Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BCrawlabilityno robots.txt, no sitemapREVIEW
robots.txt is optional but recommended. It tells search engine crawlers which pages to index.
No robots.txt — crawlers fetch /robots.txt and get 404; not breaking but means default crawl behavior with no directives or sitemap reference.
Learn more ▾ ▴
A minimal robots.txt with `User-agent: * / Allow: / / Sitemap: https://example.com/sitemap.xml` covers the basics. Without it, crawlers behave fine but lose the sitemap signal and can't be selectively blocked from crawl-traps.
Source: robotstxt.org
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
No robots.txt found
This is fine for most sites — a missing robots.txt allows all crawling by default.
No sitemap found
Adding a sitemap helps search engines discover your pages.
BTLS Certificate Expiry & Recommendations98 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records1 A records, 62 ms lookupPASS
| A | 23.52.147.5 |
| AAAA | — |
| CNAME | — |
| NS | usw1.akam.net, usc4.akam.net, usw2.akam.net, ns1-17.akam.net, use4.akam.net, use5.akam.net, ns1-239.akam.net |
| MX | 10 olympic-org.mail.protection.outlook.com |
| TXT | ab27f103-626c-467c-87e9-76459cee6d9e docusign=af7b74d1-de62-4ab3-acee-e2251117e6be mentimeter-1968828d-eacb-4cb4-9cd6-39d337b24206 amazonses:QCKmU0eCWVNl/rwz71jJUaIrIy9H0/EPvIg7/WmUgj8= qtBMR21R. mtmDAdyl=e97f9bd7a94cc1ce99bd2fc76dcd853c google-site-verification=uppvyvdeQFTUvyIyWLd7O65zN3lzH65H_0eTJioqRXY successfactors-site-verification=MTc4YjIxZTMxYTVhNzYxZDdhMDQ5Y2JjZjMwMDc2NTkzMTc... v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDLSVMErefLr9pS9klFe8URqn... logmein-verification-code=Xa7wcTWF60T5llNp8RMEitIXV GCJn/vFfi9sdY+sn+l2YP2pCbJJSYN8OpVM2jaJkNNVpjwLfSZ2DDTHkv/aU77FDd2G/J60HfKaCk2Ph... brevo-code:6ef1bdca0140128a0b0cdffd769c529f SPF v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all qtBMR21R d365mktkey=ddj6OfbGqaii6Ldno7ncjtpCUloqmiQexCE31I5kvLkx d365mktkey=NxCSNp09pg2ODxcwQBBZnJi5UqvoA7o7JyoNaLTCVv8x atlassian-domain-verification=BsU55xuh8y74kRFVZazoQjWeG1VcAATPIJrguvE2awdqH5cZd8... google-site-verification=feqg8re59u5z8ekzzXgFwgHuj5G9O0QTrWYnxeOgIJk docusign=ebd7f118-dc7c-4ce6-91ca-3f747263deac mandrill_verify.t_q5rCX1tCbY3wU8lGuzAw mandrill_verify.DANW0ONf1JBY2pYG54OFtQ google-site-verification=1JF9NQtriqjuwlHiwgtObqtynYTPe8yL-cBl9f7qQlI _8e2p87k26m0wwfne0sxfrzqmms41ho6 mandrill_verify.8a70D0gmFAmJUH6Lb04Vzw smartsheet-site-validation=4KWW-0XuqiSuWf1jfE4yu6_bkkzMRh54 MS=ms99328870 facebook-domain-verification=rztxyoajuychu1y5nh8x23kd8mfzqi |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
A+Redirect Chain0 redirect(s), 17 ms totalPASS
https://olympic.org
17 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://olympic.org | 301 | 17 ms | HTTP/1.1 |
A+URL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Consistent
A+HTTP Probe TimingTotal 18 ms — DNS, TCP, TLS, TTFB, content transfer breakdownPASS
Connection waterfall
Domain IntelligenceDomain intelligence data not availableINFO
RDAP and WHOIS lookup both failed