Skip to content
https://nyse.com

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
81
GRADE
B
FIX
0
REVIEW
5
PASS
4
INFO
0
Probed from Madrid, Spain
301 Moved Permanently
Checks
9
4 PASS 5 REVIEW
B
Redirect Chain
2 redirect(s), 285 ms total
REVIEW
2 redirect(s), 285 ms total
Warning::
2 redirects before reaching final URL
Each redirect adds latency. Try to minimize the chain to 1 hop.
Info::
WWW normalization redirect

https://nyse.com

65 ms · HTTP/1.1

301

https://www.nyse.com/

183 ms · HTTP/1.1

301

https://www.nyse.com/index

37 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://nyse.com30165 msHTTP/1.1cloudflare
2https://www.nyse.com/301183 msHTTP/1.1cloudflare
3https://www.nyse.com/index20037 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

Each redirect adds latency. Try to minimize the chain to 1 hop.

Why this matters

Redirect chain — each hop adds latency; combine into one redirect where possible.

Source: Google Search Central / web.dev

C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Critical::
HTTP version does not redirect to HTTPS
Got: HTTP 520 Expected: 301 redirect to HTTPS

www / non-www

301https://www.nyse.com/
200https://nyse.com/

Preferred variant: non-www

HTTP → HTTPS

520http://nyse.com/

HTTP version does not redirect to HTTPS

B
TLS Certificate Expiry & Recommendations
183 days until leaf cert expires — 2 issues to address
REVIEW

Certificate validity

183
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
CDN & Delivery
Cloudflare
REVIEW
Cloudflare
Info::
Site is served via Cloudflare CDN (edge: CDG)
Got: cf-ray: 9f07c28c0f23d097-CDG
CDN Detected: Cloudflare
Provider Cloudflare Evidence cf-ray: 9f07c28c0f23d097-CDG
A+
DNS Records
2 A records, 77 ms lookup
PASS
2 A records, 77 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.16.104.50, 104.16.103.50
Info::
No IPv6 (AAAA) records
Info::
8 nameserver(s) configured
Got: dns1.p03.nsone.net, edns1.ultradns.org, edns1.ultradns.net, edns1.ultradns.biz, edns1.ultradns.com, dns3.p03.nsone.net, dns4.p03.nsone.net, dns2.p03.nsone.net
Info::
2 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 77 ms
Got: 77 ms
A104.16.104.50, 104.16.103.50
AAAA
CNAME
NSdns1.p03.nsone.net, edns1.ultradns.org, edns1.ultradns.net, edns1.ultradns.biz, edns1.ultradns.com, dns3.p03.nsone.net, dns4.p03.nsone.net, dns2.p03.nsone.net
MX
10 mxa-001f3604.gslb.pphosted.com
10 mxb-001f3604.gslb.pphosted.com
TXT
docusign=f8af27f5-1788-47f2-864c-fcabe7c61f74
calendly-site-verification=cVhWwdd5jGGvvWQlDMAO1UlSLSDVgHllBfkumAD5U
SPF v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com include:ice.com ip4:164.55.2...
jamf-site-verification=b0LJXwHE_L3IXOW-wPdJJw
apple-domain-verification=6RiW45jnuOtXYWmc
_rklz0m4blzjh6g7fjgabrbkkzbodqln
adobe-sign-verification=6dea21eee3a7b7ecf52fe7c3cd1294fc
miro-verification=c9a8f78ab04d5bad9381c5272fe27dc7b309bef6
MS=ms13038803
dtm-domain-verification=DCDj5cEnhFJMJMIbPzmZVNF0Dy_lTmXDycY_0fTpJ4M
lucid-verification=EwkjJvlhxtZdu8jm209j
docusign=b2c4311f-c1e8-4c7c-93d6-a58339d579df
adobe-idp-site-verification=2c0a722e26ac79c9ccb25f100576a22a5a476dd38a6a66ab1dd9...
_65duolmyhodouzlw0usjpi9k3tutm9m
canva-site-verification=mkCiP5oZYm5cK6wuWLfylA
_2nj3kxzafd7rbucu2yg388ddumwmmyh
MS=ms73042124
google-site-verification=kiBoClq3wTOAKpsaclO3Op6EFw8RaKhp1CHaG57KM0M
anthropic-domain-verification-rzvpry=n5lrRsV4NtesrekXWkTHMsAFX
autodesk-domain-verification=YlE7u-jKUuwAg3DqpmGz
ciscocidomainverification=287059779f406f02e658d0ba9a09237736ea1ce77877052f64f45f...
xmind-domain-verification-e6cegm=zlVOg9YFw7WR2V9zrn4MwVOWM
33ylx5symky31hnwg8sg84dqxg7jrkc0
smartsheet-site-validation=b3_n80Kn_cU9mBYc1SnZ1OA7nfohtv0U
KNGYgQQCIcgXHY+LHhlB21Dny46aUTE6U3fJ4Ms9SgWhxHdwn+WdlZMnwoSctZuw0bg6CZfx2DkwpqGC...
CAALookup not available with standard resolver
Resolved in 77 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A
Crawlability
robots.txt present, no sitemap
PASS
robots.txt present, no sitemap
Info::
robots.txt is present
Got: 115 bytes
Info::
No sitemap.xml found
A sitemap helps search engines discover and index your pages more efficiently.
Info::
robots.txt references sitemap

A sitemap helps search engines discover and index your pages more efficiently.

Why this matters

No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.

Learn more

A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.

Source: sitemaps.org / Google Search Central

robots.txt 200 OK
Size 115 B Sitemaps referenced 1 User-agents * Blocking No — crawling allowed
User-agent: *
Disallow: /cgi-bin/
Disallow: /partial/
Sitemap: http://www.nyse.com/publicdocs/cmsdata/nyse/nyse.xml
sitemap.xml No sitemap found

No sitemap found

Adding a sitemap helps search engines discover your pages.

A+
Domain Intelligence
nyse.com — via MarkMonitor Inc., 33 years, 8 months old, hosted on Cloudflare
PASS
nyse.com — via MarkMonitor Inc., 33 years, 8 months old, hosted on Cloudflare
Info::
Domain registered until Jan 26, 2027 (9 months remaining)
Info::
DNSSEC is enabled
Info::
Registrar: MarkMonitor Inc.
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: Cloudflare
Got: AS13335
Domain expiry

195 days

January 26, 2027

SSL certificate

183 days

Issued by DigiCert Inc

Domain age

33 years, 8 months

Registered January 25, 1993

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

Cloudflare

ASN AS13335

104.16.103.50

Registrar

MarkMonitor Inc.

Unlocked 8 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar MarkMonitor Inc.
Created January 25, 1993 (33 years, 8 months ago)
Expires January 26, 2027 (9 months)
Last Updated December 25, 2024
Name Servers dns1.p03.nsone.net, dns2.p03.nsone.net, dns3.p03.nsone.net, dns4.p03.nsone.net, edns1.ultradns.biz, edns1.ultradns.com, edns1.ultradns.net, edns1.ultradns.org
DNSSEC Enabled
Hosting
IP Address 104.16.103.50
ASN AS13335 (CLOUDFLARENET - Cloudflare, Inc., US)
Provider Cloudflare
Data source: rdap (0.2s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 110 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
51 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
17 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
25 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
111 ms
Total Time Total request time from DNS lookup through full response.
111 ms

Connection waterfall

DNS Lookup 51 ms TCP Connect 17 ms TLS Handshake 25 ms Server Processing 18 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback