Skip to content
https://6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app

Infrastructure

· 17 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
92
GRADE
A
FIX
0
REVIEW
6
PASS
10
INFO
1
Probed from Sao Paulo, Brazil
200 OK
Checks
17
10 PASS 6 REVIEW
B
DNSSEC
Unsigned (DNSSEC not deployed)
REVIEW
Unsigned (DNSSEC not deployed)
Info::
DNSSEC is not deployed
The zone is not DNSSEC-signed. Users on validating resolvers (Cloudflare 1.1.1.1, Quad9 9.9.9.9, growing default in mobile resolvers) get no protection against DNS spoofing for this domain. Most registrars now offer DNSSEC at a single click; consider enabling it for sites where authenticity matters (banking, healthcare, government).
B
CAA Records
No CAA records (any CA may issue certificates)
REVIEW
No CAA records (any CA may issue certificates)
Info::
No CAA records published
Without CAA records, any publicly-trusted CA can issue certificates for this domain. Adding a CAA record (`yourdomain. IN CAA 0 issue "letsencrypt.org"`) restricts issuance to CAs you authorize. Required by CAB Forum baseline since 2017; the default of 'any CA' is widely supported but is the broader attack surface for issuance fraud.
B
Reverse DNS
0/2 IPs match cert SAN
REVIEW
0/2 IPs match cert SAN
Info::
PTR for 54.232.119.62 does not match any cert SAN: ec2-54-232-119-62.sa-east-1.compute.amazonaws.com
Common when behind a CDN or shared hosting (PTR points at the provider's hostname). Mismatch can also affect mail deliverability if this IP sends email -- many MTAs reject mail when forward+reverse DNS disagree.
Info::
PTR lookup failed for 2600:1f1e:7c1:c300::258: lookup 2600:1f1e:7c1:c300::258: no such host
No reverse DNS record set for this IP. Common on bare cloud-VM IPs without provider-side PTR; not a security issue.
C
HTTP Probe Timing
Action
Total 1942 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
REVIEW
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
10 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
2 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
4 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
1.94 s
Total Time Total request time from DNS lookup through full response.
1.94 s

Connection waterfall

DNS Lookup 10 ms TCP Connect 2 ms TLS Handshake 4 ms Server Processing 1.92 s Content Transfer 2 ms
B
TLS Certificate Expiry & Recommendations
147 days until leaf cert expires — 2 issues to address
REVIEW

Certificate validity

147
days left
0d 30d 60d 90d+

Recommended actions

  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
Operational Status Page
No status page link detected
REVIEW
No status page link detected
Info::
No operational status page link detected
Status pages communicate planned maintenance and incidents to users -- a hallmark of operationally-mature services. Most SaaS teams publish one via Atlassian Statuspage, Instatus, BetterUptime, or a self-hosted Cachet. Smaller sites legitimately don't need one; flagged as Info, not a failure.
A
DNS Records
1 A records, 113 ms lookup
PASS
1 A records, 113 ms lookup
Info::
Resolves to 1 IPv4 address(es)
Got: 54.232.119.62
Info::
Single A record — no DNS redundancy
Multiple A records provide failover if one server goes down.
Info::
Has 1 IPv6 (AAAA) record(s)
Got: 2600:1f1e:7c1:c300::258
Info::
No NS records found
Info::
No MX records — email not configured via DNS
Info::
No SPF record found in TXT records
SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.
Info::
DNS resolution time: 113 ms
Got: 113 ms
A54.232.119.62
AAAA2600:1f1e:7c1:c300::258
CNAME—
NS—
MX—
TXT—
CAALookup not available with standard resolver
Resolved in 113 ms

Multiple A records provide failover if one server goes down.

Why this matters

Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.

Learn more ▾

Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.

Source: SRE practice / DNS architecture

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

Why this matters

Without SPF, receiving servers can't validate sending IPs — your domain is easier to spoof in phishing.

Learn more ▾

SPF complements DMARC. Both should be published. SPF records list authorized sending IPs (e.g., `v=spf1 include:_spf.google.com ~all` for Google Workspace). After publishing, verify in Google Postmaster Tools or mxtoolbox.

Source: RFC 7208 (SPF)

A+
Subdomain Takeover
No subdomain takeover risk detected
PASS
No subdomain takeover risk detected
Info::
No CNAME record present
A+
Multi-Resolver DNS Speed
Mean 4ms across 3 resolvers (spread 3ms)
PASS
Mean 4ms across 3 resolvers (spread 3ms)
Info::
Cloudflare: 3ms
Got: 3ms via 1.1.1.1:53
Info::
Quad9: 3ms
Got: 3ms via 9.9.9.9:53
Info::
Google: 6ms
Got: 6ms via 8.8.8.8:53
A+
Redirect Chain
No redirects — direct access
PASS
No redirects — direct access
Info::
No redirects — direct access
Got: https://6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app

https://6adb5d4e294faeed8e5a7a41--playfu...

343 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://6adb5d4e294faeed8e5a7a41--playfu...200343 msHTTP/1.1Netlify
A+
IPv6 Readiness
IPv6 reachable (3 ms)
PASS
IPv6 reachable (3 ms)
Info::
IPv6 is configured and reachable at 2600:1f1e:7c1:c300::258
Got: 3 ms connect
IPv6 Ready
AAAA Records 2600:1f1e:7c1:c300::258 Connection Reachable (3 ms)
A+
Crawlability
robots.txt present, sitemap with 84 URLs
PASS
robots.txt present, sitemap with 84 URLs
Info::
robots.txt is present
Got: 471 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 84 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 471 B Sitemaps referenced 1 User-agents * Blocking No — crawling allowed
# All Tax & Books — default-open search and AI discovery policy
# Public pages are crawlable by current and future agents.
# This is a crawler courtesy instruction, not an access-control mechanism.
User-agent: *
Allow: /
Disallow: /api/
Disallow: /upload.html
Disallow: /es/upload.html
Disallow: /it/upload.html
Disallow: /sq/upload.html
Disallow: /upload/
Disallow: /es/upload/
Disallow: /it/upload/
Disallow: /sq/upload/

Sitemap: https://alltaxbooks.com/sitemap.xml
sitemap.xml 200 OK
Type URL Set URLs 84 entries Valid XML Yes
Sample URLs:
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
HTTP correctly redirects to HTTPS permanently
Got: HTTP 301

www / non-www

https://www.6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app/
200https://6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app/

HTTP → HTTPS

301http://6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app/ → https://6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app/

Consistent

A
CDN & Delivery
Netlify ("Netlify Edge"; fwd=miss; fwd-status=200; stored)
PASS
Netlify ("Netlify Edge"; fwd=miss; fwd-status=200; stored)
Info::
Document is served via Netlify CDN
Got: delegation 6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app
Info::
CDN cache status: "Netlify Edge"; fwd=miss; fwd-status=200; stored
Document served via CDN: Netlify
Provider Netlify Cache Status "Netlify Edge"; fwd=miss; fwd-status=200; stored Evidence delegation 6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app
A+
CDN Cache Observability
Cache state: Age=1s
PASS
Cache state: Age=1s
Info::
CDN cache state observable via 1 header(s)
Got: age=1
A+
Health Check Endpoint
Health endpoint at https://6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app/health (HTTP 200)
PASS
Health endpoint at https://6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app/health (HTTP 200)
Info::
Public health endpoint at https://6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app/health
Got: https://6adb5d4e294faeed8e5a7a41--playful-druid-09ba17.netlify.app/health
Domain Intelligence
Domain intelligence data not available
INFO
Domain intelligence data not available

RDAP and WHOIS lookup both failed

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback