Skip to content
https://cynosurelutronic.com

Infrastructure

· 17 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
85
GRADE
B
FIX
0
REVIEW
8
PASS
9
INFO
0
Probed from Santa Clara, United States
301 Moved Permanently
Checks
17
9 PASS 8 REVIEW
B
CAA Records
No CAA records (any CA may issue certificates)
REVIEW
No CAA records (any CA may issue certificates)
Info::
No CAA records published
Without CAA records, any publicly-trusted CA can issue certificates for this domain. Adding a CAA record (`yourdomain. IN CAA 0 issue "letsencrypt.org"`) restricts issuance to CAs you authorize. Required by CAB Forum baseline since 2017; the default of 'any CA' is widely supported but is the broader attack surface for issuance fraud.
C
Reverse DNS
Action
0/2 IPs match cert SAN
REVIEW
0/2 IPs match cert SAN
Info::
PTR lookup failed for 141.193.213.20: lookup 141.193.213.20: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
Info::
PTR lookup failed for 141.193.213.21: lookup 141.193.213.21: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
B
Redirect Chain
2 redirect(s), 269 ms total
REVIEW
2 redirect(s), 269 ms total
Warning::
2 redirects before reaching final URL
Each redirect adds latency. Try to minimize the chain to 1 hop.
Info::
HTTP to HTTPS redirect present
Info::
WWW normalization redirect
Warning::
2-hop chain could be reduced to 1 hop
Redirect directly from https://cynosurelutronic.com to https://www.cynosure.com/
Info::
Cross-domain redirect detected

https://cynosurelutronic.com

79 ms · HTTP/1.1

301

http://www.cynosurelutronic.com/

86 ms · HTTP/1.1

301

https://www.cynosure.com/

104 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://cynosurelutronic.com30179 msHTTP/1.1cloudflare
2http://www.cynosurelutronic.com/30186 msHTTP/1.1cloudflare
3https://www.cynosure.com/200104 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

Each redirect adds latency. Try to minimize the chain to 1 hop.

Why this matters

Redirect chain — each hop adds latency; combine into one redirect where possible.

Source: Google Search Central / web.dev

Redirect directly from https://cynosurelutronic.com to https://www.cynosure.com/

Why this matters

Redirect chain could be flattened to one hop — server config tweak removes intermediate latency.

Source: web.dev

C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Critical::
HTTP version does not redirect to HTTPS
Got: HTTP 301 Expected: 301 redirect to HTTPS

www / non-www

301https://www.cynosurelutronic.com/
200https://cynosurelutronic.com/

Preferred variant: non-www

HTTP → HTTPS

301http://cynosurelutronic.com/ → http://www.cynosurelutronic.com/

HTTP version does not redirect to HTTPS

B
TLS Certificate Expiry & Recommendations
42 days until leaf cert expires — 1 issues to address
REVIEW

Certificate validity

42
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
B
Operational Status Page
No status page link detected
REVIEW
No status page link detected
Info::
No operational status page link detected
Status pages communicate planned maintenance and incidents to users -- a hallmark of operationally-mature services. Most SaaS teams publish one via Atlassian Statuspage, Instatus, BetterUptime, or a self-hosted Cachet. Smaller sites legitimately don't need one; flagged as Info, not a failure.
B
Health Check Endpoint
No conventional health endpoint found
REVIEW
No conventional health endpoint found
Info::
No conventional health endpoint found
Health endpoints (/health, /healthz, /status, /ping, /api/health) let uptime monitors, load balancers, and orchestration systems (Kubernetes, ECS, Fly.io) verify the service is alive. Marketing sites and small services often skip them legitimately; flagged as Info, not a failure. Probe results: /api/health: 404, /health: 404, /healthz: 404, /ping: 404, /status: 404.
A+
DNS Records
2 A records, 13 ms lookup
PASS
2 A records, 13 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 141.193.213.20, 141.193.213.21
Info::
No IPv6 (AAAA) records
Info::
2 nameserver(s) configured
Got: ns75.domaincontrol.com, ns76.domaincontrol.com
Info::
1 mail exchanger(s) configured
Info::
SPF record present in TXT
Info::
DNS resolution time: 13 ms
Got: 13 ms
A141.193.213.20, 141.193.213.21
AAAA—
CNAME—
NSns75.domaincontrol.com, ns76.domaincontrol.com
MX
0 cynosurelutronic-com.mail.protection.outlook.com
TXT
MS=ms33894718
00D5w000003JIyj=1TBPf00000002Rf
00Ddy000003rNKv=1TBdy00000000jB
knowbe4-site-verification=bb42c7d997b14ce7f1a02ad2244e93c1
ms-domain-verification=72239117-c069-45c2-bac2-f36af9e38d80
SPF v=spf1 mx ip4:162.213.47.248/29 ip4:52.149.181.86 ip4:54.240.43.16 include:spf.p...
CAALookup not available with standard resolver
Resolved in 13 ms
A+
Subdomain Takeover
No subdomain takeover risk detected
PASS
No subdomain takeover risk detected
Info::
No CNAME record present
A+
DNSSEC
Signed and validating
PASS
Signed and validating
Info::
DNSSEC fully signed and chain validates (ECDSAP256SHA256)
A+
Multi-Resolver DNS Speed
Mean 9ms across 3 resolvers (spread 8ms)
PASS
Mean 9ms across 3 resolvers (spread 8ms)
Info::
Cloudflare: 5ms
Got: 5ms via 1.1.1.1:53
Info::
Quad9: 9ms
Got: 9ms via 9.9.9.9:53
Info::
Google: 13ms
Got: 13ms via 8.8.8.8:53
A+
Crawlability
robots.txt present, sitemap with 13 URLs
PASS
robots.txt present, sitemap with 13 URLs
Info::
robots.txt is present
Got: 1147 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 13 entries
Info::
Sitemap index with 13 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 1147 B Sitemaps referenced 18 User-agents * Blocking No — crawling allowed
Crawl-delay: 10
# START YOAST BLOCK
# ---------------------------
User-agent: *
Disallow:

Sitemap: https://www.cynosure.com/sitemap_index.xml
Sitemap: https://www.cynosure.com/au/sitemap_index.xml
Sitemap: https://www.cynosureuk.com/sitemap_index.xml
Sitemap: https://www.cynosure.fr/sitemap_index.xml
Sitemap: https://www.cynosure.es/sitemap_index.xml
Sitemap: https://www.cynosure.pt/sitemap_index.xml
Sitemap: https://www.cynosure.de/sitemap_index.xml
Sitemap: https://www.cynosure.co.jp/sitemap_index.xml
Sitemap: https://www.cynosurequebec.com/sitemap_index.xml
Sitemap: https://www.cynosurecanada.com/sitemap_index.xml
Sitemap: https://www.cynosure.ma/sitemap_index.xml
Sitemap: https://www.cynosurearabia.com/sitemap_index.xml
Sitemap: https://www.cynosure.co.kr/sitemap_index.xml
Sitemap: https://www.cynosurebrasil.com.br/sitemap_index.xml
Sitemap: https://www.cynosurelutronicemea.com/sitemap_index.xml
Sitemap: https://www.cynosurelutronicapac.com/sitemap_index.xml
Sitemap: https://www.cynosurelutronic.co.jp/sitemap_index.xml
Sitemap: https://www.cynosure.com/apac-kr/sitemap_index.xml
# ---------------------------
# END YOAST BLOCK
sitemap.xml 200 OK
Type Sitemap Index URLs 13 entries Valid XML Yes
Child Sitemaps:
A+
Domain Intelligence
cynosurelutronic.com — via GoDaddy.com, LLC, 2 years, 4 months old, hosted on Cloudflare
PASS
cynosurelutronic.com — via GoDaddy.com, LLC, 2 years, 4 months old, hosted on Cloudflare
Info::
Domain registered until Jan 19, 2027 (8 months remaining)
Info::
DNSSEC is enabled
Info::
Registrar: GoDaddy.com, LLC
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: Cloudflare
Got: AS209242
Domain expiry

249 days

January 19, 2027

SSL certificate

42 days

Issued by Google Trust Services

Domain age

2 years, 4 months

Registered January 19, 2024

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

Cloudflare

ASN AS209242

141.193.213.21

Registrar

GoDaddy.com, LLC

Unlocked 2 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar GoDaddy.com, LLC
Created January 19, 2024 (2 years, 4 months ago)
Expires January 19, 2027 (8 months)
Last Updated January 20, 2026
Name Servers ns75.domaincontrol.com, ns76.domaincontrol.com
DNSSEC Enabled
Hosting
IP Address 141.193.213.21
ASN AS209242 (CLOUDFLARESPECTRUM Cloudflare, Inc., US)
Provider Cloudflare
Data source: rdap (0.1s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 159 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
9 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
5 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
11 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
159 ms
Total Time Total request time from DNS lookup through full response.
159 ms

Connection waterfall

DNS Lookup 9 ms TCP Connect 5 ms TLS Handshake 11 ms Server Processing 134 ms Content Transfer 0 ms
A
CDN & Delivery
Cloudflare (DYNAMIC)
PASS
Cloudflare (DYNAMIC)
Info::
Site is served via Cloudflare CDN (edge: SJC)
Got: cf-ray: 9f9878db9c47f31f-SJC
Info::
CDN cache status: DYNAMIC
CDN Detected: Cloudflare
Provider Cloudflare Cache Status DYNAMIC Evidence cf-ray: 9f9878db9c47f31f-SJC
A+
CDN Cache Observability
Cache state: DYNAMIC
PASS
Cache state: DYNAMIC
Info::
CDN cache state observable via 1 header(s)
Got: cf-cache-status=DYNAMIC
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback