Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations175 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Add includeSubDomains to the HSTS directive
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
BCDN & DeliveryAWS CloudFront (FunctionGeneratedResponse from cloudfront)REVIEW
A+DNS Records4 A records, 71 ms lookupPASS
| A | 18.164.52.103, 18.164.52.65, 18.164.52.36, 18.164.52.18 |
| AAAA | — |
| CNAME | — |
| NS | ns-595.awsdns-10.net, ns-1388.awsdns-45.org, ns-2018.awsdns-60.co.uk, ns-112.awsdns-14.com |
| MX | 10 mxb-001d9801.gslb.pphosted.com 10 mxa-001d9801.gslb.pphosted.com |
| TXT | 1d0d0fe5-61e0-4edb-a509-92bc5ce59983 google-site-verification=U5hiOly8JOwhyRXMmxgWaDHGMem7kgQud1Iis8gshyA stripe-verification=c3c46ec084306a30bcc1d0551fb9a508231831f38a2723e874e6446c2928... apple-domain-verification=xJk7gq0QjgmNwKOC google-site-verification=Lwmfu2vZQ0v_OCc48kYQNXCcmgP7Gj6Fg2kL08Xhfn0 atlassian-domain-verification=ZlsTGOEPNmWFXzzhEayLG9WDmjOwsr1H36NdpelFLTF/kGCLr/... stripe-verification=580cea36ec46ac0adcc200221811acaca1db456b0fb91bd7cc129d8f3459... MS=ms18133540 jamf-site-verification=tQF45ulu-gGP9PsBrWuMpw stripe-verification=B90269683791B84C666A07BAEF5A248445E78BA55FA2E2208E3A062BFA75... stripe-verification=8C4E45BA3E22F706F5F3FB72A6F72719FE8C912462788AB8D6C1A38CC1C6... facebook-domain-verification=s0cdi2ihgpeg7v7hl45zatfdbi5ia6 anthropic-domain-verification-enh4fz=TCXJHD6cAL2Z8omPsnYyIrBSZ stripe-verification=04d7fb4776f1301905fec8ab2640d90063d83433562200fe8e84a163af2f... mongodb-site-verification=7ITIBB5r72gygRCiBxwA5UQcOyng1Vz1 notion-domain-verification=1ez7s7pQwWadv3VpVRoGN6T4wH6rz95OH5yc5aNgDV9 stripe-verification=df30411351944f1496e1672379f26a194bc00c7fb0fcbbab989d610f090b... hubspot-developer-verification=YzQ0ODBmZWMtMWI4YS00Zjk4LWI1ZDEtZGFkNzg3NzQ0MWY2 atlassian-domain-verification=YgtkR1lUarneaVF9TSEqiX78nL3RNACOQ6IIvkJjhmZx8Db3bR... docusign=c709d0e7-f221-4f03-b936-704266b503a0 atlassian-domain-verification=qXy0sJTeEzEpIxfg30MuaX1rZvWqIE66QYh8m1SKJrAxIK59OF... stripe-verification=27a7887beca7c109d6beeb7b154db1878cdb699d0d93e48a731ec08c694a... atlassian-domain-verification=riKoagHwPoh1ADNcj5c0dKK57fNjgfBsG/c7pORIY3PuL3Lwse... hubspot-developer-verification=ZjUyYzJkNDEtNTllMC00MjE4LTg0NzctNGFkNDNhMTQwMDJl openai-domain-verification=dv-sieehJkHarisQONQPcyKyLrq stripe-verification=97aa50e11805a745fd972ed3c9cc3b4fb81d706adb8bf9693b347772e004... atlassian-domain-verification=gtWlmVkmNlzB0F0QoItHOhMGV1F//z0VsxzR6JiXQLK4LaXZ6n... d25ka488dfqyj6.cloudfront.net google-site-verification=O7Ybt8qvuC_Wr7eNYnJyhTxaGWpIERx_eQXhD219Mmc atlassian-domain-verification=An/zNsIXav1loZKNgNsLVZCSVF2ZwxCmmRmHyazPNupCMhIIew... dropbox-domain-verification=o4rdwxnte1t0 stripe-verification=e3129af3aea23f39d9869982084895f81fcb2a931daec6fac7052df79861... stripe-verification=427826c728dfce0a7a78322acfdbce70473ec2d999a739fd15d0151a8ccb... stripe-verification=a08bc6fbbb27bb9d81ddf84670414dc9aec5ed4d6740c0c1a566a71d19ea... SPF v=spf1 ip4:54.85.255.245 ip4:54.241.191.3 include:_spf.google.com include:cust-s... bugcrowd-verification=e6bfef1b70648d92dfaa9c71109333e1 atlassian-sending-domain-verification=d3a0d4ae-a1a3-46dc-897e-9b3c7a05aa12 atlassian-domain-verification=ZRphniOpyvhHV76mRmxnLkHJVrKnbeOIxmhbxb8PF6AarX0Fyp... postman-domain-verification=800d74a33351205a654e3108f639ed29eb015d093ef1c303ac96... atlassian-domain-verification=LxdUlMBGyIDZzdv5a3379ISDrFCwFudcod0VChiY9LkNp28183... atlassian-domain-verification=mnSEydSHNWTwzBa1PLswfF7e/U/IEx9v5ppCtA60bxCvWZLntK... google-site-verification=Kj7SMNgp41m5YiH7KEawowCRQFilQrRZ8D_TztiEn2g cursor-domain-verification-64a3xw=FGgvQz4cWuUQpOR9J9nyQwkR9 stripe-verification=71d4571aac7216050c8bebaadf0538662d4e5a950b7c4cfd8e69b12a5483... google-site-verification=4BcTn3m9wfJrq8ONDz9ltMbFhVgT51FVkfmSn-fcGZM profound-domain-verification-kwc8pk=Nkeycc3Ki88gmNXVDIlIu2qgb google-site-verification=CRUWMjnPZaaZap-3EJktXdl_an_hWEgNqTb_j2LUTcM google-site-verification=MSD4eeRGxm5bA9Au1cGuV8OPQOsju7epTDJ-f9C90gY SFMC-VGtbZqMeaLnLX_ep8blmghawDtsZvdGp8ohWo4J5 pendo-domain-verification=08405cee-3c6b-4169-9461-fef5648efd67 adobe-idp-site-verification=45af865bd23a9cbf05c82c7c47118beaae9fa1806a8906132943... _tr70kb8d6vfv6evu0rderlk4g0qp5iu SFMC-NEVZE-pd0X15BlxXI8i2N1C977acCSS6iXsjznDF SFMC--FelJdVfs1qWNvc7OtWJs6MZcusOPOyWM_eCsysa JkOZtIuIvTHsXraQgis9EtXUyG3SaZAj zoom-domain-verification=2803a8e0-7054-4e81-a7d7-fd55692d5e3b atlassian-domain-verification=7xPjAxr91ksK7xsQQrqNJ8JFeaE9d8uAuzKoBhkfR7hlh7Gzy3... google-site-verification=r1_7nBuqdcWdM0QIiDWQusHa9jelyX5hJYgX3xWSeTM google-site-verification=Gh3bIDlI_r-ksbSfnr8Kzvgp6Ccq3fE8dd_LXzJVIpo lastpass-verification-code=6kaWM#TIy^*%CfMRVDa&&j&$JrJ4mr%!b^*HRTs1X3V4pMsGgUnD0... segment-site-verification=jWNfQP1TpeIY9m5hjMJ9oq7bqKE7ARtD pardot548382=251a035bf1d916039f96c33d2457506ec1936c8c8331956b270cb6f51e4a1a6a SFMC-wEuWumryKcoCTXQMJmxNyZH7NNNMnlDdhmqeETRC atlassian-domain-verification=CXg3TfK6ks2yn8qhnjbtaw8KCGz1K31j0BtdTSS5WlX6VJiPfs... v=MCPv1; k=ed25519; p=3+HwEl6PGRASMFD+ktCP5sprdenoB/YZHJAOqE2CVoo= atlassian-domain-verification=TS3UJOnLYyKBsGxOYnvhbVxyWdzDSJkxGkxrZumZa0N105LDvH... miro-verification=6bd145c8ff96aabe81ebbc9298522ad4c41e08f6 krisp-domain-verification=iaYrEjBouKqKfT09dQFvUw0qkjiB2HwO anodot-domain-verification=23e696e0e0d3bd0801e872b07a3ae2e96fd14cda1e6e0da7bbaf2... twilio-domain-verification=e459472c26323f835802d62f65dd9f66 atlassian-domain-verification=GoNKpGQAjzgcMJeaDCpawM8OAdqJfI3Qdf9spLiWI8C0YsmbNa... google-site-verification=Ey-v6Be7J2lbOSMR7ID-gA6wGZXKxYMuTVkR4LFueow onetrust-domain-verification=aa11449cf62348e78d229049ddf67df2 atlassian-domain-verification=TX9lehYa7FjdqgpdvamdPToWtgCK34NADujThyFK7Pb36OxG/z... SwdhbLH9TABXUXVsyv0iFHC0gtExgksKtVsvVoqGKZ4= airtable-verification=220a9b71c22879816d9d241613827202 atlassian-sending-domain-verification=1eef8e00-d3a1-4e96-87d6-3c89eff0c1a0 atlassian-domain-verification=JxhV/ZhZkrHgVYscIkTb0uMQ/pZKY49/9ooO9KLUmIFve3PmWY... apperio-domain-verification=205f89afe51545a9805b40d8fca11dc3 knowbe4-site-verification=d26e46454d5f1bfcd1bd89f8ccf0d578 docusign=1d2cd2cd-53da-4c43-b487-46a5d4745f60 google-site-verification=z98_8Laz1Jr_VZwpAMfx5IXbFy4PCx66ygZoqCeLyyc docusign=40001689-5955-4691-bdc0-0c95f792b589 google-site-verification=va3Nya0kn20guRQIVU-LF4RRsKZ6u1Rewtqb4eYro-8 google-site-verification=fK0r-SyWnbxUuzdIbhScO9WjBIDBuEAh8ldTX3FDheU canva-site-verification=xQleHIYkB_3_GwMv8WMAhg google-site-verification=x-2Aoze34nZo0Bs3hefRL6DJiMtGOyYBixByW_D0ZPU google-site-verification=961ryHZWzEAyKPpOY6xTPviMeUlp00RagzX7INHnRpk status-page-domain-verification=3fbwzqm8vjhr stripe-verification=d6a3912e7b1c6ece6fbbd3fbd94ec2809cef42dd52c146b9e97911d81970... |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 503 ms totalPASS
https://atlassian.com
55 ms · HTTP/1.1
https://www.atlassian.com/
448 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://atlassian.com | 301 | 55 ms | HTTP/1.1 | CloudFront |
| 2 | https://www.atlassian.com/ | 200 | 448 ms | HTTP/1.1 | AtlassianEdge |
See the visual redirect chain in the HTTP Probe tab →
A+Crawlabilityrobots.txt present, sitemap with 22158 URLsPASS
User-agent: *
Disallow: /blog/author/*
Disallow: /blog/tag/*
Disallow: /blog/it-teams/tam-day-summit-3-big-takeaways-2/attachment/tam-day
Disallow: /dam/jcr:261696c7-3570-4760-b2a6-b69264c2a2db
Disallow: /dam/jcr:d493cbe0-67e8-4aa5-8972-b41046099254/Lean%20ITSM%20Whitepaper.pdf$
Disallow: /dam/jcr:b549786a-5967-4603-91eb-16a9d8902061/cPrime_SAFewhitepaper_0829_125636.pdf$
Disallow: /dam/jcr:7b30c258-5588-43a5-ba8a-cd1d1cce64cd/Enterprise%20Success%20Package%20One-pager%20Updated%20.pdf$
Disallow: /dam/jcr:1c950f05-9161-4b6b-9fe3-be3e7b1f0412/Jira%20Align%20Enterprise%20Success%20Package%20One-Pager.pdf$
Disallow: */purchase/*
Disallow: */variants/*
Allow: /purchase/price-comparison$
User-agent: atlassian-bot
Disallow: /blog/author/*
Disallow: /blog/tag/*
Disallow: /blog/search/*
Disallow: /blog/archives/*
Disallow: /blog/*/page/*
Disallow: /company/careers/detail/*
# Block all localized paths from being crawled
Disallow: /ja/*
Disallow: /fr/*
Disallow: /de/*
Disallow: /es/*
Disallow: /br/*
Disallow: /zh/*
Disallow: /ko/*
Disallow: /ru/*
Disallow: /pl/*
Disallow: /it/*
Disallow: /nl/*
Disallow: /fi/*
Disallow: /hu/*
Disallow: /ro/*
Disallow: /cs/*
Sitemap: https://www.atlassian.com/sitemap.xml
# Sitemap for Blog
Sitemap: https://www.atlassian.com/blog/post-sitemap.xml
A+Domain Intelligenceatlassian.com — via MarkMonitor Inc., 25 years, 5 months old, hosted on AWSPASS
279 days
March 19, 2027
175 days
Issued by Amazon
25 years, 5 months
Registered March 19, 2001
Not enabled
Protects against DNS spoofing
AWS
ASN AS16509
18.164.52.103
MarkMonitor Inc.
Expiry timeline
Recommended actions
- Enable DNSSEC to protect visitors from DNS spoofing
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.
Learn more ▾ ▴
DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.
Source: ICANN / RFC 4033
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice