Skip to content
https://time.com

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
93
GRADE
A
FIX
0
REVIEW
2
PASS
7
INFO
0
Probed from Santa Clara, United States
200 OK
Checks
9
7 PASS 2 REVIEW
C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

C
TLS Certificate Expiry & Recommendations
Action
19 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

19
days left
0d 30d 60d 90d+
Renew soon — under 30 days remaining

Recommended actions

  • Renew certificate — 19 days remaining
  • Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+
DNS Records
4 A records, 15 ms lookup
PASS
4 A records, 15 ms lookup
Info::
Resolves to 4 IPv4 address(es)
Got: 151.101.3.52, 151.101.131.52, 151.101.67.52, 151.101.195.52
Info::
No IPv6 (AAAA) records
Info::
4 nameserver(s) configured
Got: dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net
Info::
5 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 15 ms
Got: 15 ms
A151.101.3.52, 151.101.131.52, 151.101.67.52, 151.101.195.52
AAAA—
CNAME—
NSdns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net
MX
1 aspmx.l.google.com
5 alt2.aspmx.l.google.com
5 alt1.aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
TXT
MS=ms29369399
MS=ms82252414
d25h5mis1xkx6t.cloudfront.net
d2ui9nnamrs90a.cloudfront.net
_ctk70nhwf7p4b8x1qj7qbktvaqk61so
_erp6efm4nh2adi86mlbulfbt6tib78i
_py36delibd4b67nimszksh8ak1y3374
ZOOM_verify_bzijKevE4xQ6ZDUKZXC1hl
apple-domain-verification=N28wrioNU3ynpxLU
docusign=3bc4cebc-b475-402a-85d3-5bdc15ec8af5
jamf-site-verification=87WfhercEjwL8sNL32kdvA
jamf-site-verification=oCncFWaydjYnb05EqaLL3Q
openai-domain-verification=dv-QMM3mdP3BeSDPDRYGi04uHcu
openai-domain-verification=dv-tUsE1gBsBbDTnbsH2HV6kmIC
mongodb-site-verification=Ru5QtdQhXmo14irx2raA1HUoorhijQoZ
facebook-domain-verification=u27a6xq3jf0wefngdl43tukaif4h91
smartsheet-site-validation=xLX1FZAOW1XpZ6rvLDFaQAjJyldzSMD5
onetrust-domain-verification=8b1d76064c704281a9a73005d042a4bd
anthropic-domain-verification-q9n3tg=cBBH8yGQWYRhUR2NeV0frsZTp
slack-domain-verification=yXCTB2FtQGLo20MdJaKgHwMHdpYb0jEMkJwpA4sZ
google-site-verification=CZLtrEtXICkKdVI2KPODQ6BN8ZpjenbgVuRFbnQi4So
google-site-verification=L9bonByL82ay1IZibs5Dogu6IWqfcJfSxNiszm9k_IU
google-site-verification=OmGWrpk-rnozuCrMP-ju32WeEf8gwO3gYsDmgTYPKgQ
google-site-verification=R05S4oN1f2pYfvNk6TyJl699jeVKBepFxxaZioigodU
google-site-verification=cKBPop8tXdt1cPh2IcyChxlmkjAMKD0oEYzUcBfBJq0
google-site-verification=dUkrwcI6UUkTNiTFi8YXabuGM8W8GBG5RPGTcjxVcyo
google-site-verification=hA9c-cMQhZs8Ctq4AMlrJSMepvPZkZYaGXe2NeUObgQ
notion-domain-verification=M4zfeQiDcuDEI6tdW6oxbAmgOgvgzOfUqPEYwMlkC0w
zapier-domain-verification-challenge=fd1df879-d018-430f-901e-5c7032530304
_globalsign-domain-verification=eRi2ZQZJ99fAou8jrSC06eUJpasrvj8YgWl21vaW5G
78UC9yVP0t41WOHMwbhHq33V0IZJTL7Lna8+FnXKLhat7SZ8oXFTnSUEJDwYM0otMKFtV8kLKmqce9uD...
adobe-idp-site-verification=f156d69676f01a5fdbb783b2313c1b98a30fe75b832d8b04da98...
tollbit-domain-verification=b42d076ebd6673fe3faf1951441c4b26c9c028e7d2b9378d6f0d...
SPF v=spf1 include:_spf.google.com include:_spf.psm.knowbe4.com include:_spf.ultipro...
CAALookup not available with standard resolver
Resolved in 15 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+
Redirect Chain
No redirects — direct access
PASS
No redirects — direct access
Info::
No redirects — direct access
Got: https://time.com

https://time.com

18 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://time.com20018 msHTTP/1.1
A+
Crawlability
robots.txt present, sitemap with 5441 URLs
PASS
robots.txt present, sitemap with 5441 URLs
Info::
robots.txt is present
Got: 2220 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 5441 entries
Info::
Sitemap index with 5441 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 2220 B Sitemaps referenced 7 User-agents *, Googlebot Blocking No — crawling allowed
User-Agent: *
Allow: /

User-Agent: Googlebot
Allow: /replatform/_next/image*
Disallow: /?search*
Disallow: /*?pano=*
Disallow: */munich/index_html*
Disallow: /*?__rmid___get___page
Disallow: /*?*__hsfp
Disallow: /*?*__hstc
Disallow: /*?*__rmid
Disallow: /*?*__rmidpage
Disallow: /*?*/*ref
Disallow: /*?*002/*0902
Disallow: /*?*2&hubs_content
Disallow: /*?*ajs_event
Disallow: /*?*app
Disallow: /*?*attachment_id
Disallow: /*?*author
Disallow: /*?*bcpid
Disallow: /*?*bcpidpage
Disallow: /*?*cat
Disallow: /*?*controlsVisibleOnLoad
Disallow: /*?*country
Disallow: /*?*curator
Disallow: /*?*edition
Disallow: /*?*egotecpage
Disallow: /*?*fbclid
Disallow: /*?*hl
Disallow: /*?*hsCtaTracking
Disallow: /*?*hubs_signup-cta
Disallow: /*?*iframe
Disallow: /*?*iid
Disallow: /*?*industry
Disallow: /*?*inline-read-more
Disallow: /*?*kwp_4
Disallow: /*?*library
Disallow: /*?*limit
Disallow: /*?*linkId
Disallow: /*?*luicode
Disallow: /*?*offset
Disallow: /*?*omnil
Disallow: /*?*onwardjourney
Disallow: /*?*origin
Disallow: /*?*page
Disallow: /*?*PageSpeed
Disallow: /*?*plan
Disallow: /*?*poy-poll
Disallow: /*?*ref
Disallow: /*?*reviews_page
Disallow: /*?*scrape
Disallow: /*?*scriptPath
Disallow: /*?*source
Disallow: /*?*sr_source
Disallow: /*?*subscription
Disallow: /*?*ua
Disallow: /*?*utm
Disallow: /*?*utm_campaign
Disallow: /*?*utm_medium
Disallow: /*?*utm_source
Disallow: /*?*xid
Disallow: /*?bclid=
Disallow: /*?bcpid=
Disallow: /*?bctid=
Disallow: /*?EGOTECpage
Disallow: /*?hc_location
Disallow: /*?pagespeed
Disallow: /*?ref=
Disallow: /*?ref=binfind.com
Disallow: /*?sa=
Disallow: /*?search
Disallow: /feed
Disallow: /nextadvisor/search/*
Disallow: /page/*/?a_aid=
Disallow: /page/*/?egotecpage
Disallow: /page/*/?hc_location=
Disallow: /page/*/?iq_id=
Disallow: /page/*/?pcd=
Disallow: /page/*/?search=
Disallow: /search/?q=*
Disallow: /time_tout/*
Disallow: /uncategorized
Disallow: /time_cover_hub

Sitemap: https://time.com/sitemap.xml
Sitemap: https://time.com/news-sitemap.xml
Sitemap: https://time.com/video-sitemap.xml
Sitemap: https://time.com/coupons/sitemap.xml
Sitemap: https://time.com/archive-sitemaps.xml
Sitemap: https://time.com/sitemap-sections.xml
Sitemap: https://time.com/sitemap-tags.xml
sitemap.xml 200 OK
Type Sitemap Index URLs 5441 entries Valid XML Yes
Child Sitemaps:
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

301https://www.time.com/
200https://time.com/

Preferred variant: non-www

HTTP → HTTPS

301http://time.com/ → https://time.com/

Consistent

A+
Domain Intelligence
time.com — via MarkMonitor Inc., 32 years, 10 months old, hosted on Fastly
PASS
time.com — via MarkMonitor Inc., 32 years, 10 months old, hosted on Fastly
Info::
Domain registered until Nov 18, 2026 (7 months remaining)
Info::
DNSSEC is enabled
Info::
Registrar: MarkMonitor Inc.
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: Fastly
Got: AS54113
Domain expiry

157 days

November 18, 2026

SSL certificate

19 days

Issued by Certainly

Domain age

32 years, 10 months

Registered November 19, 1993

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

Fastly

ASN AS54113

151.101.195.52

Registrar

MarkMonitor Inc.

Unlocked 4 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Renew the TLS certificate or verify auto-renewal is working
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar MarkMonitor Inc.
Created November 19, 1993 (32 years, 10 months ago)
Expires November 18, 2026 (7 months)
Last Updated October 17, 2024
Name Servers dns1.p08.nsone.net, dns2.p08.nsone.net, dns3.p08.nsone.net, dns4.p08.nsone.net
DNSSEC Enabled
Hosting
IP Address 151.101.195.52
ASN AS54113 (FASTLY - Fastly, Inc., US)
Provider Fastly
Data source: rdap (0.2s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 22 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
5 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
2 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
5 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
16 ms
Total Time Total request time from DNS lookup through full response.
23 ms

Connection waterfall

DNS Lookup 5 ms TCP Connect 2 ms TLS Handshake 5 ms Server Processing 5 ms Content Transfer 6 ms
A+
CDN & Delivery
Fastly (MISS, HIT, HIT)
PASS
Fastly (MISS, HIT, HIT)
Info::
Site is served via Fastly CDN
Got: x-served-by: cache-chi-klot8100148-CHI, cache-chi-klot8100055-CHI, cache-sjc10077-SJC
Info::
CDN cache status: MISS, HIT, HIT
CDN Detected: Fastly
Provider Fastly Cache Status MISS, HIT, HIT Evidence x-served-by: cache-chi-klot8100148-CHI, cache-chi-klot8100055-CHI, cache-sjc10077-SJC
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback