Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.FIPv6 ReadinessActionIPv6 records exist but unreachableFIX
Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.
Advertising IPv6 (AAAA records) without a reachable server means IPv6-preferring clients silently fail every connection.
Learn more ▾ ▴
Modern browsers prefer IPv6 if AAAA exists (Happy Eyeballs algorithm). If the IPv6 server isn't reachable, browsers fall back to IPv4 — but with seconds of added latency per request. Either fix IPv6 reachability or remove the AAAA records.
Source: RFC 8305 (Happy Eyeballs)
BTLS Certificate Expiry & Recommendations82 days until leaf cert expires — 2 issues to addressREVIEW
Certificate validity
Recommended actions
- Submit your domain to hstspreload.org to be added to the Chrome preload list
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records2 A records, 20 ms lookupPASS
| A | 172.64.146.81, 104.18.41.175 |
| AAAA | 2606:4700:4402::6812:29af, 2a06:98c1:3107::ac40:9251 |
| CNAME | — |
| NS | hope.ns.cloudflare.com, roan.ns.cloudflare.com |
| MX | 10 aspmx.l.google.com 20 alt2.aspmx.l.google.com 20 alt1.aspmx.l.google.com 30 aspmx2.googlemail.com 30 aspmx3.googlemail.com |
| TXT | 06FB0F4CCD MS=ms26783193 MS=ms75363840 MS=ms75932089 ePwEbxX6T8GLeUY2 doit-verify295235 TAILSCALE-nNYYC0vC9TISAvboCaQA apple-domain-verification=eAu2dlDrzmPvVHPg docusign=26d57faa-4bf8-45cd-866b-a36fdf86e214 jamf-site-verification=iYyCRUNw7_AXFUC7zaLiFw qase-ca7eb2da8082aef5bed402accf262d2bca41fd30 openai-domain-verification=dv-60PIOwHK0eRDfc2VpmSJ3XY3 jetbrains-domain-verification=1k4crjxnjx7wtlhja236t8jcn loom-site-verification=dfbd3882de7e42d39aa63ac12d8f403e carta-domain-verification-p6kprv=Hf8pYNQgbK7i64r9SjTorb0sB miro-verification=c546481c526d7d0fca4b0def39a0700eeb64f077 cursor-domain-verification-tdtnd4=i4bl9JEOFE1VOQbkiMkpIfGQZ facebook-domain-verification=oiiy3kxhh6i3mzo3tecoolwkzpsqos citrix-verification-code=ecbbb3b7-9c8c-4b46-81a7-ecd2c6ff42b9 onetrust-domain-verification=0bf92d345265462eb0a4ad38c7b55188 uber-domain-verification=7898f9ad-15df-4820-b779-92b2bec7858b logmein-verification-code=b644b816-e7f4-45df-8215-6ba8db765fe9 pendo-domain-verification=4dace321-4517-49a6-b51a-ec3478a24002 zoom-domain-verification = afd6de76-b579-11ee-a506-0242ac120002 slack-domain-verification=025CLyam48F5ppYztUuMl2Ue4prf01SVmyM06BYy calendly-site-verification=JLJojO5SGco45xeUJrgD30rJACtPP9JsvM1TDRUSa google-site-verification=0W2XISvsFG0b1de6rAJqnGOZpeyHioDOc0fCPpkcga0 google-site-verification=4IlbzuraJEuEWHXSF1ealAXGwgl-01bcFI9b6KiPrzw google-site-verification=A_dMlj5RIS-42bZbR1vzM__GBhqE_l-CNAt4kHL39K8 google-site-verification=CT9vkalOAxTSSlMkSYuif3PPR9IfW9wOMDYCpHV8-pQ google-site-verification=D6kljg6Ozbxz7wkQHTu9bBD58dH48qXc8jbrSvdix20 google-site-verification=cDMxTqEGKRREjpULRkV3kxo9fUh9AAOy68UKi-sWFDA google-site-verification=fnhE2QNlMBUWS8UBhCtO4N2xU1Hv5Baq_nAGRKrDOS8 google-site-verification=l9ghJl2k5pCmyzxgB-u7zk1WdLHRxZ8Gev7eo7j6tlw google-site-verification=spiNl55E3iYMilE9lM2OB67FTeyJVzNJdYsr8YreMiE google-site-verification=vvI2V5xXtswv19eoBHMvUfLriiS1W3uTeOrHdusW3AI h1-domain-verification=jcUKHuDrikH5HZfj3S3op6kzWDJLgLg3d7pmxsKGupBKUPm1 pardot906932=62a94517bea65a4a146e19a380714f589e54114888b639e208605e1b6b445f47 pardot906932=75d30f44d6d6e89f6ea5ce36bff2d547056f93c17f7034160851f23f09a2448a pardot906932=d83df604fb40dd187d6c3def3b29591478a195def3dd9223df3d64f3fbabfd0c pardot986361=84e628bbfec0a11d5baf3b0d9631a46a0e5f6801076cfc694ca8631fc86ee0b2 hubspot-developer-verification=MDZjM2Q5Y2QtYjIxOS00ZTllLWIzYzEtMzI2YzYwZTQxY2My stripe-verification=7708116a2a258908ad3dde9ebc9ab342c43b7000f582962f69a7fdcab307... box-domain-verification=a9f4a950cfdfd3b9cea802a96528ccffbff61184fbb8363037b8cb9e... adobe-idp-site-verification=db378e2b6b1fbb203e2fa8efb4daacdd0b5837d143bd0020257d... atlassian-domain-verification=HeV4orUbu8ZU/Et3BdlguiFnoc5TqgI5owEFFTeBLYX6Lc6BZK... parallels-domain-verification=25c15af2f44f426fa520c0f140c5f3b884327a61390a439495... SPF v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:_spf.google.com ... postman-domain-verification=987281567d45964ffbd83330939d1731ef9199ac6408ad6a641d... |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
A+Redirect ChainNo redirects — direct accessPASS
https://calendly.com
384 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://calendly.com | 200 | 384 ms | HTTP/1.1 | cloudflare |
A+Crawlabilityrobots.txt present, sitemap with 985 URLsPASS
User-Agent: *
Allow: /llms.txt
Allow: /pricing
Disallow: /abuse_reports/new
Disallow: /*?*
Disallow: /app/
User-Agent: ia_archiver
Allow: /$
Allow: /llms.txt
Allow: /pricing
Disallow: /
User-Agent: CCBot
Allow: /llms.txt
Allow: /pricing
Disallow: /
Host: https://calendly.com
Sitemap: https://calendly.com/marketing-site/sitemap.xml
A+URL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Consistent
A+Domain Intelligencecalendly.com — via GoDaddy.com, LLC, 13 years, 3 months old, hosted on CloudflarePASS
256 days
February 26, 2027
82 days
Issued by Google Trust Services
13 years, 3 months
Registered February 26, 2013
Enabled
Protects against DNS spoofing
Cloudflare
ASN AS13335
172.64.146.81
GoDaddy.com, LLC
Expiry timeline
Recommended actions
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice