Skip to content
https://wyzecam.com

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
98
GRADE
A+
FIX
0
REVIEW
2
PASS
7
INFO
0
Probed from Madrid, Spain
301 Moved Permanently
Checks
9
7 PASS 2 REVIEW
B
TLS Certificate Expiry & Recommendations
165 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

165
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
CDN & Delivery
Cloudflare
REVIEW
Cloudflare
Info::
Site is served via Cloudflare CDN (edge: CDG)
Got: cf-ray: 9efe813a2a899e9b-CDG
CDN Detected: Cloudflare
Provider Cloudflare Evidence cf-ray: 9efe813a2a899e9b-CDG
A+
DNS Records
2 A records, 40 ms lookup
PASS
2 A records, 40 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.18.16.228, 104.18.17.228
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2606:4700::6812:10e4, 2606:4700::6812:11e4
Info::
2 nameserver(s) configured
Got: dan.ns.cloudflare.com, lara.ns.cloudflare.com
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 40 ms
Got: 40 ms
A104.18.16.228, 104.18.17.228
AAAA2606:4700::6812:10e4, 2606:4700::6812:11e4
CNAME—
NSdan.ns.cloudflare.com, lara.ns.cloudflare.com
MX
0 wyzecam-com.mail.protection.outlook.com
TXT
fshdz23y6h2t6tqsvdkkz489pljzt450
MS=ms98676396
miro-verification=afab0c6777432e72f2a9d28e42f742e6a43c860c
verification-code-site-App_lark=IXKNCdaN2sdh84xfdJUF
google-site-verification=BGt8kwzYa43NGuF4Z1787Mn5baA8Os7_in9Kk3nw_sw
SPF v=spf1 ip4:35.197.114.13 include:servers.mcsv.net include:spf.onlarksuite.com in...
google-site-verification=mI8-xueLc3KigAX-wkMaN2w91jR7ITdllQO583MVafg
MS=ms43288607
knowbe4-site-verification=a78dd9ff4d5c34ca3208d838e7455b6b
CAALookup not available with standard resolver
Resolved in 40 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A
Redirect Chain
1 redirect(s), 319 ms total
PASS
1 redirect(s), 319 ms total
Info::
Single redirect
Got: https://wyzecam.com → https://www.wyze.com/ (301)
Info::
WWW normalization redirect
Info::
Cross-domain redirect detected

https://wyzecam.com

62 ms · HTTP/1.1

301

https://www.wyze.com/

257 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://wyzecam.com30162 msHTTP/1.1cloudflare
2https://www.wyze.com/200257 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

A+
IPv6 Readiness
IPv6 reachable (17 ms)
PASS
IPv6 reachable (17 ms)
Info::
IPv6 is configured and reachable at 2606:4700::6812:10e4, 2606:4700::6812:11e4
Got: 17 ms connect
IPv6 Ready
AAAA Records 2606:4700::6812:10e4, 2606:4700::6812:11e4 Connection Reachable (17 ms)
A+
Crawlability
robots.txt present, sitemap with 20 URLs
PASS
robots.txt present, sitemap with 20 URLs
Info::
robots.txt is present
Got: 2194 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 20 entries
Info::
Sitemap index with 20 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 2194 B Sitemaps referenced 1 User-agents Bingbot, Applebot, Nutch, CCBot, AhrefsBot, ClaudeBot, PerplexityBot, Meta-ExternalAgent, MJ12bot, Googlebot, Google-Extended, OAI-SearchBot, AhrefsSiteAudit, Pinterest, *, GPTBot Blocking No — crawling allowed
# Our LLM policy is located at: https://www.wyze.com/llms.txt

# -------------------------------------------------------------------------
# 1. GLOBAL RULES
# -------------------------------------------------------------------------
User-agent: *
# Core Shopify Plus Blocks
Disallow: /admin
Disallow: /cart
Disallow: /orders
Disallow: /checkouts/
Disallow: /checkout
Disallow: /58004504738/checkouts
Disallow: /58004504738/orders
Disallow: /carts
Disallow: /account
Disallow: /services/login_with_shop
Disallow: /apple-app-site-association
Disallow: /.well-known/shopify/monorail
Disallow: /cdn/wpm/*.js

# Custom Wyze Security/Redirect Block
Disallow: /customer_authentication/*

# SEO Noise & Duplicate Content (GEO Optimization)
Disallow: /collections/*sort_by*
Disallow: /*/collections/*sort_by*
Disallow: /collections/*+*
Disallow: /collections/*%2B*
Disallow: /collections/*%2b*
Disallow: /*/collections/*+*
Disallow: /*/collections/*%2B*
Disallow: /*/collections/*%2b*
Disallow: */collections/*filter*&*filter*
Disallow: /blogs/*+*
Disallow: /blogs/*%2B*
Disallow: /blogs/*%2b*
Disallow: /search
Disallow: /recommendations/products
Disallow: /*/recommendations/products

# Block Remote/Technical Product Variants
Disallow: /products/*-remote
Disallow: /*/products/*-remote

# -------------------------------------------------------------------------
# 2. AI & SEARCH BOT "OPEN DOOR" POLICY
# -------------------------------------------------------------------------
# These bots are allowed to crawl everything NOT restricted above.
User-agent: Googlebot
User-agent: Google-Extended
User-agent: GPTBot
User-agent: OAI-SearchBot
User-agent: ClaudeBot
User-agent: Bingbot
User-agent: PerplexityBot
User-agent: Applebot
User-agent: Meta-ExternalAgent
User-agent: CCBot
Allow: /

# -------------------------------------------------------------------------
# 3. RESTRICTIVE BOTS (Aggressive Scrapers)
# -------------------------------------------------------------------------
User-agent: Nutch
Disallow: /

User-agent: AhrefsBot
User-agent: AhrefsSiteAudit
Crawl-delay: 10

User-agent: MJ12bot
Crawl-delay: 10

User-agent: Pinterest
Crawl-delay: 1

Sitemap: https://www.wyze.com/sitemap.xml
sitemap.xml 200 OK
Type Sitemap Index URLs 20 entries Valid XML Yes
Child Sitemaps:
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

301https://www.wyzecam.com/
200https://wyzecam.com/

Preferred variant: non-www

HTTP → HTTPS

301http://wyzecam.com/ → https://www.wyze.com/

Consistent

A+
Domain Intelligence
wyzecam.com — via GoDaddy.com, LLC, 8 years, 10 months old
PASS
wyzecam.com — via GoDaddy.com, LLC, 8 years, 10 months old
Info::
Domain registered until Jul 21, 2026 (3 months remaining)
Info::
DNSSEC is not enabled
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Info::
Registrar: GoDaddy.com, LLC
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Domain expiry

9 days

July 21, 2026

SSL certificate

165 days

Issued by DigiCert Inc

Domain age

8 years, 10 months

Registered July 21, 2017

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

Unknown

2606:4700::6812:10e4

Registrar

GoDaddy.com, LLC

Unlocked 2 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Renew the domain or enable auto-renewal to prevent accidental expiry
  • Enable DNSSEC to protect visitors from DNS spoofing
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar GoDaddy.com, LLC
Created July 21, 2017 (8 years, 10 months ago)
Expires July 21, 2026 (3 months)
Last Updated July 22, 2025
Name Servers dan.ns.cloudflare.com, lara.ns.cloudflare.com
DNSSEC Not enabled
Hosting
IP Address 2606:4700::6812:10e4
Data source: rdap (0.1s)

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more ▾

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 103 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
41 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
17 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
24 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
103 ms
Total Time Total request time from DNS lookup through full response.
103 ms

Connection waterfall

DNS Lookup 41 ms TCP Connect 17 ms TLS Handshake 24 ms Server Processing 22 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback