Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.

SCORE

100

GRADE

A+

FIX

REVIEW

PASS

INFO

Probed from Madrid, Spain

200 OK

Checks

7 PASS 2 REVIEW

HTTP Probe Timing

Action

Total 1849 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

REVIEW

DNS Lookup

40 ms

TCP Connect

30 ms

TLS Handshake

35 ms

Time to First Byte

534 ms

Total Time

1.85 s

Connection waterfall

DNS Lookup 40 ms TCP Connect 30 ms TLS Handshake 35 ms Server Processing 429 ms Content Transfer 1.32 s

TLS Certificate Expiry & Recommendations

324 days until leaf cert expires — 3 issues to address

REVIEW

Certificate validity

324

days left

0d 30d 60d 90d+

Recommended actions

Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
Enable DNSSEC on your domain for DNS spoofing protection
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

A+

DNS Records

4 A records, 29 ms lookup

PASS

4 A records, 29 ms lookup

Resolves to 4 IPv4 address(es)

Got: 18.239.18.76, 18.239.18.69, 18.239.18.44, 18.239.18.14

Has 8 IPv6 (AAAA) record(s)

Got: 2600:9000:2449:1a00:15:d33e:2640:93a1, 2600:9000:2449:fa00:15:d33e:2640:93a1, 2600:9000:2449:4000:15:d33e:2640:93a1, 2600:9000:2449:e000:15:d33e:2640:93a1, 2600:9000:2449:3800:15:d33e:2640:93a1, 2600:9000:2449:4600:15:d33e:2640:93a1, 2600:9000:2449:3600:15:d33e:2640:93a1, 2600:9000:2449:7800:15:d33e:2640:93a1

4 nameserver(s) configured

Got: ns-1756.awsdns-27.co.uk, ns-1510.awsdns-60.org, ns-60.awsdns-07.com, ns-816.awsdns-38.net

7 mail exchanger(s) configured

CAA records not checked

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

SPF record present in TXT

DNS resolution time: 29 ms

Got: 29 ms

A	18.239.18.76, 18.239.18.69, 18.239.18.44, 18.239.18.14
AAAA	2600:9000:2449:1a00:15:d33e:2640:93a1, 2600:9000:2449:fa00:15:d33e:2640:93a1, 2600:9000:2449:4000:15:d33e:2640:93a1, 2600:9000:2449:e000:15:d33e:2640:93a1, 2600:9000:2449:3800:15:d33e:2640:93a1, 2600:9000:2449:4600:15:d33e:2640:93a1, 2600:9000:2449:3600:15:d33e:2640:93a1, 2600:9000:2449:7800:15:d33e:2640:93a1
CNAME	—
NS	ns-1756.awsdns-27.co.uk, ns-1510.awsdns-60.org, ns-60.awsdns-07.com, ns-816.awsdns-38.net
MX	10 aspmx.l.google.com 20 alt1.aspmx.l.google.com 20 alt2.aspmx.l.google.com 30 aspmx3.googlemail.com 30 aspmx2.googlemail.com 30 aspmx5.googlemail.com 30 aspmx4.googlemail.com
TXT	google-site-verification=eqogjmVDZB-9UMYUFvv5OlEO_a20KZadbY7DJw35Dys _wpengine-sso-challenge= 2KkDEiUGF0IvgPeA6uHIcV57z9H atlassian-domain-verification=dZ8g4eOwcpvhvx5AD10LH0gUSjKTUUgORwal07qANXl3412gq8... _wpengine-sso-challenge.flipboard.com= 2KkDEiUGF0IvgPeA6uHIcV57z9H google-site-verification=BqjKftnKldO1vP49cSkz2ryHMLPk5y3V6-JlkIhUo1U have-i-been-pwned-verification=6b731851fd4ef8a6d49f6f8ff8f3eed4 google-site-verification=EU2djlhiCyLFRE6dqL0HEIwLSclUSRLzkbvQ4ObXr7I anthropic-domain-verification-1avd9b=GWlaVK7cM1UrnAecUR0PhzRI7 google-site-verification=196ICmalqDggbij227IKpDuO8wjKIGJOoWQUKVR0B0U SPF v=spf1 include:servers.mcsv.net include:sendgrid.net include:_spf.google.com ip4... google-site-verification=47g-PnfQPJHjb8Ze5YYF-hF2ABg67yFQc-kwrSv8PAY google-site-verification=9rExE5dYg3CPZ3GFGvrkj2MbbKAkdHHH5aRUYSnq9w4
CAA	Lookup not available with standard resolver

Resolved in 29 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+

Redirect Chain

No redirects — direct access

PASS

No redirects — direct access

Got: https://flipboard.com

https://flipboard.com

455 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol	Server
1	https://flipboard.com	200	455 ms	HTTP/1.1

A+

IPv6 Readiness

IPv6 reachable (30 ms)

PASS

IPv6 reachable (30 ms)

IPv6 is configured and reachable at 2600:9000:2449:1a00:15:d33e:2640:93a1, 2600:9000:2449:fa00:15:d33e:2640:93a1, 2600:9000:2449:4000:15:d33e:2640:93a1, 2600:9000:2449:e000:15:d33e:2640:93a1, 2600:9000:2449:3800:15:d33e:2640:93a1, 2600:9000:2449:4600:15:d33e:2640:93a1, 2600:9000:2449:3600:15:d33e:2640:93a1, 2600:9000:2449:7800:15:d33e:2640:93a1

Got: 30 ms connect

IPv6 Ready

AAAA Records 2600:9000:2449:1a00:15:d33e:2640:93a1, 2600:9000:2449:fa00:15:d33e:2640:93a1, 2600:9000:2449:4000:15:d33e:2640:93a1, 2600:9000:2449:e000:15:d33e:2640:93a1, 2600:9000:2449:3800:15:d33e:2640:93a1, 2600:9000:2449:4600:15:d33e:2640:93a1, 2600:9000:2449:3600:15:d33e:2640:93a1, 2600:9000:2449:7800:15:d33e:2640:93a1 Connection Reachable (30 ms)

A+

Crawlability

robots.txt present, sitemap with 1869 URLs

PASS

robots.txt present, sitemap with 1869 URLs

robots.txt is present

Got: 4971 bytes

sitemap.xml is present

sitemap.xml is valid XML

sitemap.xml contains 1869 entries

Sitemap index with 1869 child sitemaps

robots.txt references sitemap

robots.txt 200 OK

Size 4971 B Sitemaps referenced 1 User-agents Crew AI, INK Editor, Open AI, Aria Browse, Content Samurai, Meta-AI, Conversion AI, DeepSeek, Page Analyzer AI, Sentibot, Zerochat, AIMatrix, Contentedge, CrawlQ AI, DeepMind, Genspark, Grendizer, Nova Act, WPBot, Amazon-Kendra, Hemingway Editor, Hugging Face, JasperAI, Kafkai, PanguBot, Zimm, AI2Bot, CopyAI, Knowledge, Cotoyogi, Flyriver, PiplBot, FacebookBot, FacebookExternalHit, img2dataset, Sonic, Sudowrite, Webzio, Whisper, Azure, Chinchilla, Content Harmony, Frase AI, LLaMA, Narrative, Rytr, Amazon Textract, Brave Leo, ImageGen, SlickWrite, Wordtune, AndersPinkBot, BardBot, Bytespider, GenAI, GT Bot, MetaTagBot, RobotSpider, Zhipu, Alpha AI, Amazon Silk, Anthropic, OpenBot, Text Blaze, CC-Crawler, CommonCrawl, ContentBot, Copymatic, Crawlspace, DuckAssistBot, Goose, Omgili, AI Writer, AITraining, Cohere, DALL-E, ISSCyberRiskCrawler, Meta AI, Operator, Stability, Copyscape, ImagesiftBot, IntelliSeek, Inferkit, Timpibot, AI Search Engine, AwarioSmartBot, Falcon, Paraphraser.io, ProWritingAid, WormsGTP, YouBot, ChatGLM, Paperlibot, Surfer AI, .ai, AIBot, Doubao AI, Kangaroo, magpie-crawler, MetaAI, Scalenut, Sidetrade, AnyPicker, Automated Writer, AwarioRssBot, Claude, Gemma, Grok, Spinbot, Writescope, CCBot, NeevaBot, Simplified AI, The Knowledge AI, WordAI, AI Article Writer, AI Dungeon, Content Optimizer, Copilot, DataProvider, Diffbot, GTBot, OpenText AI, Common Crawl, Gemini, Phindbot, Sitefinity, Writesonic, Agentic, AI Content Detector, AI21 Labs, AI Training, FriendlyCrawler, Meta-External, SEO Content Machine, ClearScope, ContentAtScale, Firecrawl, GPT, Neural Text, QuillBot, SaplingAI, Scrapy, AlphaAI, CatBoost, DeepL, Hypotenuse AI, MarketMuse, Perplexity, ScriptBook, Writecream, AmazonBot, Anyword, Articoolo, ByteDance, OAI-SearchBot, PetalBot, SEO Robot, xAI, ICC-Crawler, Scraper, StableDiffusionBot, Super Agent, Zero GTP, *, Amazon Lex, OpenAI, GPTBot, AI SEO Crawler, CrewAI, DataForSeoBot, DeepAI, Grammarly, KomoBot, Spin Rewriter, TextCortex, Amazon Bedrock, Amazon Sagemaker, Amelia, Keyword Density AI, LLMs, Meltwater, Outwrite, Vidnami AI, Alexa, Amazon Comprehend, iaskspider, INKforall, Mistral, NeuralSEO, Skydancer, WriterZen, AISearchBot, Content King, GLM, xBot Blocking No — crawling allowed

# robots.txt for http://flipboard.com

# Ultimate AI Block List v1.4 20250417
# https://perishablepress.com/ultimate-ai-block-list/

User-agent: .ai 
User-agent: Agentic
User-agent: AI Article Writer
User-agent: AI Content Detector
User-agent: AI Dungeon
User-agent: AI Search Engine
User-agent: AI SEO Crawler
User-agent: AI Writer
User-agent: AI21 Labs
User-agent: AI2Bot
User-agent: AIBot
User-agent: AIMatrix
User-agent: AISearchBot
User-agent: AI Training
User-agent: AITraining
User-agent: Alexa
User-agent: Alpha AI
User-agent: AlphaAI
User-agent: Amazon Bedrock
User-agent: Amazon-Kendra
User-agent: Amazon Lex
User-agent: Amazon Comprehend
User-agent: Amazon Sagemaker
User-agent: Amazon Silk
User-agent: Amazon Textract
User-agent: AmazonBot
User-agent: Amelia
User-agent: AndersPinkBot
User-agent: Anthropic
User-agent: AnyPicker
User-agent: Anyword
User-agent: Aria Browse
User-agent: Articoolo
User-agent: Automated Writer
User-agent: AwarioRssBot
User-agent: AwarioSmartBot
User-agent: Azure
User-agent: BardBot
User-agent: Brave Leo
User-agent: ByteDance
User-agent: Bytespider
User-agent: CatBoost
User-agent: CC-Crawler
User-agent: CCBot
User-agent: ChatGLM
User-agent: Chinchilla
User-agent: Claude
User-agent: ClearScope
User-agent: Cohere
User-agent: Common Crawl
User-agent: CommonCrawl
User-agent: Content Harmony
User-agent: Content King
User-agent: Content Optimizer
User-agent: Content Samurai
User-agent: ContentAtScale
User-agent: ContentBot
User-agent: Contentedge
User-agent: Conversion AI
User-agent: Copilot
User-agent: CopyAI
User-agent: Copymatic
User-agent: Copyscape
User-agent: Cotoyogi
User-agent: CrawlQ AI
User-agent: Crawlspace
User-agent: Crew AI
User-agent: CrewAI
User-agent: DALL-E
User-agent: DataForSeoBot
User-agent: DataProvider
User-agent: DeepAI
User-agent: DeepL
User-agent: DeepMind
User-agent: DeepSeek
User-agent: Diffbot
User-agent: Doubao AI
User-agent: DuckAssistBot
User-agent: FacebookBot
User-agent: FacebookExternalHit
User-agent: Falcon
User-agent: Firecrawl
User-agent: Flyriver
User-agent: Frase AI
User-agent: FriendlyCrawler
User-agent: Gemini
User-agent: Gemma
User-agent: GenAI
User-agent: Genspark
User-agent: GLM
User-agent: Goose
User-agent: GPT
User-agent: Grammarly
User-agent: Grendizer
User-agent: Grok
User-agent: GT Bot
User-agent: GTBot
User-agent: Hemingway Editor
User-agent: Hugging Face
User-agent: Hypotenuse AI
User-agent: iaskspider
User-agent: ICC-Crawler
User-agent: ImageGen
User-agent: ImagesiftBot
User-agent: img2dataset
User-agent: INK Editor
User-agent: INKforall
User-agent: IntelliSeek
User-agent: Inferkit
User-agent: ISSCyberRiskCrawler
User-agent: JasperAI
User-agent: Kafkai
User-agent: Kangaroo
User-agent: Keyword Density AI
User-agent: Knowledge
User-agent: KomoBot
User-agent: LLaMA
User-agent: LLMs
User-agent: magpie-crawler
User-agent: MarketMuse
User-agent: Meltwater
User-agent: Meta AI
User-agent: Meta-AI
User-agent: Meta-External
User-agent: MetaAI
User-agent: MetaTagBot
User-agent: Mistral
User-agent: Narrative
User-agent: NeevaBot
User-agent: Neural Text
User-agent: NeuralSEO
User-agent: Nova Act
User-agent: OAI-SearchBot
User-agent: Omgili
User-agent: Open AI
User-agent: OpenAI
User-agent: OpenBot
User-agent: OpenText AI
User-agent: Operator
User-agent: Outwrite
User-agent: Page Analyzer AI
User-agent: PanguBot
User-agent: Paperlibot
User-agent: Paraphraser.io
User-agent: Perplexity
User-agent: PetalBot
User-agent: Phindbot
User-agent: PiplBot
User-agent: ProWritingAid
User-agent: QuillBot
User-agent: RobotSpider
User-agent: Rytr
User-agent: SaplingAI
User-agent: Scalenut
User-agent: Scraper
User-agent: Scrapy
User-agent: ScriptBook
User-agent: SEO Content Machine
User-agent: SEO Robot
User-agent: Sentibot
User-agent: Sidetrade
User-agent: Simplified AI
User-agent: Sitefinity
User-agent: Skydancer
User-agent: SlickWrite
User-agent: Sonic
User-agent: Spin Rewriter
User-agent: Spinbot
User-agent: Stability
User-agent: StableDiffusionBot
User-agent: Sudowrite
User-agent: Super Agent
User-agent: Surfer AI
User-agent: Text Blaze
User-agent: TextCortex
User-agent: The Knowledge AI
User-agent: Timpibot
User-agent: Vidnami AI
User-agent: Webzio
User-agent: Whisper
User-agent: WordAI
User-agent: Wordtune
User-agent: WormsGTP
User-agent: WPBot
User-agent: Writecream
User-agent: WriterZen
User-agent: Writescope
User-agent: Writesonic
User-agent: xAI
User-agent: xBot
User-agent: YouBot
User-agent: Zero GTP
User-agent: Zerochat
User-agent: Zhipu
User-agent: Zimm
User-agent: GPTBot
Disallow: /

User-agent: *
Disallow: /analytics/
Disallow: /api/
Disallow: /bookmarklet/
Disallow: /editor/
Disallow: /getflipit
Disallow: /logout
Disallow: /notifications
Disallow: /post
Disallow: /oauth/
Disallow: /redirect?
Disallow: /search/
Disallow: /signout
Disallow: /static/ebsa/
Disallow: /static/gfs/
Disallow: /zite-importer
Disallow: /.well-known/
Disallow: /section
Disallow: /cover/
Crawl-delay: 10

Sitemap: https://flipboard.com/sitemap.xml

sitemap.xml 200 OK

Type Sitemap Index URLs 1869 entries Valid XML Yes

Child Sitemaps:

A+

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

PASS

www/non-www, trailing slash, HTTP→HTTPS

www/non-www redirect configured correctly (preferred: non-www)

HTTP correctly 301-redirects to HTTPS

www / non-www

301https://www.flipboard.com/

200https://flipboard.com/

Preferred variant: non-www

HTTP → HTTPS

301http://flipboard.com/ → https://flipboard.com/

Consistent

A+

Domain Intelligence

flipboard.com — via Amazon Registrar, Inc., 26 years, 6 months old

PASS

flipboard.com — via Amazon Registrar, Inc., 26 years, 6 months old

Domain registered until Mar 6, 2027 (10 months remaining)

DNSSEC is not enabled

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Registrar: Amazon Registrar, Inc.

Registrar lock is NOT enabled

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Domain expiry

232 days

March 6, 2027

SSL certificate

324 days

Issued by Amazon

Domain age

26 years, 6 months

Registered March 6, 2000

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

Unknown

2600:9000:2449:7800:15:d33e:2640:93a1

Registrar

Amazon Registrar, Inc.

Unlocked 4 NS records

Expiry timeline

Today

+1 year

Domain expiry SSL expiry Danger zone (≤30 days)

Recommended actions

Enable DNSSEC to protect visitors from DNS spoofing
Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers

Registrar Amazon Registrar, Inc.

Created March 6, 2000 (26 years, 6 months ago)

Expires March 6, 2027 (10 months)

Last Updated January 30, 2026

Name Servers ns-1510.awsdns-60.org, ns-1756.awsdns-27.co.uk, ns-60.awsdns-07.com, ns-816.awsdns-38.net

DNSSEC Not enabled

Hosting

IP Address 2600:9000:2449:7800:15:d33e:2640:93a1

Data source: rdap (0.1s)

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more ▾

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

CDN & Delivery

AWS CloudFront (Miss from cloudfront)

PASS

AWS CloudFront (Miss from cloudfront)

Site is served via AWS CloudFront CDN (edge: AMS58-P6)

Got: x-amz-cf-id: NqNU4Eg6WzQa-cdweoakuLz4SceaieyatEbhvJF1C70_IxzhltQOFw==

CDN cache status: Miss from cloudfront

CDN Detected: AWS CloudFront

Provider AWS CloudFront Cache Status Miss from cloudfront Evidence x-amz-cf-id: NqNU4Eg6WzQa-cdweoakuLz4SceaieyatEbhvJF1C70_IxzhltQOFw==

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.