Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BTLS Certificate Expiry & Recommendations130 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Submit your domain to hstspreload.org to be added to the Chrome preload list
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
BCDN & DeliveryGoogle Cloud CDNREVIEW
A+DNS Records1 A records, 113 ms lookupPASS
| A | 35.186.247.156 |
| AAAA | — |
| CNAME | — |
| NS | ns-cloud-d3.googledomains.com, ns-cloud-d1.googledomains.com, ns-cloud-d4.googledomains.com, ns-cloud-d2.googledomains.com |
| MX | 10 aspmx.l.google.com 20 alt1.aspmx.l.google.com 20 alt2.aspmx.l.google.com 50 alt4.aspmx.l.google.com 50 alt3.aspmx.l.google.com |
| TXT | atlassian-domain-verification=iiuI98qnuSg2OEb25fN3FJ3Rrmh+ur5j+LY4jFtC1Z2LYQGGTd... cursor-domain-verification-yybzt5=ZwvnX7XES6QcFtlwVDBUmr8vf dropbox-domain-verification=mbrg6ujh4r90 53bwpzxr3bwymbd8mggzcggsh00k72tw cloudflare_dashboard_sso=45d126329fa9f9042859b736e9b6ecca anthropic-domain-verification-bf2t84=NjmsryxsUN1QUHk0YTnPg61s0 atlassian-sending-domain-verification=66b25870-b898-444e-b59f-680b2efa07ba google-site-verification=ObswIIBtNaASFVNuRT7g0gqpFsnfp83TdHASnP8gcxs google-site-verification=i0zvNt7LI2Y0qQRWIFCKYPud8_MGng5i5bBb3wVgljM MS=83FA471E7570AA78ED77B729EFE77ADF28C6DFA2 _hfh8pdnbjmfdca0zkigvjq20wepe6ea google-site-verification=O_I2cXzFPatyfqnLOI7WFlFbB5ewmERMnUOMt31BRjs openai-domain-verification=dv-sLSoiuAzGoi1JmntxL3ZOTzl 82CB80AA6A apple-domain-verification=Aq2K4zadyt2CS6sK miro-verification=058fca15d28773dcefde3bef106f4184adf32167 fastly-domain-delegation-W8k1SJs3XuoC2JQZYPkdsmdKdd09L0V0wx4-20180612 mgverify=b1b31496f8a11b6a792fafc7f5c3a3b3ff5ea0b4ff73702e6868a7821bdc4825 google-site-verification=IUqYHsya4QqI4hELwmRVS7gzTtVSQVlKom181og5xNs linear-domain-verification=d77mb72my2q9 h1-domain-verification=R5Hoe4rxMTsiMx2DwiCV7GNNhjh6vgonQE2YVkbMQfmcd8fs google-site-verification=vtlO-FzJLXp_VnrOYVCLcgzjUPJDgvP_i6genmZfp9s linear-domain-verification=993u3eirym9h 699b17b5-0406-44b1-b642-39b398e071cb stripe-verification=0FA6345EA1A89D0885B16CF56AB6C893C19D4AB8F673B0B8AE1E6CF33FDD... docusign=4d3c0a3c-f31f-47b5-83b4-913749ae5eda notion-domain-verification=DIDkO5IIeUGX0AMjzjBjTmGcy6vIjOiH7lTvGf7yJj4 SPF v=spf1 include:_spf.google.com include:mail.zendesk.com include:sendgrid.net inc... ZOOM_verify_EG6_kEWER6u4eHEy-i0lBw google-site-verification=FHGqXJeILY9odYta__5tuEzAk9Z3GPYBxnmtzrV9q3U |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 313 ms totalPASS
https://sentry.io
177 ms · HTTP/1.1
https://sentry.io/welcome/
136 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://sentry.io | 302 | 177 ms | HTTP/1.1 | nginx |
| 2 | https://sentry.io/welcome/ | 200 | 136 ms | HTTP/1.1 | nginx |
See the visual redirect chain in the HTTP Probe tab →
If permanent, use 301 instead.
302 (Found) is for genuinely temporary redirects — if this redirect is permanent, switch to 301 to preserve SEO equity.
Learn more ▾ ▴
Search engines treat 302 as temporary, keeping the original URL indexed and not transferring full link equity to the destination. Use 301 (Moved Permanently) for permanent redirects (HTTP→HTTPS, www-vs-non-www, URL restructures).
Source: Google Search Central
A+Crawlabilityrobots.txt present, sitemap with 3 URLsPASS
User-agent: *
Disallow: /api/
Allow: /
Sitemap: https://sentry.io/sitemap-index.xml
A+URL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Consistent
A+Domain Intelligencesentry.io — via Gandi SAS, 14 years, 2 months old, hosted on Google CloudPASS
268 days
April 7, 2027
130 days
Issued by DigiCert Inc
14 years, 2 months
Registered April 7, 2012
Status unknown
Protects against DNS spoofing
Google Cloud
ASN AS396982
35.186.247.156
Gandi SAS
Expiry timeline
Domain cannot be transferred without explicit unlock from the registrar. This protects against unauthorized transfers.
Registrar lock (clientTransferProhibited et al.) prevents unauthorized domain transfers — strongest defense against domain hijacking.
Source: ICANN / domain-security best practice