Skip to content
https://routing-outdoors-hamburg-fan.trycloudflare.com

Infrastructure

· 17 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
88
GRADE
B
FIX
0
REVIEW
8
PASS
8
INFO
1
Probed from Singapore, Singapore
200 OK
Checks
17
8 PASS 8 REVIEW
B
DNSSEC
Unsigned (DNSSEC not deployed)
REVIEW
Unsigned (DNSSEC not deployed)
Info::
DNSSEC is not deployed
The zone is not DNSSEC-signed. Users on validating resolvers (Cloudflare 1.1.1.1, Quad9 9.9.9.9, growing default in mobile resolvers) get no protection against DNS spoofing for this domain. Most registrars now offer DNSSEC at a single click; consider enabling it for sites where authenticity matters (banking, healthcare, government).
B
CAA Records
No CAA records (any CA may issue certificates)
REVIEW
No CAA records (any CA may issue certificates)
Info::
No CAA records published
Without CAA records, any publicly-trusted CA can issue certificates for this domain. Adding a CAA record (`yourdomain. IN CAA 0 issue "letsencrypt.org"`) restricts issuance to CAs you authorize. Required by CAB Forum baseline since 2017; the default of 'any CA' is widely supported but is the broader attack surface for issuance fraud.
C
Reverse DNS
Action
0/4 IPs match cert SAN
REVIEW
0/4 IPs match cert SAN
Info::
PTR lookup failed for 104.16.231.132: lookup 104.16.231.132: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 104.16.230.132: lookup 104.16.230.132: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2606:4700::6810:e784: lookup 2606:4700::6810:e784: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 2606:4700::6810:e684: lookup 2606:4700::6810:e684: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Critical::
HTTP version does not redirect to HTTPS
Got: HTTP 200 Expected: 301 redirect to HTTPS

www / non-www

https://www.routing-outdoors-hamburg-fan.trycloudflare.com/
200https://routing-outdoors-hamburg-fan.trycloudflare.com/

HTTP → HTTPS

200http://routing-outdoors-hamburg-fan.trycloudflare.com/

HTTP version does not redirect to HTTPS

B
HTTP Probe Timing
Total 1414 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
REVIEW
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
9 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
1 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
12 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
1.41 s
Total Time Total request time from DNS lookup through full response.
1.41 s

Connection waterfall

DNS Lookup 9 ms TCP Connect 1 ms TLS Handshake 12 ms Server Processing 1.39 s Content Transfer 1 ms
B
TLS Certificate Expiry & Recommendations
39 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

39
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
Operational Status Page
No status page link detected
REVIEW
No status page link detected
Info::
No operational status page link detected
Status pages communicate planned maintenance and incidents to users -- a hallmark of operationally-mature services. Most SaaS teams publish one via Atlassian Statuspage, Instatus, BetterUptime, or a self-hosted Cachet. Smaller sites legitimately don't need one; flagged as Info, not a failure.
B
Health Check Endpoint
No conventional health endpoint found
REVIEW
No conventional health endpoint found
Info::
No conventional health endpoint found
Health endpoints (/health, /healthz, /status, /ping, /api/health) let uptime monitors, load balancers, and orchestration systems (Kubernetes, ECS, Fly.io) verify the service is alive. Marketing sites and small services often skip them legitimately; flagged as Info, not a failure. Probe results: /api/health: 404, /health: 404, /healthz: 404, /ping: 404, /status: 404.
A
DNS Records
2 A records, 18 ms lookup
PASS
2 A records, 18 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.16.231.132, 104.16.230.132
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2606:4700::6810:e784, 2606:4700::6810:e684
Info::
No NS records found
Info::
No MX records — email not configured via DNS
Info::
No SPF record found in TXT records
SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.
Info::
DNS resolution time: 18 ms
Got: 18 ms
A104.16.231.132, 104.16.230.132
AAAA2606:4700::6810:e784, 2606:4700::6810:e684
CNAME—
NS—
MX—
TXT—
CAALookup not available with standard resolver
Resolved in 18 ms

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

Why this matters

Without SPF, receiving servers can't validate sending IPs — your domain is easier to spoof in phishing.

Learn more ▾

SPF complements DMARC. Both should be published. SPF records list authorized sending IPs (e.g., `v=spf1 include:_spf.google.com ~all` for Google Workspace). After publishing, verify in Google Postmaster Tools or mxtoolbox.

Source: RFC 7208 (SPF)

A+
Subdomain Takeover
No subdomain takeover risk detected
PASS
No subdomain takeover risk detected
Info::
No CNAME record present
A+
Multi-Resolver DNS Speed
Mean 4ms across 3 resolvers (spread 3ms)
PASS
Mean 4ms across 3 resolvers (spread 3ms)
Info::
Cloudflare: 3ms
Got: 3ms via 1.1.1.1:53
Info::
Quad9: 4ms
Got: 4ms via 9.9.9.9:53
Info::
Google: 6ms
Got: 6ms via 8.8.8.8:53
A+
Redirect Chain
No redirects — direct access
PASS
No redirects — direct access
Info::
No redirects — direct access
Got: https://routing-outdoors-hamburg-fan.trycloudflare.com

https://routing-outdoors-hamburg-fan.try...

408 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://routing-outdoors-hamburg-fan.try...200408 msHTTP/1.1cloudflare
A+
IPv6 Readiness
IPv6 reachable (2 ms)
PASS
IPv6 reachable (2 ms)
Info::
IPv6 is configured and reachable at 2606:4700::6810:e784, 2606:4700::6810:e684
Got: 2 ms connect
IPv6 Ready
AAAA Records 2606:4700::6810:e784, 2606:4700::6810:e684 Connection Reachable (2 ms)
A+
Crawlability
robots.txt present, sitemap with 25 URLs
PASS
robots.txt present, sitemap with 25 URLs
Info::
robots.txt is present
Got: 3923 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 25 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 3923 B Sitemaps referenced 1 User-agents Google-CloudVertexBot, Anomura, MistralAI-Index, alphalens-bot, meta-externalfetcher, Element451Bot, FishBot, BorderxBot, omgili, KimiBot, Google-NotebookLM, Kimi-User, meta-externalagent, Google-GeminiNotebook, *, AwarioSmartBot, Perplexity-User, Google-Agent, ShapBot, MistralAI-User, anthropic-ai, Baiduspider, PetalBot, NavuBot, SemrushBot-SWA, magpie-crawler, FirecrawlAgent, QualifiedBot, atlassian-bot, OAI-SearchBot, Kimi-SearchBot, ChathiveCrawler, ICC-Crawler, YouBot, Claude-SearchBot, Claude-User, Diffbot, GPTBot, Claude-Web, FireCrawl, Bytespider, MistralAI-Training, PerplexityBot, Bravebot, Amazonbot, ClaudeBot, CitibotSiteCrawler, Amzn-User, GoogleOther, WARDBot, Instapaper, ChatGPT-User, cohere-ai, Applebot, Retool, CCBot, AwarioRssBot, Cotoyogi, Amzn-SearchBot, Applebot-Extended, Google-Extended Blocking No — crawling allowed
# As a condition of accessing this website, you agree to abide by the following
# content signals:

# (a)  If a Content-Signal = yes, you may collect content for the corresponding
#      use.
# (b)  If a Content-Signal = no, you may not collect content for the
#      corresponding use.
# (c)  If the website operator does not include a Content-Signal for a
#      corresponding use, the website operator neither grants nor restricts
#      permission via Content-Signal with respect to the corresponding use.

# The content signals and their meanings are:

# search:   building a search index and providing search results (e.g., returning
#           hyperlinks and short excerpts from your website's contents). Search does not
#           include providing AI-generated search summaries.
# ai-input: inputting content into one or more AI models (e.g., retrieval
#           augmented generation, grounding, or other real-time taking of content for
#           generative AI search answers).
# ai-train: training or fine-tuning AI models.
# use:      how AI systems may consume the content (immediate, reference, or full).

# ANY RESTRICTIONS EXPRESSED VIA CONTENT SIGNALS ARE EXPRESS RESERVATIONS OF
# RIGHTS UNDER ARTICLE 4 OF THE EUROPEAN UNION DIRECTIVE 2019/790 ON COPYRIGHT
# AND RELATED RIGHTS IN THE DIGITAL SINGLE MARKET.

# BEGIN Cloudflare Managed content


User-agent: *
Content-Signal: search=yes,ai-train=no,use=reference
Allow: /

# Training crawlers
User-agent: Amazonbot
Disallow: /

User-agent: Applebot-Extended
Disallow: /

User-agent: Bytespider
Disallow: /

User-agent: CCBot
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: Diffbot
Disallow: /

User-agent: Google-Extended
Disallow: /

User-agent: GPTBot
Disallow: /

User-agent: omgili
Disallow: /

User-agent: anthropic-ai
Disallow: /

User-agent: Claude-Web
Disallow: /

User-agent: cohere-ai
Disallow: /

User-agent: MistralAI-Training
Disallow: /

User-agent: meta-externalagent
Disallow: /

User-agent: GoogleOther
Disallow: /

User-agent: Baiduspider
Disallow: /

User-agent: PetalBot
Disallow: /

User-agent: AwarioSmartBot
User-agent: AwarioRssBot
Disallow: /

User-agent: Google-CloudVertexBot
Disallow: /

User-agent: QualifiedBot
Disallow: /

User-agent: Cotoyogi
Disallow: /

User-agent: ICC-Crawler
Disallow: /

User-agent: atlassian-bot
Disallow: /

User-agent: FishBot
Disallow: /

User-agent: BorderxBot
Disallow: /

User-agent: NavuBot
Disallow: /

User-agent: SemrushBot-SWA
Disallow: /

User-agent: WARDBot
Disallow: /

User-agent: magpie-crawler
Disallow: /

User-agent: KimiBot
Disallow: /

User-agent: CitibotSiteCrawler
Disallow: /

# AI Search crawlers
User-agent: PerplexityBot
Disallow: /

User-agent: YouBot
Disallow: /

User-agent: OAI-SearchBot
Disallow: /

User-agent: Claude-SearchBot
Disallow: /

User-agent: Applebot
Disallow: /

User-agent: Amzn-SearchBot
Disallow: /

User-agent: MistralAI-Index
Disallow: /

User-agent: Kimi-SearchBot
Disallow: /

User-agent: ShapBot
Disallow: /

User-agent: Bravebot
Disallow: /

User-agent: Anomura
Disallow: /

User-agent: Element451Bot
Disallow: /

User-agent: alphalens-bot
Disallow: /

# AI Agents
User-agent: Perplexity-User
Disallow: /

User-agent: FireCrawl
Disallow: /

User-agent: FirecrawlAgent
Disallow: /

User-agent: Claude-User
Disallow: /

User-agent: ChatGPT-User
Disallow: /

User-agent: Google-Agent
Disallow: /

User-agent: Google-GeminiNotebook
User-agent: Google-NotebookLM
Disallow: /

User-agent: MistralAI-User
Disallow: /

User-agent: Kimi-User
Disallow: /

User-agent: Amzn-User
Disallow: /

User-agent: meta-externalfetcher
Disallow: /

User-agent: Retool
Disallow: /

User-agent: Instapaper
Disallow: /

User-agent: ChathiveCrawler
Disallow: /

# END Cloudflare Managed Content

User-agent: *
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

Sitemap: https://alltaxbooks.com/sitemap.xml
sitemap.xml 200 OK
Type URL Set URLs 25 entries Valid XML Yes
Sample URLs:
A
CDN & Delivery
Cloudflare (DYNAMIC)
PASS
Cloudflare (DYNAMIC)
Info::
Document is served via Cloudflare CDN (edge: SIN)
Got: cf-ray: a41b7d2748f6fd28-SIN
Info::
CDN cache status: DYNAMIC
Document served via CDN: Cloudflare
Provider Cloudflare Cache Status DYNAMIC Evidence cf-ray: a41b7d2748f6fd28-SIN
A+
CDN Cache Observability
Cache state: DYNAMIC
PASS
Cache state: DYNAMIC
Info::
CDN cache state observable via 1 header(s)
Got: cf-cache-status=DYNAMIC
Domain Intelligence
Domain intelligence data not available
INFO
Domain intelligence data not available

RDAP and WHOIS lookup both failed

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback