Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.FIPv6 ReadinessActionIPv6 records exist but unreachableFIX
Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.
Advertising IPv6 (AAAA records) without a reachable server means IPv6-preferring clients silently fail every connection.
Learn more ▾ ▴
Modern browsers prefer IPv6 if AAAA exists (Happy Eyeballs algorithm). If the IPv6 server isn't reachable, browsers fall back to IPv4 — but with seconds of added latency per request. Either fix IPv6 reachability or remove the AAAA records.
Source: RFC 8305 (Happy Eyeballs)
BCrawlabilityno robots.txt, no sitemapREVIEW
robots.txt is optional but recommended. It tells search engine crawlers which pages to index.
No robots.txt — crawlers fetch /robots.txt and get 404; not breaking but means default crawl behavior with no directives or sitemap reference.
Learn more ▾ ▴
A minimal robots.txt with `User-agent: * / Allow: / / Sitemap: https://example.com/sitemap.xml` covers the basics. Without it, crawlers behave fine but lose the sitemap signal and can't be selectively blocked from crawl-traps.
Source: robotstxt.org
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
No robots.txt found
This is fine for most sites — a missing robots.txt allows all crawling by default.
No sitemap found
Adding a sitemap helps search engines discover your pages.
BTLS Certificate Expiry & Recommendations54 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
BCDN & DeliveryAkamaiREVIEW
A+DNS Records2 A records, 16 ms lookupPASS
| A | 23.212.62.214, 23.212.62.201 |
| AAAA | 2600:1406:2e00:49::172e:d8c5, 2600:1406:2e00:49::172e:d8c6 |
| CNAME | — |
| NS | a1-51.akam.net, a3-64.akam.net, a13-65.akam.net, a14-66.akam.net, a6-66.akam.net, a12-65.akam.net |
| MX | 5 staples-ca.mail.protection.outlook.com |
| TXT | adobe-idp-site-verification=fbda9ca8c5716bf94225e724e4d44e30436cd25da832155c6ab8... google-site-verification=Ce0My9LnK2p7dxMJHjQKQsS_XChvkoqVLW1PyB5C-Mo facebook-domain-verification=lpail3pxx89t1y7jh2fj156z5v7qau 3MUO75ojsd3L3E9sLFJijaq3Wafo8u8xIvykIkFU+ss= nSVmyJfroq8tUFpqvp7yFiJjAYRHLMVXM6p5LDm7/YVl1QTCwkqdZmzmWCCT91gO6aszHNvgULX7c8k9... google-site-verification=4N76zLtVCl8ScBQ98KF8bBLU0JDXxdsO9lAFPyB3zO8 google-site-verification=Yud76o_0Z6tG2gycgwXpdUbqPjQqvwJPKLKCwo3sT9g apple-domain-verification=Q1sqOZD5QcOznVmg google-site-verification=eJ0_OeY4o2RjTlqiS-oMqzgSYrwQaMRBfFHWA4iclGo klaviyo-site-verification=H5Zgkx SPF v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all google-site-verification=JzXb3Qo5vrfcZnmL7zyi8kMbpUwqHzTfR5oLFWuBvxM klaviyo-site-verification=KmKJLV google-site-verification=b5fgz0JnswRXDgrpK9RawNqjua0viWvhuvzrKaai1Xo T3PXx3DGOw9E7ltsgmh2ICvtMK3HJwH2JnWXlMLZGgf3KwPGgPQyjjVk6yU6zqQOojJR4clCz+/fRHA5... |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 84 ms totalPASS
https://staples.ca
36 ms · HTTP/1.1
https://www.staples.ca/
48 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://staples.ca | 301 | 36 ms | HTTP/1.1 | AkamaiGHost |
| 2 | https://www.staples.ca/ | 429 | 48 ms | HTTP/1.1 | cloudflare |
See the visual redirect chain in the HTTP Probe tab →
A+URL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
HTTP → HTTPS
Consistent
A+Domain Intelligencestaples.ca — via MarkMonitor International Canada Ltd., 25 years, 10 months old, hosted on AkamaiPASS
507 days
December 2, 2027
54 days
Issued by Let's Encrypt
25 years, 10 months
Registered October 17, 2000
Not enabled
Protects against DNS spoofing
Akamai
ASN AS20940
23.46.216.197
MarkMonitor International Canada Ltd.
Expiry timeline
Recommended actions
- Enable DNSSEC to protect visitors from DNS spoofing
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.
Learn more ▾ ▴
DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.
Source: ICANN / RFC 4033