Skip to content
https://esignature.com.np/website-design-development-nepal

Infrastructure

· 17 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
89
GRADE
B
FIX
1
REVIEW
7
PASS
8
INFO
1
Probed from Madrid, Spain
200 OK
Checks
17
8 PASS 7 REVIEW 1 FIX
D
HTTP Probe Timing
Action
Total 2876 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
FIX
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
44 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
17 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
23 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
2.88 s
Total Time Total request time from DNS lookup through full response.
2.88 s

Connection waterfall

DNS Lookup 44 ms TCP Connect 17 ms TLS Handshake 23 ms Server Processing 2.79 s Content Transfer 1 ms
B
DNSSEC
Unsigned (DNSSEC not deployed)
REVIEW
Unsigned (DNSSEC not deployed)
Info::
DNSSEC is not deployed
The zone is not DNSSEC-signed. Users on validating resolvers (Cloudflare 1.1.1.1, Quad9 9.9.9.9, growing default in mobile resolvers) get no protection against DNS spoofing for this domain. Most registrars now offer DNSSEC at a single click; consider enabling it for sites where authenticity matters (banking, healthcare, government).
B
CAA Records
No CAA records (any CA may issue certificates)
REVIEW
No CAA records (any CA may issue certificates)
Info::
No CAA records published
Without CAA records, any publicly-trusted CA can issue certificates for this domain. Adding a CAA record (`yourdomain. IN CAA 0 issue "letsencrypt.org"`) restricts issuance to CAs you authorize. Required by CAB Forum baseline since 2017; the default of 'any CA' is widely supported but is the broader attack surface for issuance fraud.
C
Reverse DNS
Action
0/4 IPs match cert SAN
REVIEW
0/4 IPs match cert SAN
Info::
PTR lookup failed for 188.114.96.2: lookup 188.114.96.2: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 188.114.97.2: lookup 188.114.97.2: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2a06:98c1:3120::2: lookup 2a06:98c1:3120::2: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2a06:98c1:3121::2: lookup 2a06:98c1:3121::2: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Critical::
HTTP version does not redirect to HTTPS
Got: HTTP 429 Expected: 301 redirect to HTTPS

www / non-www

429https://www.esignature.com.np/website-design-development-nepal
200https://esignature.com.np/website-design-development-nepal

Trailing Slash

429https://esignature.com.np/website-design-development-nepal/
200https://esignature.com.np/website-design-development-nepal

HTTP → HTTPS

429http://esignature.com.np/website-design-development-nepal

HTTP version does not redirect to HTTPS

B
TLS Certificate Expiry & Recommendations
57 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

57
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
Operational Status Page
No status page link detected
REVIEW
No status page link detected
Info::
No operational status page link detected
Status pages communicate planned maintenance and incidents to users -- a hallmark of operationally-mature services. Most SaaS teams publish one via Atlassian Statuspage, Instatus, BetterUptime, or a self-hosted Cachet. Smaller sites legitimately don't need one; flagged as Info, not a failure.
B
Health Check Endpoint
No conventional health endpoint found
REVIEW
No conventional health endpoint found
Info::
No conventional health endpoint found
Health endpoints (/health, /healthz, /status, /ping, /api/health) let uptime monitors, load balancers, and orchestration systems (Kubernetes, ECS, Fly.io) verify the service is alive. Marketing sites and small services often skip them legitimately; flagged as Info, not a failure. Probe results: /api/health: 404, /health: 429, /healthz: 429, /ping: 429, /status: 429.
A+
DNS Records
2 A records, 45 ms lookup
PASS
2 A records, 45 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 188.114.96.2, 188.114.97.2
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2a06:98c1:3120::2, 2a06:98c1:3121::2
Info::
2 nameserver(s) configured
Got: lauryn.ns.cloudflare.com, cesar.ns.cloudflare.com
Info::
1 mail exchanger(s) configured
Info::
SPF record present in TXT
Info::
DNS resolution time: 45 ms
Got: 45 ms
A188.114.96.2, 188.114.97.2
AAAA2a06:98c1:3120::2, 2a06:98c1:3121::2
CNAME—
NSlauryn.ns.cloudflare.com, cesar.ns.cloudflare.com
MX
1 mail.esignature.com.np
TXT
v=DMARC1; p=none;
SPF v=spf1 +ip4:198.46.81.3 +include:relay.mailchannels.net ~all
linkedin-site-verification=2c12a7fe-b2b7-4012-a925-5c009dc19bbd
CAALookup not available with standard resolver
Resolved in 45 ms
A+
Subdomain Takeover
No subdomain takeover risk detected
PASS
No subdomain takeover risk detected
Info::
No CNAME record present
A+
Multi-Resolver DNS Speed
Mean 18ms across 3 resolvers (spread 24ms)
PASS
Mean 18ms across 3 resolvers (spread 24ms)
Info::
Quad9: 4ms
Got: 4ms via 9.9.9.9:53
Info::
Cloudflare: 22ms
Got: 22ms via 1.1.1.1:53
Info::
Google: 28ms
Got: 28ms via 8.8.8.8:53
A+
Redirect Chain
No redirects — direct access
PASS
No redirects — direct access
Info::
No redirects — direct access
Got: https://esignature.com.np/website-design-development-nepal

https://esignature.com.np/website-design...

607 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://esignature.com.np/website-design...200607 msHTTP/1.1cloudflare
A+
IPv6 Readiness
IPv6 reachable (17 ms)
PASS
IPv6 reachable (17 ms)
Info::
IPv6 is configured and reachable at 2a06:98c1:3120::2, 2a06:98c1:3121::2
Got: 17 ms connect
IPv6 Ready
AAAA Records 2a06:98c1:3120::2, 2a06:98c1:3121::2 Connection Reachable (17 ms)
A+
Crawlability
robots.txt present, sitemap with 172 URLs
PASS
robots.txt present, sitemap with 172 URLs
Info::
robots.txt is present
Got: 475 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 172 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 475 B Sitemaps referenced 1 User-agents GPTBot, ChatGPT-User, Google-Extended, Claude-Web, PerplexityBot, OAI-SearchBot, Bingbot, DuckAssistBot, *, CCBot, Googlebot Blocking No — crawling allowed
User-agent: *
Disallow: /admin/
Disallow: /login/
Disallow: /tmp/
Disallow: /private/
Disallow: /cgi-bin/
User-agent: GPTBot
Allow: /
User-agent: ChatGPT-User
Allow: /
User-agent: Google-Extended
Allow: /
User-agent: CCBot
Allow: /
User-agent: Claude-Web
Allow: /
User-agent: PerplexityBot
Allow: /
User-agent: OAI-SearchBot
Allow: /
User-agent: Googlebot
Allow: /
User-agent: Bingbot
Allow: /
User-agent: DuckAssistBot
Allow: /
Sitemap: https://esignature.com.np/sitemap.xml
sitemap.xml 200 OK
Type URL Set URLs 172 entries Valid XML Yes
Sample URLs:
A
CDN & Delivery
Document and assets on Cloudflare
PASS
Document and assets on Cloudflare
Info::
Document is served via Cloudflare CDN (edge: CDG)
Got: cf-ray: a550b0815bf7482b-CDG
Info::
CDN cache status: DYNAMIC
Info::
Assets on Cloudflare: cdnjs.cloudflare.com (assets: 4), cache HIT
Got: cf-ray: a550b31d2db8f4f5-CDG
Document served via CDN: Cloudflare
Provider Cloudflare Cache Status DYNAMIC Evidence cf-ray: a550b0815bf7482b-CDG

Asset hosts on a CDN

  • cdnjs.cloudflare.com — Cloudflare · assets: 4 · Cache Status: HIT

Other asset hosts

  • www.googletagmanager.com — assets: 5 · Google
  • fonts.googleapis.com — assets: 2 · below probe threshold
  • stackpath.bootstrapcdn.com — assets: 2 · below probe threshold
  • use.fontawesome.com — assets: 2 · below probe threshold
  • ajax.googleapis.com — assets: 1 · below probe threshold
  • cdn.jsdelivr.net — assets: 1 · below probe threshold
  • kit.fontawesome.com — assets: 1 · below probe threshold
  • www.google.com — assets: 1 · below probe threshold
  • www.gstatic.com — assets: 1 · below probe threshold
A+
CDN Cache Observability
Cache state: DYNAMIC
PASS
Cache state: DYNAMIC
Info::
CDN cache state observable via 1 header(s)
Got: cf-cache-status=DYNAMIC
Domain Intelligence
Domain intelligence data not available
INFO
Domain intelligence data not available

RDAP and WHOIS lookup both failed

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback