Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.FIPv6 ReadinessActionIPv6 records exist but unreachableFIX
Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.
Advertising IPv6 (AAAA records) without a reachable server means IPv6-preferring clients silently fail every connection.
Learn more ▾ ▴
Modern browsers prefer IPv6 if AAAA exists (Happy Eyeballs algorithm). If the IPv6 server isn't reachable, browsers fall back to IPv4 — but with seconds of added latency per request. Either fix IPv6 reachability or remove the AAAA records.
Source: RFC 8305 (Happy Eyeballs)
BCrawlabilityrobots.txt present, no sitemapREVIEW
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
# As a condition of accessing this website, you agree to abide by the following
# content signals:
# (a) If a Content-Signal = yes, you may collect content for the corresponding
# use.
# (b) If a Content-Signal = no, you may not collect content for the
# corresponding use.
# (c) If the website operator does not include a Content-Signal for a
# corresponding use, the website operator neither grants nor restricts
# permission via Content-Signal with respect to the corresponding use.
# The content signals and their meanings are:
# search: building a search index and providing search results (e.g., returning
# hyperlinks and short excerpts from your website's contents). Search does not
# include providing AI-generated search summaries.
# ai-input: inputting content into one or more AI models (e.g., retrieval
# augmented generation, grounding, or other real-time taking of content for
# generative AI search answers).
# ai-train: training or fine-tuning AI models.
# ANY RESTRICTIONS EXPRESSED VIA CONTENT SIGNALS ARE EXPRESS RESERVATIONS OF
# RIGHTS UNDER ARTICLE 4 OF THE EUROPEAN UNION DIRECTIVE 2019/790 ON COPYRIGHT
# AND RELATED RIGHTS IN THE DIGITAL SINGLE MARKET.
# BEGIN Cloudflare Managed content
User-agent: *
Content-Signal: search=yes,ai-train=no
Allow: /
User-agent: Amazonbot
Disallow: /
User-agent: Applebot-Extended
Disallow: /
User-agent: Bytespider
Disallow: /
User-agent: CCBot
Disallow: /
User-agent: ClaudeBot
Disallow: /
User-agent: CloudflareBrowserRenderingCrawler
Disallow: /
User-agent: Google-Extended
Disallow: /
User-agent: GPTBot
Disallow: /
User-agent: meta-externalagent
Disallow: /
# END Cloudflare Managed Content
No sitemap found
Adding a sitemap helps search engines discover your pages.
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations79 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
BCDN & DeliveryCloudflareREVIEW
A+DNS Records2 A records, 25 ms lookupPASS
| A | 104.18.37.23, 172.64.150.233 |
| AAAA | 2a06:98c1:3102::ac40:96e9, 2606:4700:4401::6812:2517 |
| CNAME | — |
| NS | pdns1.ultradns.net, pdns2.ultradns.net, pdns3.ultradns.org, pdns4.ultradns.org, pdns5.ultradns.info, pdns6.ultradns.co.uk, udns1.ultradns.net, udns2.ultradns.net |
| MX | 10 mxb-003af501.gslb.pphosted.com 10 mxa-003af501.gslb.pphosted.com |
| TXT | 00d2000000008tfeay 00D2000000008TF=1TBc4000000006T 00DbW000003QFmZ=1TBbW00000000hZ abuseipdb-verification=TI1NVcV1 HrvEZBDAWMYaQ5BSa507WJCrnIrQlj1p _26jn5a2p1l37z7dda3qsfcjtjkymgkh _ftdpbgz07dx582tt62xe6z1wuvo5nls _kprumvjlf7rqy1vpz3x0zo7dr3h461e wsph1mstd38x46hmngdnw9q2px6bgpr8 y2zmk0dcc5qrnz3wsptjc2nkvj6c2njm ca3-fea21612ccd844708551fff186908f34 gDHKc1LEFeIG4u2xTpe75qSBqqX3QKBs8bb+aTLyfFU= status-page-domain-verification=5x7vcvmd9ykn uPFzBYGMqfzWV9F7ATscMNKeKxEUVoqNc5yc3XaVYxc= SFMC-nEyakDUFzrbNx-mOE-DoO7pwHyamFye_1hKRnKXk SPF v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all read-ai-verification=018cff29-001d-7ab4-bef3-90b8af12e93a miro-verification=30fe44355b5e5e943864b613b9a32a6e66287846 have-i-been-pwned-verification=dweb_hrwan52s5gjdi43zgzlts605 onetrust-domain-verification=63b6b77555a247c8bba0d50937b19268 AJlETpYtEacEAmZQhOJe5Kq3ZFS/Qk1HtkRArxKgGtcWZlG4WYMF/Wvvuacs7740 perplexity-ai-domain-verification-dcy685=lkvRgGm3vpCTM8m4d2gxQ0NtJ apple-domain-verification=nXPIZvDwZezX6LX1smMZ_m56O0XyW8HPcANPW2un0aw clayton-domain-verification=5305ac3d3e8d0a2fa60cd6e2bd452eca0af77b7206 pexip-ms-tenant-domain-verification=637807c3-af64-47eb-8670-ccb2b06d3a96 globalsign-domain-verification=LrLtFRQkEYs9MmkSepj4RzsYai1ST-MU2FIgQUD3jR globalsign-domain-verification=aU3yyh0plmNd4fFdxMon3FcnplkLFg9BbV7XMpVnlV globalsign-domain-verification=lYcFW-FI3WRWK_J4T-ThGgbVb7lzquBNIsXzVByz_D globalsign-domain-verification=vrsgOEbkUSia9WAI0Ke5uStDxx7GQhjdTabkkdR-n4 _globalsign-domain-verification=Jdq2DbMOsu8h6U5ryrSipD1lcSMrXP2KpueVq9tVU1 _globalsign-domain-verification=sO-WQCz3WeQNdEOvdjU-EApEzzAuOzVadSdWEutOq5 atlassian-sending-domain-verification=795fe67b-8d86-4c06-8813-c525b98bd858 pardot_123902_*=23ea9b870515e41d9f9ddcf545ab8637911f983fd55468064bd8f4b492b17feb EreAYAUDD1k91el7V/D5jx9o78kkR7r29GyFmhBzYIov3z70yp6HLIHx9ueV3xhKaUHFzb+pZa4es+2f... cisco-ci-domain-verification=5a6a2b72d2c38081a59e8c857ded96361de8610e2d359a7b7dd... atlassian-domain-verification=AJlETpYtEacEAmZQhOJe5Kq3ZFS/Qk1HtkRArxKgGtcWZlG4WY... |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 72 ms totalPASS
https://iata.org
26 ms · HTTP/1.1
https://www.iata.org/
47 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://iata.org | 301 | 26 ms | HTTP/1.1 | cloudflare |
| 2 | https://www.iata.org/ | 200 | 47 ms | HTTP/1.1 | cloudflare |
See the visual redirect chain in the HTTP Probe tab →
A+HTTP Probe TimingTotal 29 ms — DNS, TCP, TLS, TTFB, content transfer breakdownPASS
Connection waterfall
Domain IntelligenceDomain intelligence data not availableINFO
RDAP and WHOIS lookup both failed