Skip to content
https://bab.la

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
96
GRADE
A
FIX
0
REVIEW
2
PASS
7
INFO
0
Probed from New York, United Stated
200 OK
Checks
9
7 PASS 2 REVIEW
B
Crawlability
robots.txt present, no sitemap
REVIEW
robots.txt present, no sitemap
Info::
robots.txt is present
Got: 353 bytes
Info::
No sitemap.xml found
A sitemap helps search engines discover and index your pages more efficiently.
Info::
robots.txt does not reference a sitemap
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.

A sitemap helps search engines discover and index your pages more efficiently.

Why this matters

No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.

Learn more ▾

A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.

Source: sitemaps.org / Google Search Central

Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.

Why this matters

robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.

Source: sitemaps.org

robots.txt 200 OK
Size 353 B Sitemaps referenced 0 User-agents AmazonAdBot, ias_crawler, ias_wombles, 008, *, Bingbot, SirdataBot, Verity/1.1, Keybot Translation-Search-Machine, Covario-IDS Blocking No — crawling allowed
User-agent: AmazonAdBot
Disallow: /auth/xshare

User-agent: *
Disallow: /auth/xshare
Disallow: /*/spellcheck/

User-agent: Bingbot
User-agent: ias_crawler
User-agent: ias_wombles
User-agent: SirdataBot
Crawl-delay: 1

User-agent: Verity/1.1
Crawl-delay: 3

User-agent: Keybot Translation-Search-Machine
User-agent: Covario-IDS
User-agent: 008
Disallow:/
sitemap.xml No sitemap found

No sitemap found

Adding a sitemap helps search engines discover your pages.

B
TLS Certificate Expiry & Recommendations
31 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

31
days left
0d 30d 60d 90d+

Recommended actions

  • Extend HSTS max-age to at least 31536000 (1 year) to meet the preload list criteria
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+
DNS Records
2 A records, 13 ms lookup
PASS
2 A records, 13 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.18.10.40, 104.18.11.40
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2606:4700::6812:b28, 2606:4700::6812:a28
Info::
2 nameserver(s) configured
Got: tim.ns.cloudflare.com, zoe.ns.cloudflare.com
Info::
5 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 13 ms
Got: 13 ms
A104.18.10.40, 104.18.11.40
AAAA2606:4700::6812:b28, 2606:4700::6812:a28
CNAME—
NStim.ns.cloudflare.com, zoe.ns.cloudflare.com
MX
1 aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
TXT
adobe-idp-site-verification=fe1e7c2e-02bf-4c4b-ad28-3f9a03c275b6
google-site-verification=8d6Ks8XXY74q3Mbqu9JyCX1zc7eISN-0HHnn7w6pcDM
google-site-verification=biIt6hmP6t3GDyYqAukG2a4titGVcXgTRYk_q3FpkdY
google-site-verification=qcRd31y2Km5uIA3UZPLx3xJmxSIgleSnX1Y-t9GYr50
paddle-verification=02bc8747
paddle-verification=215d7cf1
paddle-verification=23d15f83
paddle-verification=4d0cd995
paddle-verification=505cb768
paddle-verification=561ca1b7
paddle-verification=5b152e1b
paddle-verification=661b3bd9
paddle-verification=6836c1d3
paddle-verification=748fcf0
paddle-verification=7cd2f247
paddle-verification=7ce25034
paddle-verification=7e586302
paddle-verification=7ef8134a
paddle-verification=861b57eb
paddle-verification=9aba024c
paddle-verification=a887a5be
paddle-verification=a8f8a98e
paddle-verification=b41322f2
paddle-verification=bf923ae9
paddle-verification=cf91f61c
paddle-verification=db620be4
paddle-verification=e25463d5
paddle-verification=f3fb0a6e
paddle-verification=f5cb38c7
paddle-verification=f7c1aa26
paddle-verification=f987060f
paddle-verification=ff1baefd
SPF v=spf1 include:_spf.google.com ip4:85.25.30.160/27 include:spf1.mcsv.net include...
CAALookup not available with standard resolver
Resolved in 13 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+
Redirect Chain
No redirects — direct access
PASS
No redirects — direct access
Info::
No redirects — direct access
Got: https://bab.la

https://bab.la

438 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://bab.la200438 msHTTP/1.1cloudflare
A+
IPv6 Readiness
IPv6 reachable (2 ms)
PASS
IPv6 reachable (2 ms)
Info::
IPv6 is configured and reachable at 2606:4700::6812:b28, 2606:4700::6812:a28
Got: 2 ms connect
IPv6 Ready
AAAA Records 2606:4700::6812:b28, 2606:4700::6812:a28 Connection Reachable (2 ms)
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

301https://www.bab.la/
200https://bab.la/

Preferred variant: non-www

HTTP → HTTPS

301http://bab.la/ → https://bab.la/

Consistent

A+
Domain Intelligence
bab.la — via Key-Systems GmbH, 19 years, 9 months old
PASS
bab.la — via Key-Systems GmbH, 19 years, 9 months old
Info::
Domain registered until Oct 26, 2026 (6 months remaining)
Info::
Registrar: Key-Systems GmbH
Info::
Registrar lock is enabled
Domain cannot be transferred without explicit unlock from the registrar. This protects against unauthorized transfers.
Domain expiry

133 days

October 26, 2026

SSL certificate

31 days

Issued by Google Trust Services

Domain age

19 years, 9 months

Registered October 26, 2006

DNSSEC

Status unknown

Protects against DNS spoofing

Hosting

Unknown

2606:4700::6812:b28

Registrar

Key-Systems GmbH

Locked 2 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Registrar Key-Systems GmbH
Created October 26, 2006 (19 years, 9 months ago)
Expires October 26, 2026 (6 months)
Last Updated November 21, 2025
Name Servers tim.ns.cloudflare.com, zoe.ns.cloudflare.com
Hosting
IP Address 2606:4700::6812:b28
Data source: whois (2.1s)

Domain cannot be transferred without explicit unlock from the registrar. This protects against unauthorized transfers.

Why this matters

Registrar lock (clientTransferProhibited et al.) prevents unauthorized domain transfers — strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A
HTTP Probe Timing
Total 641 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
6 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
2 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
7 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
555 ms
Total Time Total request time from DNS lookup through full response.
642 ms

Connection waterfall

DNS Lookup 6 ms TCP Connect 2 ms TLS Handshake 7 ms Server Processing 540 ms Content Transfer 87 ms
A
CDN & Delivery
Cloudflare (DYNAMIC)
PASS
Cloudflare (DYNAMIC)
Info::
Site is served via Cloudflare CDN (edge: EWR)
Got: cf-ray: 9f085103f8768ae3-EWR
Info::
CDN cache status: DYNAMIC
CDN Detected: Cloudflare
Provider Cloudflare Cache Status DYNAMIC Evidence cf-ray: 9f085103f8768ae3-EWR
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback