https://nodes-fifth-stan-gospel.trycloudflare.com

Infrastructure

· 17 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Probed from Madrid, Spain

200 OK

Checks

9 PASS 7 REVIEW

DNSSEC

Unsigned (DNSSEC not deployed)

REVIEW

Unsigned (DNSSEC not deployed)

DNSSEC is not deployed

The zone is not DNSSEC-signed. Users on validating resolvers (Cloudflare 1.1.1.1, Quad9 9.9.9.9, growing default in mobile resolvers) get no protection against DNS spoofing for this domain. Most registrars now offer DNSSEC at a single click; consider enabling it for sites where authenticity matters (banking, healthcare, government).

CAA Records

No CAA records (any CA may issue certificates)

REVIEW

No CAA records (any CA may issue certificates)

No CAA records published

Without CAA records, any publicly-trusted CA can issue certificates for this domain. Adding a CAA record (`yourdomain. IN CAA 0 issue "letsencrypt.org"`) restricts issuance to CAs you authorize. Required by CAB Forum baseline since 2017; the default of 'any CA' is widely supported but is the broader attack surface for issuance fraud.

Reverse DNS

Action

0/4 IPs match cert SAN

REVIEW

0/4 IPs match cert SAN

PTR lookup failed for 104.16.230.132: lookup 104.16.230.132: no such host

No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.

PTR lookup failed for 104.16.231.132: lookup 104.16.231.132: no such host

No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.

PTR lookup failed for 2606:4700::6810:e784: lookup 2606:4700::6810:e784: no such host

No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.

PTR lookup failed for 2606:4700::6810:e684: lookup 2606:4700::6810:e684: no such host

No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

REVIEW

www/non-www, trailing slash, HTTP→HTTPS

HTTP version does not redirect to HTTPS

Got: HTTP 200 Expected: 301 redirect to HTTPS

www / non-www

https://www.nodes-fifth-stan-gospel.trycloudflare.com/

200https://nodes-fifth-stan-gospel.trycloudflare.com/

HTTP → HTTPS

200http://nodes-fifth-stan-gospel.trycloudflare.com/

HTTP version does not redirect to HTTPS

TLS Certificate Expiry & Recommendations

39 days until leaf cert expires — 3 issues to address

REVIEW

Certificate validity

days left

0d 30d 60d 90d+

Recommended actions

Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
Enable DNSSEC on your domain for DNS spoofing protection
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

Operational Status Page

No status page link detected

REVIEW

No status page link detected

No operational status page link detected

Status pages communicate planned maintenance and incidents to users -- a hallmark of operationally-mature services. Most SaaS teams publish one via Atlassian Statuspage, Instatus, BetterUptime, or a self-hosted Cachet. Smaller sites legitimately don't need one; flagged as Info, not a failure.

Health Check Endpoint

No conventional health endpoint found

REVIEW

No conventional health endpoint found

Health endpoints (/health, /healthz, /status, /ping, /api/health) let uptime monitors, load balancers, and orchestration systems (Kubernetes, ECS, Fly.io) verify the service is alive. Marketing sites and small services often skip them legitimately; flagged as Info, not a failure. Probe results: /api/health: 404, /health: 404, /healthz: 404, /ping: 404, /status: 404.

DNS Records

2 A records, 30 ms lookup

PASS

2 A records, 30 ms lookup

Resolves to 2 IPv4 address(es)

Got: 104.16.230.132, 104.16.231.132

Has 2 IPv6 (AAAA) record(s)

Got: 2606:4700::6810:e784, 2606:4700::6810:e684

No NS records found

No MX records — email not configured via DNS

No SPF record found in TXT records

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

DNS resolution time: 30 ms

Got: 30 ms

A	104.16.230.132, 104.16.231.132
AAAA	2606:4700::6810:e784, 2606:4700::6810:e684
CNAME	—
NS	—
MX	—
TXT	—
CAA	Lookup not available with standard resolver

Resolved in 30 ms

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

Why this matters

Without SPF, receiving servers can't validate sending IPs — your domain is easier to spoof in phishing.

Learn more ▾

SPF complements DMARC. Both should be published. SPF records list authorized sending IPs (e.g., `v=spf1 include:_spf.google.com ~all` for Google Workspace). After publishing, verify in Google Postmaster Tools or mxtoolbox.

Source: RFC 7208 (SPF)

A+

Subdomain Takeover

No subdomain takeover risk detected

PASS

No subdomain takeover risk detected

No CNAME record present

A+

Multi-Resolver DNS Speed

Mean 16ms across 3 resolvers (spread 23ms)

PASS

Mean 16ms across 3 resolvers (spread 23ms)

Quad9: 3ms

Got: 3ms via 9.9.9.9:53

Cloudflare: 19ms

Got: 19ms via 1.1.1.1:53

Google: 26ms

Got: 26ms via 8.8.8.8:53

A+

Redirect Chain

No redirects — direct access

PASS

No redirects — direct access

Got: https://nodes-fifth-stan-gospel.trycloudflare.com

https://nodes-fifth-stan-gospel.trycloud...

228 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol	Server
1	https://nodes-fifth-stan-gospel.trycloud...	200	228 ms	HTTP/1.1	cloudflare

A+

IPv6 Readiness

IPv6 reachable (17 ms)

PASS

IPv6 reachable (17 ms)

IPv6 is configured and reachable at 2606:4700::6810:e784, 2606:4700::6810:e684

Got: 17 ms connect

IPv6 Ready

AAAA Records 2606:4700::6810:e784, 2606:4700::6810:e684 Connection Reachable (17 ms)

A+

Crawlability

robots.txt present, sitemap with 25 URLs

PASS

robots.txt present, sitemap with 25 URLs

robots.txt is present

Got: 7365 bytes

sitemap.xml is present

sitemap.xml is valid XML

sitemap.xml contains 25 entries

robots.txt references sitemap

robots.txt 200 OK

Size 7365 B Sitemaps referenced 1 User-agents Amazonbot, Retool, DuckAssistBot, PetalBot, magpie-crawler, KimiBot, Applebot, alphalens-bot, Claude-User, meta-externalagent, AwarioSmartBot, PerplexityBot, ShapBot, Anomura, FireCrawl, DuckDuckBot, CCBot, Google-Extended, Baiduspider, FishBot, Element451Bot, Kimi-User, Bytespider, MistralAI-Training, GoogleOther, Amzn-SearchBot, Bravebot, Google-NotebookLM, Meta-ExternalAgent, omgili, Google-CloudVertexBot, WARDBot, YouBot, Claude-SearchBot, Kimi-SearchBot, *, Perplexity-User, Amzn-User, WhatsApp, Diffbot, AwarioRssBot, Cotoyogi, OAI-SearchBot, MistralAI-Index, atlassian-bot, SemrushBot-SWA, Google-Agent, Google-GeminiNotebook, ChathiveCrawler, ClaudeBot, anthropic-ai, Meta-ExternalFetcher, NavuBot, CitibotSiteCrawler, Instapaper, MistralAI-User, cohere-ai, Applebot-Extended, Claude-Web, QualifiedBot, ChatGPT-User, Googlebot, ICC-Crawler, BorderxBot, meta-externalfetcher, bingbot, GPTBot, facebookexternalhit, FirecrawlAgent Blocking No — crawling allowed

# As a condition of accessing this website, you agree to abide by the following
# content signals:

# (a)  If a Content-Signal = yes, you may collect content for the corresponding
#      use.
# (b)  If a Content-Signal = no, you may not collect content for the
#      corresponding use.
# (c)  If the website operator does not include a Content-Signal for a
#      corresponding use, the website operator neither grants nor restricts
#      permission via Content-Signal with respect to the corresponding use.

# The content signals and their meanings are:

# search:   building a search index and providing search results (e.g., returning
#           hyperlinks and short excerpts from your website's contents). Search does not
#           include providing AI-generated search summaries.
# ai-input: inputting content into one or more AI models (e.g., retrieval
#           augmented generation, grounding, or other real-time taking of content for
#           generative AI search answers).
# ai-train: training or fine-tuning AI models.
# use:      how AI systems may consume the content (immediate, reference, or full).

# ANY RESTRICTIONS EXPRESSED VIA CONTENT SIGNALS ARE EXPRESS RESERVATIONS OF
# RIGHTS UNDER ARTICLE 4 OF THE EUROPEAN UNION DIRECTIVE 2019/790 ON COPYRIGHT
# AND RELATED RIGHTS IN THE DIGITAL SINGLE MARKET.

# BEGIN Cloudflare Managed content


User-agent: *
Content-Signal: search=yes,ai-train=no,use=reference
Allow: /

# Training crawlers
User-agent: Amazonbot
Disallow: /

User-agent: Applebot-Extended
Disallow: /

User-agent: Bytespider
Disallow: /

User-agent: CCBot
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: Diffbot
Disallow: /

User-agent: Google-Extended
Disallow: /

User-agent: GPTBot
Disallow: /

User-agent: omgili
Disallow: /

User-agent: anthropic-ai
Disallow: /

User-agent: Claude-Web
Disallow: /

User-agent: cohere-ai
Disallow: /

User-agent: MistralAI-Training
Disallow: /

User-agent: meta-externalagent
Disallow: /

User-agent: GoogleOther
Disallow: /

User-agent: Baiduspider
Disallow: /

User-agent: PetalBot
Disallow: /

User-agent: AwarioSmartBot
User-agent: AwarioRssBot
Disallow: /

User-agent: Google-CloudVertexBot
Disallow: /

User-agent: QualifiedBot
Disallow: /

User-agent: Cotoyogi
Disallow: /

User-agent: ICC-Crawler
Disallow: /

User-agent: atlassian-bot
Disallow: /

User-agent: FishBot
Disallow: /

User-agent: BorderxBot
Disallow: /

User-agent: NavuBot
Disallow: /

User-agent: SemrushBot-SWA
Disallow: /

User-agent: WARDBot
Disallow: /

User-agent: magpie-crawler
Disallow: /

User-agent: KimiBot
Disallow: /

User-agent: CitibotSiteCrawler
Disallow: /

# AI Search crawlers
User-agent: PerplexityBot
Disallow: /

User-agent: YouBot
Disallow: /

User-agent: OAI-SearchBot
Disallow: /

User-agent: Claude-SearchBot
Disallow: /

User-agent: Applebot
Disallow: /

User-agent: Amzn-SearchBot
Disallow: /

User-agent: MistralAI-Index
Disallow: /

User-agent: Kimi-SearchBot
Disallow: /

User-agent: ShapBot
Disallow: /

User-agent: Bravebot
Disallow: /

User-agent: Anomura
Disallow: /

User-agent: Element451Bot
Disallow: /

User-agent: alphalens-bot
Disallow: /

# AI Agents
User-agent: Perplexity-User
Disallow: /

User-agent: FireCrawl
Disallow: /

User-agent: FirecrawlAgent
Disallow: /

User-agent: Claude-User
Disallow: /

User-agent: ChatGPT-User
Disallow: /

User-agent: Google-Agent
Disallow: /

User-agent: Google-GeminiNotebook
User-agent: Google-NotebookLM
Disallow: /

User-agent: MistralAI-User
Disallow: /

User-agent: Kimi-User
Disallow: /

User-agent: Amzn-User
Disallow: /

User-agent: meta-externalfetcher
Disallow: /

User-agent: Retool
Disallow: /

User-agent: Instapaper
Disallow: /

User-agent: ChathiveCrawler
Disallow: /

# END Cloudflare Managed Content

User-agent: *
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Google Search / Google AI Search features
User-agent: Googlebot
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Gemini Apps / grounding via Google Search. Note: Google-Extended also governs some model-improvement uses.
User-agent: Google-Extended
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Microsoft Bing / Copilot web search indexing
User-agent: bingbot
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# OpenAI search and user-request retrieval
User-agent: OAI-SearchBot
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

User-agent: ChatGPT-User
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Anthropic Claude search and user-request retrieval
User-agent: Claude-SearchBot
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

User-agent: Claude-User
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Perplexity search and user-request retrieval
User-agent: PerplexityBot
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

User-agent: Perplexity-User
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Apple Search / Siri / Spotlight / Safari discovery
User-agent: Applebot
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# DuckDuckGo web crawler
User-agent: DuckDuckBot
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# DuckDuckGo AI-assisted answers
User-agent: DuckAssistBot
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Mistral search index and user-request retrieval
User-agent: MistralAI-Index
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

User-agent: MistralAI-User
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Amazon / Alexa search and user-request retrieval
User-agent: Amzn-SearchBot
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

User-agent: Amzn-User
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Social link-preview crawlers (Facebook / Messenger / Instagram / WhatsApp)
User-agent: facebookexternalhit
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

User-agent: WhatsApp
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Meta AI user-request retrieval
User-agent: Meta-ExternalFetcher
Allow: /
Disallow: /upload/
Disallow: /upload.html
Disallow: /api/
Disallow: /.netlify/functions/

# Training / bulk-corpus crawlers intentionally declined where a separate search/retrieval crawler exists.
User-agent: GPTBot
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: Applebot-Extended
Disallow: /

User-agent: MistralAI-Training
Disallow: /

User-agent: Amazonbot
Disallow: /

User-agent: Meta-ExternalAgent
Disallow: /

User-agent: CCBot
Disallow: /

User-agent: Bytespider
Disallow: /

Sitemap: https://alltaxbooks.com/sitemap.xml

sitemap.xml 200 OK

Type URL Set URLs 25 entries Valid XML Yes

Sample URLs:

A+

HTTP Probe Timing

Total 312 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

PASS

DNS Lookup

28 ms

TCP Connect

17 ms

TLS Handshake

22 ms

Time to First Byte

312 ms

Total Time

313 ms

Connection waterfall

DNS Lookup 28 ms TCP Connect 17 ms TLS Handshake 22 ms Server Processing 246 ms Content Transfer 0 ms

CDN & Delivery

Cloudflare (DYNAMIC)

PASS

Cloudflare (DYNAMIC)

Document is served via Cloudflare CDN (edge: CDG)

Got: cf-ray: a417eddca8c37037-CDG

CDN cache status: DYNAMIC

Document served via CDN: Cloudflare

Provider Cloudflare Cache Status DYNAMIC Evidence cf-ray: a417eddca8c37037-CDG

A+

CDN Cache Observability

Cache state: DYNAMIC

PASS

Cache state: DYNAMIC

CDN cache state observable via 1 header(s)

Got: cf-cache-status=DYNAMIC

Domain Intelligence

Domain intelligence data not available

INFO

Domain intelligence data not available

RDAP and WHOIS lookup both failed

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.