https://www.eclipse.org
Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.SCORE
90
GRADE
A
FIX
1
REVIEW
2
PASS
6
INFO
0
Probed from Madrid, Spain
200 OK
Checks
96 PASS 2 REVIEW 1 FIX
DCDN & DeliveryActionNo CDN detectedFIX
CDN & Delivery
ActionNo CDN detected
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 Readiness
ActionNo IPv6 support
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
Why this matters
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BTLS Certificate Expiry & Recommendations256 days until leaf cert expires — 4 issues to addressREVIEW
TLS Certificate Expiry & Recommendations
256 days until leaf cert expires — 4 issues to address
Certificate validity
256
days left
0d 30d 60d 90d+
Recommended actions
- Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
- Submit your domain to hstspreload.org to be added to the Chrome preload list
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
ADNS Records1 A records, 117 ms lookupPASS
DNS Records
1 A records, 117 ms lookup
1 A records, 117 ms lookup
Info::
Resolves to 1 IPv4 address(es)
Got: 198.41.30.198
Info::
Single A record — no DNS redundancy
Multiple A records provide failover if one server goes down.
Info::
No IPv6 (AAAA) records
Warning::
CNAME record at zone apex
A CNAME at the zone apex can break MX and NS records. Use ALIAS/ANAME or A records instead.
Got: eclipse.org
Info::
3 nameserver(s) configured
Got: dns3.cloud.qudatacentres.com, dns1.cloud.qudatacentres.com, dns2.cloud.qudatacentres.com
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 117 ms
Got: 117 ms
| A | 198.41.30.198 |
| AAAA | — |
| CNAME | eclipse.org |
| NS | dns3.cloud.qudatacentres.com, dns1.cloud.qudatacentres.com, dns2.cloud.qudatacentres.com |
| MX | 10 mail.eclipse.org |
| TXT | _su9tw1h897ql2p8uaekiy7ez2lif1ca status-page-domain-verification=vfmzswnh0s41 gradle-verification=GNMKNUBAIJ3U1IV0S8RJQFJNS5FAN google-site-verification=ybL57Lxa7uJpNgasvaIl8JomCQgR9G0SLnNZONTiMMM MS=F823C75444C19F0D5800567CF24F54B181EB8B18 SPF v=spf1 a:mail.eclipse.org mx include:stspg-customer.com include:servers.mcsv.net... |
| CAA | Lookup not available with standard resolver |
Resolved in 117 ms
Multiple A records provide failover if one server goes down.
Why this matters
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
A CNAME at the zone apex can break MX and NS records. Use ALIAS/ANAME or A records instead.
Why this matters
CNAME at the apex (example.com) breaks every other apex record (MX, TXT, NS) — DNS-protocol violation per RFC 1034.
Learn more ▾ ▴
RFC 1034 forbids CNAME alongside other records at the same name. Some DNS providers offer ALIAS / ANAME / flattened-CNAME records that work around this — use those instead. Otherwise apex-level CNAME breaks email (no MX), domain ownership verification (no TXT), and more.
Source: RFC 1034
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Why this matters
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
A+Redirect ChainNo redirects — direct accessPASS
Redirect Chain
No redirects — direct access
No redirects — direct access
Info::
No redirects — direct access
Got: https://www.eclipse.org
https://www.eclipse.org
524 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://www.eclipse.org | 200 | 524 ms | HTTP/1.1 | nginx |
A+Crawlabilityrobots.txt present, sitemap with 519 URLsPASS
Crawlability
robots.txt present, sitemap with 519 URLs
robots.txt present, sitemap with 519 URLs
Info::
robots.txt is present
Got: 3579 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 519 entries
Info::
robots.txt does not reference a sitemap
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
Why this matters
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
robots.txt 200 OK
Size 3579 B Sitemaps referenced 0 User-agents Black Hole, Harvest/1.5, Kenjin Spider, SpankBot, TightTwatBot, Website Quester, Titan, Wget, BlowFish/1.0, NetAttache Light 1.1, lwp-trivial/1.34, Mata Hari, TurnitinBot, Alexibot, EmailCollector, hloader, lwp-trivial, asterias, Openfind, Web Image Collector, BackDoorBot/1.0, Crescent, httplib, ProPowerBot/2.14, URLy Warning, WWW-Collector-E, Bullseye/1.0, TheNomad, Xenu's, HTTrack 3.0, DISCo Pump 3.1, EmailSiphon, CherryPickerSE/1.0, ExtractorPro, humanlinks, suzuran, True_Robot, webmirror, BunnySlippers, CopyRightCheck, cosmos, QuepasaCreep, NetAttache, Telesoft, VCI WebViewer VCI WebViewer Win32, WebReaper, BuiltBotTough, CherryPickerElite/1.0, JennyBot, libWeb/clsHTTP, psbot, VCI, WebmasterWorldForumBot, MIIxpc/4.2, SuperBot/2.6, Teleport, WebEnhancer, WebZip/4.0, Mister PiX, QueryN Metasearch, True_Robot/1.0, WebZip, Xenu's Link Sleuth 1.1c, HTTrack, InfoNaviRobot, RepoMonkey Bait & Tackle/v1.01, RMA, turingos, WebStripper/2.02, DittoSpyder, LinkWalker, toCrawl/UrlDispatcher, Wget/1.5.3, EroCrawler, LinkextractorPro, RepoMonkey, Zeus, Cegbfeieh, spanner, Szukacz/1.4, WebCopier, LexiBot, WebSauger, NetAnts, Zeus 32297 Webster Pro V2.9 Win32, Foobot, Microsoft URL Control - 6.00.8169, MIIxpc, moget, SuperBot, webcopy, NICErsPRO, LinkScan/8.1a Unix, The Intraformant, WebBandit/3.50, EmailWolf, WebBandit, MJ12bot, Crescent Internet ToolPak HTTP OLE Control v.1.0, Microsoft URL Control - 5.01.4511, SiteSnagger, WebAuto, website extractor, Webster Pro, WebStripper, CheeseBot, WinHTTrack, *, BotALot, moget/2.1, Openfind data gathere, ProWebWalker, Wget/1.6, 008, CherryPicker, NetMechanic, Offline Explorer Blocking No — crawling allowed
User-agent: *
Disallow: /downloads/download.php
Disallow: /search/
Disallow: /go/
Disallow: /forums/pdf.php
Disallow: /forums/index.php/m
Disallow: /forums/index.php/sp/
Disallow: /forums/index.php/ef/
Disallow: /forums/index.php/mv/
Disallow: /forums/index.php/r/
Disallow: /forums/index.php/pmm/
Disallow: /forums/index.php/rm/
Disallow: /forums/index.php/sel/
Disallow: /forums/index.php/pv/
Disallow: /forums/index.php/ma/
Disallow: /forums/index.php/u/
Disallow: /forums/index.php/s/
Disallow: /forums/index.php/h/
Disallow: /forums/index.php/i/
Disallow: /forums/index.php/l/
Disallow: /forums/rdf.php
User-agent: TurnitinBot
User-agent: QuepasaCreep
User-agent: Alexibot
User-agent: asterias
User-agent: BackDoorBot/1.0
User-agent: Black Hole
User-agent: BlowFish/1.0
User-agent: BotALot
User-agent: BuiltBotTough
User-agent: Bullseye/1.0
User-agent: BunnySlippers
User-agent: Cegbfeieh
User-agent: CheeseBot
User-agent: CherryPicker
User-agent: CherryPickerElite/1.0
User-agent: CherryPickerSE/1.0
User-agent: CopyRightCheck
User-agent: cosmos
User-agent: Crescent
User-agent: Crescent Internet ToolPak HTTP OLE Control v.1.0
User-agent: DISCo Pump 3.1
User-agent: DittoSpyder
User-agent: EmailCollector
User-agent: EmailSiphon
User-agent: EmailWolf
User-agent: EroCrawler
User-agent: ExtractorPro
User-agent: Foobot
User-agent: Harvest/1.5
User-agent: hloader
User-agent: httplib
User-agent: humanlinks
User-agent: InfoNaviRobot
User-agent: JennyBot
User-agent: Kenjin Spider
User-agent: LexiBot
User-agent: libWeb/clsHTTP
User-agent: LinkextractorPro
User-agent: LinkScan/8.1a Unix
User-agent: LinkWalker
User-agent: lwp-trivial
User-agent: lwp-trivial/1.34
User-agent: Mata Hari
User-agent: Microsoft URL Control - 5.01.4511
User-agent: Microsoft URL Control - 6.00.8169
User-agent: MIIxpc
User-agent: MIIxpc/4.2
User-agent: Mister PiX
User-agent: moget
User-agent: moget/2.1
User-agent: NetAnts
User-agent: NetAttache
User-agent: NetAttache Light 1.1
User-agent: NetMechanic
User-agent: NICErsPRO
User-agent: Offline Explorer
User-agent: Openfind
User-agent: Openfind data gathere
User-agent: ProPowerBot/2.14
User-agent: ProWebWalker
User-agent: psbot
User-agent: QueryN Metasearch
User-agent: RepoMonkey
User-agent: RepoMonkey Bait & Tackle/v1.01
User-agent: RMA
User-agent: SiteSnagger
User-agent: SpankBot
User-agent: spanner
User-agent: SuperBot
User-agent: SuperBot/2.6
User-agent: suzuran
User-agent: Szukacz/1.4
User-agent: Teleport
User-agent: Telesoft
User-agent: The Intraformant
User-agent: TheNomad
User-agent: TightTwatBot
User-agent: Titan
User-agent: toCrawl/UrlDispatcher
User-agent: True_Robot
User-agent: True_Robot/1.0
User-agent: turingos
User-agent: URLy Warning
User-agent: VCI
User-agent: VCI WebViewer VCI WebViewer Win32
User-agent: Web Image Collector
User-agent: WebAuto
User-agent: WebBandit
User-agent: WebBandit/3.50
User-agent: WebCopier
User-agent: webcopy
User-agent: WebEnhancer
User-agent: WebmasterWorldForumBot
User-agent: webmirror
User-agent: WebReaper
User-agent: WebSauger
User-agent: website extractor
User-agent: Website Quester
User-agent: Webster Pro
User-agent: WebStripper
User-agent: WebStripper/2.02
User-agent: WebZip
User-agent: WebZip/4.0
User-agent: Wget
User-agent: Wget/1.5.3
User-agent: Wget/1.6
User-agent: WinHTTrack
User-agent: WWW-Collector-E
User-agent: Xenu's
User-agent: Xenu's Link Sleuth 1.1c
User-agent: Zeus
User-agent: Zeus 32297 Webster Pro V2.9 Win32
User-Agent: MJ12bot
User-agent: HTTrack
User-agent: HTTrack 3.0
User-agent: TurnitinBot
User-agent: QuepasaCreep
User-agent: 008
Disallow: /
sitemap.xml 200 OK
Type URL Set URLs 519 entries Valid XML Yes
A+URL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: www)
Info::
HTTP correctly 301-redirects to HTTPS
www / non-www
200https://www.eclipse.org/
302https://eclipse.org/
Preferred variant: www
HTTP → HTTPS
301http://www.eclipse.org/ → https://www.eclipse.org/
Consistent
A+Domain Intelligenceeclipse.org — via Network Solutions, LLC, 29 years, 4 months old, hosted on RCC-RDC-AS - Rogers Communications Canada Inc., CAPASS
Domain Intelligence
eclipse.org — via Network Solutions, LLC, 29 years, 4 months old, hosted on RCC-RDC-AS - Rogers Communications Canada Inc., CA
eclipse.org — via Network Solutions, LLC, 29 years, 4 months old, hosted on RCC-RDC-AS - Rogers Communications Canada Inc., CA
Info::
Domain registered until Apr 15, 2034 (8 years, 1 months remaining)
Info::
DNSSEC is not enabled
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Info::
Registrar: Network Solutions, LLC
Info::
Hosting: RCC-RDC-AS - Rogers Communications Canada Inc., CA
Got: AS29988
Domain expiry
2833 days
April 15, 2034
SSL certificate
256 days
Issued by DigiCert Inc
Domain age
29 years, 4 months
Registered April 14, 1997
DNSSEC
Not enabled
Protects against DNS spoofing
Hosting
RCC-RDC-AS - Rogers Communications Canada Inc., CA
ASN AS29988
198.41.30.198
Registrar
Network Solutions, LLC
Lock status unknown 3 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
- Enable DNSSEC to protect visitors from DNS spoofing
Registrar Network Solutions, LLC
Created April 14, 1997 (29 years, 4 months ago)
Expires April 15, 2034 (8 years, 1 months)
Last Updated February 10, 2025
Name Servers dns1.datacentres.rogers.com, dns2.datacentres.rogers.com, dns3.datacentres.rogers.com
DNSSEC Not enabled
Hosting
IP Address 198.41.30.198
ASN AS29988 (RCC-RDC-AS - Rogers Communications Canada Inc., CA)
Provider RCC-RDC-AS - Rogers Communications Canada Inc., CA
Data source: rdap (0.9s)
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Why this matters
Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.
Learn more ▾ ▴
DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.
Source: ICANN / RFC 4033
AHTTP Probe TimingTotal 563 ms — DNS, TCP, TLS, TTFB, content transfer breakdownPASS
HTTP Probe Timing
Total 563 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
38 msTCP Connect TCP Connect — time to establish a TCP connection to the server.
129 msTLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
266 msTime to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
563 msTotal Time Total request time from DNS lookup through full response.
564 msConnection waterfall
DNS Lookup 38 ms TCP Connect 129 ms TLS Handshake 266 ms Server Processing 130 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.