Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Probed from Madrid, Spain

301 Moved Permanently

Checks

3 PASS 4 REVIEW 2 FIX

Redirect Chain

Action

2 redirect(s), 3156 ms total

FIX

2 redirect(s), 3156 ms total

2 redirects before reaching final URL

Each redirect adds latency. Try to minimize the chain to 1 hop.

WWW normalization redirect

Uses 302 (temporary) redirect

If permanent, use 301 instead.

Got: https://www.trip.com/

Redirect overhead: 3156 ms total

Got: 3156 ms

Cross-domain redirect detected

https://trip.com

1163 ms · HTTP/1.1

301

https://www.trip.com/

276 ms · HTTP/1.1

302

https://es.trip.com/?locale=es-es

1718 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol
1	https://trip.com	301	1163 ms	HTTP/1.1
2	https://www.trip.com/	302	276 ms	HTTP/1.1
3	https://es.trip.com/?locale=es-es	200	1718 ms	HTTP/1.1

See the visual redirect chain in the HTTP Probe tab →

Each redirect adds latency. Try to minimize the chain to 1 hop.

Why this matters

Redirect chain — each hop adds latency; combine into one redirect where possible.

Source: Google Search Central / web.dev

If permanent, use 301 instead.

Why this matters

302 (Found) is for genuinely temporary redirects — if this redirect is permanent, switch to 301 to preserve SEO equity.

Learn more ▾

Search engines treat 302 as temporary, keeping the original URL indexed and not transferring full link equity to the destination. Use 301 (Moved Permanently) for permanent redirects (HTTP→HTTPS, www-vs-non-www, URL restructures).

Source: Google Search Central

CDN & Delivery

Action

No CDN detected

FIX

No CDN detected

A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.

No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

IPv6 Readiness

Action

No IPv6 support

REVIEW

No IPv6 support

No IPv6 (AAAA) records found

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

No IPv6 Support

About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

Crawlability

robots.txt present, no sitemap

REVIEW

robots.txt present, no sitemap

robots.txt is present

Got: 3425 bytes

No sitemap.xml found

A sitemap helps search engines discover and index your pages more efficiently.

robots.txt does not reference a sitemap

Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.

A sitemap helps search engines discover and index your pages more efficiently.

Why this matters

No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.

Learn more ▾

A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.

Source: sitemaps.org / Google Search Central

Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.

Why this matters

robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.

Source: sitemaps.org

robots.txt 200 OK

Size 3425 B Sitemaps referenced 0 User-agents AdsBot-Google-Mobile, AdsBot-Google, Googlebot-Image, Twitterbot, * Blocking No — crawling allowed

User-agent: *

#airport-transfers

Allow: /m/airport-transfers/


#public

Disallow: /*.woff$

Disallow: /*.ttf$

Disallow: /*.eot$

Disallow: /*.svg$

Disallow: /m/

Disallow: /maintain/

Disallow: /account/

Disallow: /help

Disallow: /passport/

Disallow: /datatool/

Disallow: /maintain/

Disallow: /tripgenie/share

Disallow: /*/getSeoTdk*

Disallow: /*/getHotelSDTSource*

Disallow: /market/datafeed/

Disallow: /newsroom/ghost/

Disallow: /htls/restapi/*

Disallow: /restapi/soa2/*

Disallow: /htls/getHotDestination

Disallow: *searchresults*

Disallow: /searchresult/


#hotels

Disallow: /hotels/Detail/Get*

Disallow: /hotels/Home/ViewedHistory

Disallow: /hotels/map/

Disallow: /hotels/*list*/zones*

Disallow: /*/hotels/*trip.com*

Disallow: /*/hotels/api/*

Disallow: /hotels/detail/?hotelId=* 

Disallow: /m/hotels/w/list

Disallow: /hotel/w/list

Disallow: /m/hotels/w/list/searchresults

Disallow: /hotel/w/list/searchresults

Disallow: /hoh/

Disallow: /hotels/list


#flights

Disallow: /flights/graphql/

Disallow: /flights/ShowFareFirst/

Disallow: /flightsh5/

Disallow: /flights/cs/

Disallow: /flights/showfarefirst*

Disallow: /flights/ShowFareNext*

Disallow: /flights/passenger*

Disallow: /flights/*-to-*/tickets-*

Disallow: /chinaflights/showfarefirst*

Disallow: /chinaflights/ShowFareNext*

Disallow: /chinaflights/passenger*

Disallow: /chinaflights/*-to-*/tickets-*


#cars

Disallow: /carhire/online/list

Disallow: /carhire/m/list

Disallow: /carhire/list


#travel-guide

Disallow: /travel-guide/

Allow: /travel-guide/destination/

Allow: /travel-guide/attraction/

Allow: /travel-guide/shops/

Allow: /travel-guide/foods/

Allow: /travel-guide/guidebook/

Disallow: /travel-guide/attraction/*/near-me/

Disallow: /blog/attraction/

Disallow: /review/

Disallow: /moments/tag-*

Disallow: /moments/*-hotels-

Disallow: /moments/*-hotel-

Disallow: /travel-guide/attraction/*/tourist-attractions/comment*

Disallow: /travel-guide/attraction/*/tourist-attractions/ticket-book-available*


#trains

Disallow: /trains/list

Disallow: /train/*/book

Disallow: /trains/*/list

Disallow: /korail/dest

Disallow: /railcard/detail/*

Disallow: /railcard/home

Disallow: /railcard/empty

Disallow: /railcard/orderdetail

Disallow: /railcard/complete

Disallow: /trains/korail/routedetail

Disallow: /trains/*/returnlist

Disallow: /trains/*/seatselect

Disallow: /trains/*/order


#global-search

Disallow: /global-search/searchlist/search/

Disallow: /global-gssearch/searchlist/search


#finally

Disallow: /*?*aid=*

Disallow: /*?*AID=*

Disallow: /*?*Allianceid=*

Disallow: /*?*allianceid=*

Disallow: /*?*sid=*

Disallow: /*?*SID=*

Disallow: /Date(*

Disallow: /*/Date(*

Allow: /?locale=en_my$

Allow: /?locale=en_hk$

Allow: /partners/ad/*?*aid=*

Allow: /partners/ad/*?*AID=*

Allow: /partners/ad/*?*Allianceid=*

Allow: /partners/ad/*?*allianceid=*

Allow: /partners/ad/*?*sid=*

Allow: /partners/ad/*?*SID=*



User-agent: AdsBot-Google-Mobile

User-agent: AdsBot-Google

Disallow: /*.woff$

Disallow: /*.ttf$

Disallow: /*.eot$

Disallow: /*.svg$

Disallow: /m/i18n/

Disallow: /m/flights/sem/

Disallow: /travel-guide/

Disallow: /m/travel-guide/

Disallow: /market/datafeed/

Allow: /travel-guide/*/hotellist-*

Allow: /travel-guide/attraction/*

Allow: /travel-guide/destination/*



User-Agent: Googlebot-Image

Disallow: /*.jpg$



User-agent: Twitterbot

Allow: /

sitemap.xml No sitemap found

No sitemap found

Adding a sitemap helps search engines discover your pages.

HTTP Probe Timing

Total 1197 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

REVIEW

DNS Lookup

29 ms

TCP Connect

288 ms

TLS Handshake

592 ms

Time to First Byte

1.20 s

Total Time

1.20 s

Connection waterfall

DNS Lookup 29 ms TCP Connect 288 ms TLS Handshake 592 ms Server Processing 288 ms Content Transfer 0 ms

TLS Certificate Expiry & Recommendations

130 days until leaf cert expires — 4 issues to address

REVIEW

Certificate validity

130

days left

0d 30d 60d 90d+

Recommended actions

Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
Enable DNSSEC on your domain for DNS spoofing protection
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

A+

DNS Records

3 A records, 28 ms lookup

PASS

3 A records, 28 ms lookup

Resolves to 3 IPv4 address(es)

Got: 47.84.182.52, 47.236.227.188, 8.222.216.245

No IPv6 (AAAA) records

6 nameserver(s) configured

Got: a11-65.akam.net, a16-67.akam.net, a26-64.akam.net, a1-244.akam.net, a14-66.akam.net, a9-65.akam.net

3 mail exchanger(s) configured

CAA records not checked

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

SPF record present in TXT

DNS resolution time: 28 ms

Got: 28 ms

A	47.84.182.52, 47.236.227.188, 8.222.216.245
AAAA	—
CNAME	—
NS	a11-65.akam.net, a16-67.akam.net, a26-64.akam.net, a1-244.akam.net, a14-66.akam.net, a9-65.akam.net
MX	10 mx1.trip.com.ctripgslb.com 10 mx2.trip.com.ctripgslb.com 50 mx3.trip.com.ctripgslb.com
TXT	adobe-idp-site-verification=7716ea4a8f83821e53d217ec962e06a29b815cfa0f81f7fc3388... _globalsign-domain-verification=4Azi4JnsL5pAJbTgHoG6kgfsnsl7QcptSk1rqqNVoJ cursor-domain-verification-jqyypt=9T9AcnDyknWy7RVOFV68WrmUU atlassian-domain-verification=uix6c7QZQanqI81pLeily9VNfMddmMVHpeXWabEZgyrd32mO2n... _sdl9tib3d6hxtfeporqckimg4qukx3p figma-domain-verification=b5a4df3f51f320a3bc4748771180cd4a3f555cadc2bd8967d97d41... tiktok-developers-site-verification=dTIaWemWey8Xvsx9jY1PbdOLlIrD60UE cursor-domain-verification-2p9xhj=Ger1PzSro9gVUMfsBN9fAmP80 verification-code-site-App_feishu=f8ADM1vM4VhdEvl6axcN globalsign-domain-verification=8frsHcE2ag-0ccaaP5BTpPmUJC8ob8pdjDQchfAWzD cursor-domain-verification-fj7xyr=gitnAqIrE150KYWk8mhvNweGn 1334nlq5wrsnmmb97rqkxshh1wn0hrsm google-site-verification=SZw7sFjvMn0hDyxTj4m3N93T7k9XCiTZjqUJeJD2PDE JmS1QyQLwRduH4e4l2utR/WSLKfyKSi1Gzt6xjF9xYUhMQI+yyALDfmr36P1j5ja2+OjBgU/K3Mmv8bW... SPF v=spf1 include:spf.trip.com -all
CAA	Lookup not available with standard resolver

Resolved in 28 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

PASS

www/non-www, trailing slash, HTTP→HTTPS

www/non-www redirect configured correctly (preferred: non-www)

HTTP correctly 301-redirects to HTTPS

www / non-www

302https://www.trip.com/

200https://trip.com/

Preferred variant: non-www

HTTP → HTTPS

301http://trip.com/ → https://www.trip.com/

Consistent

A+

Domain Intelligence

trip.com — via MarkMonitor Inc., 28 years, 7 months old, hosted on Alibaba Cloud

PASS

trip.com — via MarkMonitor Inc., 28 years, 7 months old, hosted on Alibaba Cloud

Domain registered until Dec 19, 2027 (1 years, 8 months remaining)

DNSSEC is not enabled

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Registrar: MarkMonitor Inc.

Registrar lock is NOT enabled

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Hosting: Alibaba Cloud

Got: AS45102

Domain expiry

525 days

December 19, 2027

SSL certificate

130 days

Issued by GlobalSign nv-sa

Domain age

28 years, 7 months

Registered February 9, 1998

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

Alibaba Cloud

ASN AS45102

8.222.216.245

Registrar

MarkMonitor Inc.

Unlocked 6 NS records

Expiry timeline

Today

+1 year

Domain expiry SSL expiry Danger zone (≤30 days)

Recommended actions

Enable DNSSEC to protect visitors from DNS spoofing
Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers

Registrar MarkMonitor Inc.

Created February 9, 1998 (28 years, 7 months ago)

Expires December 19, 2027 (1 years, 8 months)

Last Updated June 13, 2019

Name Servers a1-244.akam.net, a11-65.akam.net, a14-66.akam.net, a16-67.akam.net, a26-64.akam.net, a9-65.akam.net

DNSSEC Not enabled

Hosting

IP Address 8.222.216.245

ASN AS45102 (ALIBABA-CN-NET Alibaba US Technology Co., Ltd., CN)

Provider Alibaba Cloud

Data source: rdap (0.4s)

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more ▾

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.