185.143.233.131: lookup 185.143.233.131: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B
HTTP Probe Timing
Total 1302 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
REVIEW
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
415 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
70 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
78 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
1.06 s
Total Time Total request time from DNS lookup through full response.
1.30 s

Connection waterfall

DNS Lookup 415 ms TCP Connect 70 ms TLS Handshake 78 ms Server Processing 493 ms Content Transfer 247 ms
B
TLS Certificate Expiry & Recommendations
36 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

36
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
Operational Status Page
No status page link detected
REVIEW
No status page link detected
Info::
No operational status page link detected
Status pages communicate planned maintenance and incidents to users -- a hallmark of operationally-mature services. Most SaaS teams publish one via Atlassian Statuspage, Instatus, BetterUptime, or a self-hosted Cachet. Smaller sites legitimately don't need one; flagged as Info, not a failure.
A
DNS Records
2 A records, 743 ms lookup
PASS
2 A records, 743 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 185.143.234.131, 185.143.233.131
Info::
No IPv6 (AAAA) records
Info::
2 nameserver(s) configured
Got: o.ns.arvancdn.ir, a.ns.arvancdn.ir
Info::
1 mail exchanger(s) configured
Info::
SPF record present in TXT
Warning::
DNS resolution is slow (743 ms)
Slow DNS adds latency to every page load. Consider a faster DNS provider.
Got: 743 ms
A185.143.234.131, 185.143.233.131
AAAA—
CNAME—
NSo.ns.arvancdn.ir, a.ns.arvancdn.ir
MX
10 mail.doonkoob.ir
TXT
SPF v=spf1 ip4:45.94.215.177 mx -all
CAALookup not available with standard resolver
Resolved in 743 ms

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Why this matters

DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.

Source: DNS performance benchmarks

A+
Subdomain Takeover
No subdomain takeover risk detected
PASS
No subdomain takeover risk detected
Info::
No CNAME record present
A+
Redirect Chain
No redirects — direct access
PASS
No redirects — direct access
Info::
No redirects — direct access
Got: https://doonkoob.ir

https://doonkoob.ir

1223 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://doonkoob.ir2001223 msHTTP/1.1ArvanCloud
A+
Crawlability
robots.txt present, sitemap with 27 URLs
PASS
robots.txt present, sitemap with 27 URLs
Info::
robots.txt is present
Got: 316 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 27 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 316 B Sitemaps referenced 1 User-agents * Blocking No — crawling allowed
User-Agent: *
Allow: /
Disallow: /admin/
Disallow: /admin-login
Disallow: /account/
Disallow: /checkout
Disallow: /checkout/
Disallow: /cart
Disallow: /wishlist
Disallow: /login
Disallow: /search
Disallow: /track
Disallow: /track/
Disallow: /backend-api/
Disallow: /offline

Sitemap: https://doonkoob.ir/sitemap.xml
sitemap.xml 200 OK
Type URL Set URLs 27 entries Valid XML Yes
Sample URLs:
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Info::
HTTP correctly redirects to HTTPS permanently
Got: HTTP 301

www / non-www

301https://www.doonkoob.ir/
200https://doonkoob.ir/

Preferred variant: non-www

HTTP → HTTPS

301http://doonkoob.ir/ → https://doonkoob.ir/

Consistent

A+
Domain Intelligence
doonkoob.ir — hosted on ARVANCLOUD-CDN-IR - Noyan Abr Arvan Co. ( Private Joint Stock), IR
PASS
doonkoob.ir — hosted on ARVANCLOUD-CDN-IR - Noyan Abr Arvan Co. ( Private Joint Stock), IR
Info::
Hosting: ARVANCLOUD-CDN-IR - Noyan Abr Arvan Co. ( Private Joint Stock), IR
Got: AS205585
Domain expiry

Unknown

SSL certificate

36 days

Issued by Let's Encrypt

Domain age

Unknown

DNSSEC

Status unknown

Protects against DNS spoofing

Hosting

ARVANCLOUD-CDN-IR - Noyan Abr Arvan Co. ( Private Joint Stock), IR

ASN AS205585

185.143.234.131

Registrar

Registrar unknown

Lock status unknown 2 NS records
Expiry timeline
Today
+1 year
SSL expiry Danger zone (≤30 days)
Registrar
Name Servers a.ns.arvancdn.ir, o.ns.arvancdn.ir
Hosting
IP Address 185.143.234.131
ASN AS205585 (ARVANCLOUD-CDN-IR - Noyan Abr Arvan Co. ( Private Joint Stock), IR)
Provider ARVANCLOUD-CDN-IR - Noyan Abr Arvan Co. ( Private Joint Stock), IR
Data source: whois (0.7s)
A+
CDN Cache Observability
Cache state: BYPASS
PASS
Cache state: BYPASS
Info::
CDN cache state observable via 1 header(s)
Got: x-cache=BYPASS
A+
Health Check Endpoint
Health endpoint at https://doonkoob.ir/healthz (HTTP 200)
PASS
Health endpoint at https://doonkoob.ir/healthz (HTTP 200)
Info::
Public health endpoint at https://doonkoob.ir/healthz
Got: https://doonkoob.ir/healthz
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback