Infrastructure
· 17 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.CReverse DNSAction0/4 IPs match cert SANREVIEW
BTLS Certificate Expiry & Recommendations89 days until leaf cert expires — 2 issues to addressREVIEW
Certificate validity
Recommended actions
- Submit your domain to hstspreload.org to be added to the Chrome preload list
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records2 A records, 35 ms lookupPASS
| A | 172.67.138.81, 104.21.38.203 |
| AAAA | 2606:4700:3033::6815:26cb, 2606:4700:3031::ac43:8a51 |
| CNAME | — |
| NS | colin.ns.cloudflare.com, monroe.ns.cloudflare.com |
| MX | 8 route1.mx.cloudflare.net 32 route3.mx.cloudflare.net 55 route2.mx.cloudflare.net |
| TXT | SPF v=spf1 include:_spf.mx.cloudflare.net ~all google-site-verification=4kJn3SFoN3CKfscYtJG6ACDtE57KklmE-UD75TDRaWQ |
| CAA | Lookup not available with standard resolver |
A+Subdomain TakeoverNo subdomain takeover risk detectedPASS
A+DNSSECSigned and validatingPASS
ACAA Recordsissue: comodoca.com, digicert.com, letsencrypt.org, pki.goog, ssl.com | issuewild: comodoca.com, digicert.com, letsencrypt.org, pki.goog, ssl.comPASS
A+Multi-Resolver DNS SpeedMean 17ms across 3 resolvers (spread 17ms)PASS
A+Redirect ChainNo redirects — direct accessPASS
https://ptfarmada.com
84 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://ptfarmada.com | 200 | 84 ms | HTTP/1.1 | cloudflare |
A+IPv6 ReadinessIPv6 reachable (17 ms)PASS
A+Crawlabilityrobots.txt present, sitemap with 10 URLsPASS
User-agent: *
Allow: /
Disallow: /admin/
Sitemap: https://ptfarmada.com/sitemap.xml
A+URL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Consistent
A+Domain Intelligenceptfarmada.com — via Cloudflare, Inc., 6 days oldPASS
356 days
August 17, 2027
89 days
Issued by Google Trust Services
6 days
Registered August 17, 2026
Enabled
Protects against DNS spoofing
Unknown
2606:4700:3031::ac43:8a51
Cloudflare, Inc.
Expiry timeline
Recommended actions
- Newly registered domain — build backlinks and content to establish SEO trust
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Newly registered domains may face SEO trust challenges. Search engines generally give more authority to older domains. This is informational — not a problem to fix.
Informational: domain age. Newer domains may have lower trust signals in spam/security filters.
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice