Skip to content
https://urban.org

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
83
GRADE
B
FIX
1
REVIEW
3
PASS
5
INFO
0
Probed from Santa Clara, United States
301 Moved Permanently
Checks
9
5 PASS 3 REVIEW 1 FIX
F
IPv6 Readiness
Action
IPv6 records exist but unreachable
FIX
IPv6 records exist but unreachable
Warning::
IPv6 DNS records exist but server is not reachable
Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.
Got: 2606:4700:10::6814:2f6b, 2606:4700:10::ac42:94b8
Info::
IPv6 connection error
Got: dial tcp6 [2606:4700:10::6814:2f6b]:443: connect: network is unreachable
IPv6 Misconfigured
AAAA Records 2606:4700:10::6814:2f6b, 2606:4700:10::ac42:94b8 Connection UNREACHABLE

Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.

Why this matters

Advertising IPv6 (AAAA records) without a reachable server means IPv6-preferring clients silently fail every connection.

Learn more ▾

Modern browsers prefer IPv6 if AAAA exists (Happy Eyeballs algorithm). If the IPv6 server isn't reachable, browsers fall back to IPv4 — but with seconds of added latency per request. Either fix IPv6 reachability or remove the AAAA records.

Source: RFC 8305 (Happy Eyeballs)

B
Redirect Chain
1 redirect(s), 1512 ms total
REVIEW
1 redirect(s), 1512 ms total
Info::
Single redirect
Got: https://urban.org → https://www.urban.org/ (301)
Info::
WWW normalization redirect
Warning::
Redirect overhead: 1512 ms total
Got: 1512 ms

https://urban.org

38 ms · HTTP/1.1

301

https://www.urban.org/

1473 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://urban.org30138 msHTTP/1.1cloudflare
2https://www.urban.org/2001473 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

B
TLS Certificate Expiry & Recommendations
37 days until leaf cert expires — 2 issues to address
REVIEW

Certificate validity

37
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
CDN & Delivery
Cloudflare
REVIEW
Cloudflare
Info::
Site is served via Cloudflare CDN (edge: SJC)
Got: cf-ray: 9f0787de9f456dd5-SJC
CDN Detected: Cloudflare
Provider Cloudflare Evidence cf-ray: 9f0787de9f456dd5-SJC
A+
DNS Records
2 A records, 17 ms lookup
PASS
2 A records, 17 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.20.47.107, 172.66.148.184
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2606:4700:10::6814:2f6b, 2606:4700:10::ac42:94b8
Info::
2 nameserver(s) configured
Got: yew.ns.cloudflare.com, raina.ns.cloudflare.com
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 17 ms
Got: 17 ms
A104.20.47.107, 172.66.148.184
AAAA2606:4700:10::6814:2f6b, 2606:4700:10::ac42:94b8
CNAME—
NSyew.ns.cloudflare.com, raina.ns.cloudflare.com
MX
0 urban-org.mail.protection.outlook.com
TXT
MS=ms52072457
_tt7q9k7m86e9uv1basvlrnwq905okcn
c66125cf-d7ac-4d1d-83d6-75bc059c120e
Apple-domain-verification=odSpH72VO21zTxqg
docusign=1860ea29-aa9f-4adb-bb30-a000fdd12dad
docusign=db1a5139-98ae-45bf-a38b-cad506f8cf98
smartsheet-site-validation=AAXfZScMCq6UYBUdbDIbMLIpLLBDoAxZ
slack-domain-verification=D0TnRcwhqCGwVfQA69gBHEXlC8knqbVCFur9h4kQ
google-site-verification=Nohd6LTRvYESBYsTXE41-rGRrtOOCi4eG_AEqb7m-Lw
google-site-verification=X0oXB5vo9JaJdcxAN2zNdDbX3_Pjq4kaeaSvOknQiPo
google-site-verification=cLBJVtIm-FvuLheuoyl7deOy5i4mytkOo_uz7Qrw_uA
atlassian-sending-domain-verification=ab3ce1de-95f0-40b4-be4f-ed601295a326
1vw4rVVkgSaxTV1PfKRqtI3/HncK8CA+bRHis2RwcnjedEMcBRxTeei6s8aWXHbfmx6UxygO9TKOe9zP...
AAP4pEMo97OsL/wZjZ6h6wVXmkoVqjrS7eC803kajD4KDVtr47bV0HAgLOvEjUJX6xzMJyoG2oLAZycJ...
atlassian-domain-verification=1e8gEFg8th4GMybKqCHwDxLxhFDfS6DlO91KW/zz7+ob2zBYIp...
atlassian-domain-verification=u795ALhc0/xfmE21y/HMs1AW9o0ktRM8R1heQRghnoBRasliSW...
SPF v=spf1 include:_u.urban.org._spf.dmarcld.com include:spf.protection.outlook.com ...
CAALookup not available with standard resolver
Resolved in 17 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+
Crawlability
robots.txt present, sitemap with 9 URLs
PASS
robots.txt present, sitemap with 9 URLs
Info::
robots.txt is present
Got: 2087 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 9 entries
Info::
Sitemap index with 9 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 2087 B Sitemaps referenced 1 User-agents * Blocking No — crawling allowed
#
# robots.txt
#
# This file is to prevent the crawling and indexing of certain parts
# of your site by web crawlers and spiders run by sites like Yahoo!
# and Google. By telling these "robots" where not to go on your site,
# you save bandwidth and server resources.
#
# This file will be ignored unless it is at the root of your host:
# Used:    http://example.com/robots.txt
# Ignored: http://example.com/site/robots.txt
#
# For more information about the robots.txt standard, see:
# http://www.robotstxt.org/robotstxt.html

User-agent: *
# CSS, JS, Images
Allow: /core/*.css$
Allow: /core/*.css?
Allow: /core/*.js$
Allow: /core/*.js?
Allow: /core/*.gif
Allow: /core/*.jpg
Allow: /core/*.jpeg
Allow: /core/*.png
Allow: /core/*.svg
Allow: /profiles/*.css$
Allow: /profiles/*.css?
Allow: /profiles/*.js$
Allow: /profiles/*.js?
Allow: /profiles/*.gif
Allow: /profiles/*.jpg
Allow: /profiles/*.jpeg
Allow: /profiles/*.png
Allow: /profiles/*.svg
# Directories
Disallow: /core/
Disallow: /profiles/
# Files
Disallow: /README.md
Disallow: /composer/Metapackage/README.txt
Disallow: /composer/Plugin/ProjectMessage/README.md
Disallow: /composer/Plugin/Scaffold/README.md
Disallow: /composer/Plugin/VendorHardening/README.txt
Disallow: /composer/Template/README.txt
Disallow: /modules/README.txt
Disallow: /sites/README.txt
Disallow: /themes/README.txt
# Paths (clean URLs)
Disallow: /admin/
Disallow: /comment/reply/
Disallow: /filter/tips
Disallow: /node/add/
Disallow: /search/
Disallow: /user/register
Disallow: /user/password
Disallow: /user/login
Disallow: /user/logout
Disallow: /media/oembed
Disallow: /*/media/oembed
# Paths (no clean URLs)
Disallow: /index.php/admin/
Disallow: /index.php/comment/reply/
Disallow: /index.php/filter/tips
Disallow: /index.php/node/add/
Disallow: /index.php/search/
Disallow: /index.php/user/password
Disallow: /index.php/user/register
Disallow: /index.php/user/login
Disallow: /index.php/user/logout
Disallow: /index.php/media/oembed
Disallow: /index.php/*/media/oembed

Disallow: /search
Disallow: /jsonapi

Sitemap: https://www.urban.org/sitemap.xml
sitemap.xml 200 OK
Type Sitemap Index URLs 9 entries Valid XML Yes
Child Sitemaps:
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

403https://www.urban.org/
200https://urban.org/

HTTP → HTTPS

301http://urban.org/ → https://urban.org/

Consistent

A+
Domain Intelligence
urban.org — via Network Solutions, LLC, 34 years, 1 months old, hosted on Cloudflare
PASS
urban.org — via Network Solutions, LLC, 34 years, 1 months old, hosted on Cloudflare
Info::
Domain registered until Sep 1, 2034 (8 years, 5 months remaining)
Info::
DNSSEC is enabled
Info::
Registrar: Network Solutions, LLC
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: Cloudflare
Got: AS13335
Domain expiry

2969 days

September 1, 2034

SSL certificate

37 days

Issued by Google Trust Services

Domain age

34 years, 1 months

Registered September 2, 1992

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

Cloudflare

ASN AS13335

104.20.47.107

Registrar

Network Solutions, LLC

Unlocked 2 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar Network Solutions, LLC
Created September 2, 1992 (34 years, 1 months ago)
Expires September 1, 2034 (8 years, 5 months)
Last Updated September 6, 2024
Name Servers raina.ns.cloudflare.com, yew.ns.cloudflare.com
DNSSEC Enabled
Hosting
IP Address 104.20.47.107
ASN AS13335 (CLOUDFLARENET - Cloudflare, Inc., US)
Provider Cloudflare
Data source: rdap (0.2s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 31 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
10 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
4 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
12 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
32 ms
Total Time Total request time from DNS lookup through full response.
32 ms

Connection waterfall

DNS Lookup 10 ms TCP Connect 4 ms TLS Handshake 12 ms Server Processing 5 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback