Infrastructure - https://www.trainline.com BeaverCheck Audit

C

IPv6 Readiness

Action

No IPv6 support

REVIEW

No IPv6 support

No IPv6 (AAAA) records found

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

No IPv6 Support

About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B

TLS Certificate Expiry & Recommendations

129 days until leaf cert expires — 3 issues to address

REVIEW

Certificate validity

129

days left

0d 30d 60d 90d+

Recommended actions

Add includeSubDomains to the HSTS directive
Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

A

DNS Records

4 A records, 52 ms lookup

PASS

4 A records, 52 ms lookup

Resolves to 4 IPv4 address(es)

Got: 99.86.20.118, 99.86.20.69, 99.86.20.2, 99.86.20.123

No IPv6 (AAAA) records

CNAME record at zone apex

A CNAME at the zone apex can break MX and NS records. Use ALIAS/ANAME or A records instead.

Got: d2yaktdfa8m1mb.cloudfront.net

4 nameserver(s) configured

Got: ns-1182.awsdns-19.org, ns-2043.awsdns-63.co.uk, ns-77.awsdns-09.com, ns-829.awsdns-39.net

No MX records — email not configured via DNS

CAA records not checked

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

No SPF record found in TXT records

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

DNS resolution time: 52 ms

Got: 52 ms

A	99.86.20.118, 99.86.20.69, 99.86.20.2, 99.86.20.123
AAAA	—
CNAME	d2yaktdfa8m1mb.cloudfront.net
NS	ns-1182.awsdns-19.org, ns-2043.awsdns-63.co.uk, ns-77.awsdns-09.com, ns-829.awsdns-39.net
MX	—
TXT	—
CAA	Lookup not available with standard resolver

Resolved in 52 ms

A CNAME at the zone apex can break MX and NS records. Use ALIAS/ANAME or A records instead.

Why this matters

CNAME at the apex (example.com) breaks every other apex record (MX, TXT, NS) — DNS-protocol violation per RFC 1034.

Learn more ▾

RFC 1034 forbids CNAME alongside other records at the same name. Some DNS providers offer ALIAS / ANAME / flattened-CNAME records that work around this — use those instead. Otherwise apex-level CNAME breaks email (no MX), domain ownership verification (no TXT), and more.

Source: RFC 1034

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

Why this matters

Without SPF, receiving servers can't validate sending IPs — your domain is easier to spoof in phishing.

Learn more ▾

SPF complements DMARC. Both should be published. SPF records list authorized sending IPs (e.g., `v=spf1 include:_spf.google.com ~all` for Google Workspace). After publishing, verify in Google Postmaster Tools or mxtoolbox.

Source: RFC 7208 (SPF)

A

Redirect Chain

1 redirect(s), 540 ms total

PASS

1 redirect(s), 540 ms total

Single redirect

Got: https://www.trainline.com → https://www.thetrainline.com/ (301)

Redirect overhead: 540 ms total

Got: 540 ms

Cross-domain redirect detected

https://www.trainline.com

63 ms · HTTP/1.1

301

https://www.thetrainline.com/

477 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol	Server
1	https://www.trainline.com	301	63 ms	HTTP/1.1	CloudFront
2	https://www.thetrainline.com/	200	477 ms	HTTP/1.1	CloudFront

See the visual redirect chain in the HTTP Probe tab →

A+

Crawlability

robots.txt present, sitemap with 5292 URLs

PASS

robots.txt present, sitemap with 5292 URLs

robots.txt is present

Got: 5559 bytes

sitemap.xml is present

sitemap.xml is valid XML

sitemap.xml contains 5292 entries

robots.txt references sitemap

robots.txt 200 OK

Size 5559 B Sitemaps referenced 49 User-agents *, AdsBot-Google, AdsBot-Google-Mobile Blocking No — crawling allowed

# If you're a robot, hello there and please have a good look around our website.

# If you're a human, we're chuffed you're checking out our robots.txt file. If you're into your SEO or a developer why not come work for us? Say hello at https://www.trainlinegroup.com/careers/en/.


User-agent: *


#Blocked parameters

Disallow: /news?page=*

Disallow: *?oriCode

Disallow: *?oricode

Disallow: /*lang=

Disallow: /*?cm=

Disallow: /live/*?*


#Blocked resources

Disallow: /RenderPDF.aspx*

Disallow: /SecureRenderPDF.aspx*

Disallow: /combinedmatrix.aspx

Disallow: /customerror.aspx

Disallow: /hotel/JavaScriptDisabled.aspx

Disallow: /hotel/UnsupportedBrowser.aspx

Disallow: /destinations/*.shtml

Disallow: /newpaymenterror.aspx

Disallow: /terms.aspx

Disallow: /m/api

Disallow: /api

Disallow: /login-service

Disallow: /version


#Blocked slugs

Disallow: /admin/

Disallow: /book/

Disallow: /dpi

Disallow: /graphql

Disallow: /seo/graphql

Disallow: /button_bar_pages/

Disallow: /buytickets

Disallow: /maintenance/

Disallow: /season/

Disallow: /tools/tunetool

Disallow: /my-account/

Disallow: /m/checkout

Disallow: /m/results

Disallow: /train-times/*/1

Disallow: /train-times/*/2

Disallow: /train-times/*/3

Disallow: /train-times/*/4

Disallow: /train-times/*/5

Disallow: /train-times/*/6

Disallow: /train-times/*/7

Disallow: /train-times/*/8

Disallow: /train-times/*/9

Disallow: /train-times/*/0

Disallow: /affiliate

Disallow: /unsupported-browser

Disallow: /diagnostics/

Disallow: /season-ticket/fare-selection?

Disallow: /content/lgl/*


User-agent: AdsBot-Google

Allow: /dpi

Disallow: *buytickets/datapassedin

Disallow: /api

Disallow: /graphql

Disallow: /seo/graphql

Disallow: /version

Disallow: /login-service

Disallow: /live/*?*

Disallow: /*?cm=

Disallow: /graphql


User-agent: AdsBot-Google-Mobile

Allow: /dpi

Disallow: /version

Disallow: /graphql

Disallow: /seo/graphql

Disallow: /login-service

Disallow: *buytickets/datapassedin

Disallow: /api

Disallow: /live/*?*

Disallow: /*?cm=

Disallow: /graphql


# Sitemaps

Sitemap: https://www.thetrainline.com/live/sitemap

Sitemap: https://www.thetrainline.com/sitemap.xml

Sitemap: https://www.thetrainline.com/sitemap-cms

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/cs/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/da/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/de/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/de-at/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/de-ch/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/en/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/en-us/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/es/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/fr/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/fr-ch/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/it/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/it-ch/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/nb/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/nl/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/pl/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/pt/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/pt-br/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/sv/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/vul/sitemaps/zh/trains/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ESS/de/station/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ESS/en/station/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ESS/es/station/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ESS/fr/station/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ESS/it/station/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ess/maps/com/bus/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ess/maps/de/bus/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ess/maps/es/bus/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ess/maps/fr/bus/sitemap.xml

Sitemap: https://www.thetrainline.com/content/ess/maps/it/bus/sitemap.xml

Sitemap: https://www.thetrainline.com/fr/cms-sitemap-fr

Sitemap: https://www.thetrainline.com/it/cms-sitemap

Sitemap: https://www.thetrainline.com/es/es-cms-sitemap

Sitemap: https://www.thetrainline.com/de/sitemap-cms

Sitemap: https://www.thetrainline.com/en/europe-cms-sitemap

Sitemap: https://www.thetrainline.com/nl/sitemap-cms

Sitemap: https://www.thetrainline.com/da/da-cms-sitemap

Sitemap: https://www.thetrainline.com/nb/no-cms-sitemap

Sitemap: https://www.thetrainline.com/pl/pl-sitemap-cms

Sitemap: https://www.thetrainline.com/sv/sv-cms-sitemap

Sitemap: https://www.thetrainline.com/pt-br/pt-br-cms-sitemap

Sitemap: https://www.thetrainline.com/de-at/de-at-cms-sitemap

Sitemap: https://www.thetrainline.com/de-ch/de-ch-cms-sitemap

Sitemap: https://www.thetrainline.com/fr-ch/fr-ch-cms-sitemap

Sitemap: https://www.thetrainline.com/en-us/us-cms-sitemap

Sitemap: https://www.thetrainline.com/pt/pt-cms-sitemap

Sitemap: https://www.thetrainline.com/it-ch/it-ch-cms-sitemap

sitemap.xml 200 OK

Type URL Set URLs 5292 entries Valid XML Yes

Sample URLs:

A+

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

PASS

www/non-www, trailing slash, HTTP→HTTPS

www/non-www redirect configured correctly (preferred: www)

HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.trainline.com/

301https://trainline.com/

Preferred variant: www

HTTP → HTTPS

301http://www.trainline.com/ → https://www.trainline.com/

Consistent

A+

Domain Intelligence

trainline.com — via CSC Corporate Domains, Inc., 29 years, 5 months old, hosted on AWS

PASS

trainline.com — via CSC Corporate Domains, Inc., 29 years, 5 months old, hosted on AWS

Domain registered until Mar 14, 2027 (11 months remaining)

DNSSEC is enabled

Registrar: CSC Corporate Domains, Inc.

Hosting: AWS

Got: AS16509

Domain expiry

271 days

March 14, 2027

SSL certificate

129 days

Issued by Amazon

Domain age

29 years, 5 months

Registered March 13, 1997

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

AWS

ASN AS16509

99.86.20.2

Registrar

CSC Corporate Domains, Inc.

Lock status unknown 2 NS records

Expiry timeline

Today

+1 year

Domain expiry SSL expiry Danger zone (≤30 days)

Registrar CSC Corporate Domains, Inc.

Created March 13, 1997 (29 years, 5 months ago)

Expires March 14, 2027 (11 months)

Last Updated March 10, 2026

Name Servers addilyn.ns.cloudflare.com, jack.ns.cloudflare.com

DNSSEC Enabled

Hosting

IP Address 99.86.20.2

ASN AS16509 (AMAZON-02 - Amazon.com, Inc., US)

Provider AWS

Data source: rdap (0.3s)

A+

HTTP Probe Timing

Total 82 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

PASS

DNS Lookup

53 ms

TCP Connect

2 ms

TLS Handshake

5 ms

Time to First Byte

82 ms

Total Time

83 ms

Connection waterfall

DNS Lookup 53 ms TCP Connect 2 ms TLS Handshake 5 ms Server Processing 22 ms Content Transfer 0 ms

A

CDN & Delivery

AWS CloudFront (Miss from cloudfront)

PASS

AWS CloudFront (Miss from cloudfront)

Site is served via AWS CloudFront CDN (edge: SIN3-P2)

Got: x-amz-cf-id: pTa29qgsyNpvLj3PjQsv8IR3xYM3Y9ilKg1oI9fa03dOEAuTa-La-g==

CDN cache status: Miss from cloudfront

CDN Detected: AWS CloudFront

Provider AWS CloudFront Cache Status Miss from cloudfront Evidence x-amz-cf-id: pTa29qgsyNpvLj3PjQsv8IR3xYM3Y9ilKg1oI9fa03dOEAuTa-La-g==