Skip to content
https://comptia.org

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
91
GRADE
A
FIX
1
REVIEW
2
PASS
6
INFO
0
Probed from Madrid, Spain
301 Moved Permanently
Checks
9
6 PASS 2 REVIEW 1 FIX
D
Redirect Chain
Action
3 redirect(s), 801 ms total
FIX
3 redirect(s), 801 ms total
Warning::
3 redirects before reaching final URL
Each redirect adds latency. Try to minimize the chain to 1 hop.
Info::
WWW normalization redirect
Info::
Redirect overhead: 801 ms total
Got: 801 ms

https://comptia.org

67 ms · HTTP/1.1

301

https://www.comptia.org/

565 ms · HTTP/1.1

307

https://www.comptia.org/en-eu

85 ms · HTTP/1.1

308

https://www.comptia.org/en-eu/

83 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://comptia.org30167 msHTTP/1.1cloudflare
2https://www.comptia.org/307565 msHTTP/1.1cloudflare
3https://www.comptia.org/en-eu30885 msHTTP/1.1cloudflare
4https://www.comptia.org/en-eu/20083 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

Each redirect adds latency. Try to minimize the chain to 1 hop.

Why this matters

Redirect chain — each hop adds latency; combine into one redirect where possible.

Source: Google Search Central / web.dev

B
TLS Certificate Expiry & Recommendations
84 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

84
days left
0d 30d 60d 90d+

Recommended actions

  • Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
CDN & Delivery
Cloudflare
REVIEW
Cloudflare
Info::
Site is served via Cloudflare CDN (edge: CDG)
Got: cf-ray: 9f080d605ded7913-CDG
CDN Detected: Cloudflare
Provider Cloudflare Evidence cf-ray: 9f080d605ded7913-CDG
A+
DNS Records
2 A records, 111 ms lookup
PASS
2 A records, 111 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.18.35.29, 172.64.152.227
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2606:4700:4406::6812:231d, 2a06:98c1:3102::ac40:98e3
Info::
2 nameserver(s) configured
Got: jade.ns.cloudflare.com, armando.ns.cloudflare.com
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 111 ms
Got: 111 ms
A104.18.35.29, 172.64.152.227
AAAA2606:4700:4406::6812:231d, 2a06:98c1:3102::ac40:98e3
CNAME—
NSjade.ns.cloudflare.com, armando.ns.cloudflare.com
MX
3600 comptia-org.mail.protection.outlook.com
TXT
google-site-verification=3CECmSJGNJcROJfo-1rYJRlxhlGXWKc_r9wkBWYw9ToGoogle Tenan...
miro-verification=f4fc4824207740c0fbd561595b153125fc736c58
google-site-verification=wsVzj68HGYA3tUamDEwXUoqrpL9kS2CR-YINEk5xBBc
google-site-verification=a1ZXa31HQ4_WoT6pRA0SOJV-LX6U_Ep-HOxI-mEL26o
d365mktkey=tLu4fSCN8zGYNJi9NYXiJz3QvtkWMQf1wH17tZvzNpIx
brevo-code:af62832f46a8dab3da669fd968624b72
sophos-domain-verification=7d9c175ed36647f746b2024fbf80a8253d97140cec8a6a1161609...
d365mktkey=uzh7aZHK2wTQAN5NYqjKZCE6PTi5IxJHWfixZ50ounox
google-site-verification=6whfnd04gfRPk1zaOFZGFQ_V19lqbUZZ90pP5GfpdYs
d365mktkey=1dk8d31zhcxjvlzcvnk4xpurg
anthropic-domain-verification-ch9jve=mqCxGHD12CYRLx1ebSfyNNdTk
canva-site-verification=w1cWSdPQHhbJ-z5rOpphAQ
zapier-domain-verification-challenge=2d8eae37-4037-422d-8ec1-3b1d486c78df
_oqg5hkchjjdhf77z8irk7hzat83dwnz
docusign=225cd46b-2a31-4ca4-bd8e-9a412949158f
slack-domain-verification=HrIb0Vcqn4MscKfEpaOVQEw7PcOnbxV5lF0K5JxB
202301301641301os60224kud5sojaep7q8wr7igdasl4rfcwta3kytg2otwlxth
gc-ai-domain-verification-arz9sc=0DdSPiIdVBQGuvJNh3JxhxYcD
lovable_verification=IEEpKWktDcrdKFzPGBeZ
cursor-domain-verification-4s3t0r=COmTguHEczjZIcmC9RhkBw5MR
duo_sso_verification=uDnNKVdgFxfbY32ipq8wH03FPxYK3cryfLOtnd0ARQ9zCcC7LiexioQNWPM...
atlassian-domain-verification=/YeProGwccm1twPngg9XiSxTiXKgeLWBuJ0G5CSB0aVfafDGiE...
asv=3fc9d84b440889a254c7ab0c7be2b9a8
google-site-verification=km7XLGuXwAX3yLyEFfsiyxcYZfbAsteX12j_U34kHE8
google-site-verification=9pfBCKJDs1Ku1SAhCoqLLonO2fr_ZLw5dmbcjF9ph1U
pendo-domain-verification=R06OdxL6IpiV8r_mxWAJOa-dUBA
atlassian-domain-verification=rLU6JTmRJr0Kf8gX1VxFK1JPkzC3iLjJpEjcvqO+alhZdju8DD...
google-site-verification=LGlMC_JzZaWsyGXOTQvcCAYoI-8MNK10wZQuFcAHjto
202202071623420mbf7q0wqcmfcvfoh5hq9qgtawb2oielgaaiynmle9e9m1q84s
_8508ix3urkcokct0wldtlc5cokwu7vw
SPF v=spf1 mx a:mail.certmetrics.com include:spf.protection.outlook.com include:_spf...
CAALookup not available with standard resolver
Resolved in 111 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+
IPv6 Readiness
IPv6 reachable (17 ms)
PASS
IPv6 reachable (17 ms)
Info::
IPv6 is configured and reachable at 2606:4700:4406::6812:231d, 2a06:98c1:3102::ac40:98e3
Got: 17 ms connect
IPv6 Ready
AAAA Records 2606:4700:4406::6812:231d, 2a06:98c1:3102::ac40:98e3 Connection Reachable (17 ms)
A+
Crawlability
robots.txt present, sitemap with 1112 URLs
PASS
robots.txt present, sitemap with 1112 URLs
Info::
robots.txt is present
Got: 869 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 1112 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 869 B Sitemaps referenced 8 User-agents * Blocking No — crawling allowed
User-agent: *
Disallow: /*.json$
Disallow: /cache/
Disallow: /server/
Disallow: /static/
Disallow: /types/
Disallow: /~/link/
Disallow: /api/form/
Disallow: /cdn-cgi/
Disallow: /*?_rsc=*
Disallow: /blog/listing/
Disallow: /blog/?p=
Disallow: /WebResource.axd
Disallow: /*AspxAutoDetectCookieSupport=
Disallow: /*epslanguage=
Disallow: /*abtestactive=
Disallow: /*AreaStudy=
Disallow: /*Program=
Disallow: /certifications/become-a-subject-matter-expert/workshops/ 
Sitemap: https://www.comptia.org/en/sitemap.xml
Sitemap: https://www.comptia.org/en-us/sitemap.xml
Sitemap: https://www.comptia.org/en-au/sitemap.xml
Sitemap: https://www.comptia.org/en-gb/sitemap.xml
Sitemap: https://www.comptia.org/en-za/sitemap.xml
Sitemap: https://www.comptia.org/en-em/sitemap.xml
Sitemap: https://www.comptia.org/en-eu/sitemap.xml
Sitemap: https://www.comptia.org/ja-jp/sitemap.xml
sitemap.xml 200 OK
Type URL Set URLs 1112 entries Valid XML Yes
Sample URLs:
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

307https://www.comptia.org/
200https://comptia.org/

HTTP → HTTPS

301http://comptia.org/ → https://www.comptia.org/

Consistent

A+
Domain Intelligence
comptia.org — via GoDaddy.com, LLC, 31 years, 1 months old
PASS
comptia.org — via GoDaddy.com, LLC, 31 years, 1 months old
Info::
Domain registered until Aug 14, 2032 (6 years, 4 months remaining)
Info::
DNSSEC is not enabled
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Info::
Registrar: GoDaddy.com, LLC
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Domain expiry

2225 days

August 14, 2032

SSL certificate

84 days

Issued by Google Trust Services

Domain age

31 years, 1 months

Registered August 15, 1995

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

Unknown

2606:4700:4406::6812:231d

Registrar

GoDaddy.com, LLC

Unlocked 2 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable DNSSEC to protect visitors from DNS spoofing
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar GoDaddy.com, LLC
Created August 15, 1995 (31 years, 1 months ago)
Expires August 14, 2032 (6 years, 4 months)
Last Updated July 8, 2024
Name Servers armando.ns.cloudflare.com, jade.ns.cloudflare.com
DNSSEC Not enabled
Hosting
IP Address 2606:4700:4406::6812:231d
Data source: rdap (0.3s)

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more ▾

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 115 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
45 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
18 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
23 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
115 ms
Total Time Total request time from DNS lookup through full response.
115 ms

Connection waterfall

DNS Lookup 45 ms TCP Connect 18 ms TLS Handshake 23 ms Server Processing 28 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback