Skip to content
https://themuse.com

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
94
GRADE
A
FIX
0
REVIEW
3
PASS
6
INFO
0
Probed from Singapore, Singapore
301 Moved Permanently
Checks
9
6 PASS 3 REVIEW
B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.themuse.com/
200https://themuse.com/

Inconsistent — duplicate content risk

HTTP → HTTPS

301http://themuse.com/ → https://www.themuse.com/

Consistent

B
TLS Certificate Expiry & Recommendations
83 days until leaf cert expires — 2 issues to address
REVIEW

Certificate validity

83
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
CDN & Delivery
Cloudflare
REVIEW
Cloudflare
Info::
Site is served via Cloudflare CDN (edge: SIN)
Got: cf-ray: 9f07778329d7fd9e-SIN
CDN Detected: Cloudflare
Provider Cloudflare Evidence cf-ray: 9f07778329d7fd9e-SIN
A+
DNS Records
2 A records, 12 ms lookup
PASS
2 A records, 12 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.18.105.113, 104.18.106.113
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2606:4700::6812:6971, 2606:4700::6812:6a71
Info::
2 nameserver(s) configured
Got: ivy.ns.cloudflare.com, buck.ns.cloudflare.com
Info::
5 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 12 ms
Got: 12 ms
A104.18.105.113, 104.18.106.113
AAAA2606:4700::6812:6971, 2606:4700::6812:6a71
CNAME—
NSivy.ns.cloudflare.com, buck.ns.cloudflare.com
MX
1 aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
TXT
MS=ms98141657
TAILSCALE-uG5uCAWfqa4Wyw0gQrfq
642wtyy9sbct7tyf2j86ch5rx04rdz2f
ALIAS for themuse.com.cdn.cloudflare.net
loaderio=fefa7eab8eb4a9235df87456251d8a48
MS=53461F9853EFAD414982386418017FD767E2816B
detectify-verification=2db35c991fca71013879c15e6dd2e967
facebook-domain-verification=e791khws22zcj2sy1id6ebwf29pgsq
google-site-verification=1ygGINmzjO6_g428o-5zoUFWb8falFWVY2G2sy_I4qQ
google-site-verification=BSEu4g9vObjlRI1huZYPQc89VA3m6mT6GYbcPKibJsA
google-site-verification=FNjjcOiqmzwCdn8yvW1sxv9Q53AMiJSArimbJTGvKs0
google-site-verification=HUpiShgIJ8iGEEzqoq0kwr8ik5PHoOmv2XzCqqvgXg4
google-site-verification=QSV3xCuvyGCACHYGi0Q6y_oG1jldPApJX71nh4dgZsE
google-site-verification=Ss2WQpqeEZONGC9KTZKzQ2ua9fi3GLHfgSqGY785nzM
google-site-verification=aJGBA4A_5LJzoN-PxTRGdX9rm6k4GRVftqCqxjUzbBU
google-site-verification=jN0xA_0mRtT2VyT51vr0psFcJxziGBZjSNh0PTPgAvE
google-site-verification=jypKX4YSewd2uU40igejYwiqw8UHCbLer2Tdatf9zXI
google-site-verification=md0s79GB0OZtbQCmY6vM7c7afOeDAClYwprDHEYVKHk
google-site-verification=pU5RdZU5CSqFSQ699ZJx3txeQDO4yLx7FjiqwR-8s1g
google-site-verification=qa13U_X7mA-RS2ajlu79AkyMG9iO_IuwGb2aUB9E1xg
google-site-verification=rkqEevr-SbZsgCSDxIp6MfqhZ2aDtBevbh6BARugp6g
globalsign-domain-verification=Wq9iztGUzQcBBi1OLrEOlXtefwOzX7yfvhbsw-CVdo
ahrefs-site-verification_1d32d4dc8f89352030296faad26bcdaf28daefb721eaeab84cd6555...
SPF v=spf1 a mx ip4:209.85.220.41 include:_spf.google.com include:mail.zendesk.com i...
CAALookup not available with standard resolver
Resolved in 12 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A
Redirect Chain
1 redirect(s), 88 ms total
PASS
1 redirect(s), 88 ms total
Info::
Single redirect
Got: https://themuse.com → https://www.themuse.com/ (301)
Info::
WWW normalization redirect

https://themuse.com

20 ms · HTTP/1.1

301

https://www.themuse.com/

68 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://themuse.com30120 msHTTP/1.1cloudflare
2https://www.themuse.com/20068 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

A+
IPv6 Readiness
IPv6 reachable (2 ms)
PASS
IPv6 reachable (2 ms)
Info::
IPv6 is configured and reachable at 2606:4700::6812:6971, 2606:4700::6812:6a71
Got: 2 ms connect
IPv6 Ready
AAAA Records 2606:4700::6812:6971, 2606:4700::6812:6a71 Connection Reachable (2 ms)
A+
Crawlability
robots.txt present, sitemap with 1299 URLs
PASS
robots.txt present, sitemap with 1299 URLs
Info::
robots.txt is present
Got: 753 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 1299 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 753 B Sitemaps referenced 1 User-agents *, Twitterbot, Pinterest Blocking No — crawling allowed
User-agent: *
Sitemap: https://www.themuse.com/sitemap.xml
Disallow: /clients/
Disallow: /dashboard/
Allow: /clients/*/media/*
Allow: /static/*

Disallow: /profiles/*/embed
Disallow: /profiles/*/embed?*
Disallow: /profiles/*/modules/*/embed
Disallow: /profiles/*/framed
Disallow: /profiles/*/framed?*
Disallow: /profiles/*/modules/*/framed

Disallow: /companies/*/embed
Disallow: /companies/*/embed?*
Disallow: /companies/*/modules/*/embed
Disallow: /companies/*/framed
Disallow: /companies/*/framed?*
Disallow: /companies/*/modules/*/framed

Disallow: /job/redirect/*
Disallow: /jobs/*/*?*framed*
Disallow: /vendor/*
Disallow: /tracking/amp*
Disallow: /api/users*
Disallow: /cdn-cgi/*

User-agent: Twitterbot
Allow: /*

User-agent: Pinterest
Allow: /*
sitemap.xml 200 OK
Type URL Set URLs 1299 entries Valid XML Yes
Sample URLs:
A+
Domain Intelligence
themuse.com — via Amazon Registrar, Inc., 27 years, 8 months old
PASS
themuse.com — via Amazon Registrar, Inc., 27 years, 8 months old
Info::
Domain registered until Dec 29, 2026 (8 months remaining)
Info::
DNSSEC is enabled
Info::
Registrar: Amazon Registrar, Inc.
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Domain expiry

165 days

December 29, 2026

SSL certificate

83 days

Issued by Let's Encrypt

Domain age

27 years, 8 months

Registered December 29, 1998

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

Unknown

2606:4700::6812:6971

Registrar

Amazon Registrar, Inc.

Unlocked 2 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar Amazon Registrar, Inc.
Created December 29, 1998 (27 years, 8 months ago)
Expires December 29, 2026 (8 months)
Last Updated November 24, 2025
Name Servers buck.ns.cloudflare.com, ivy.ns.cloudflare.com
DNSSEC Enabled
Hosting
IP Address 2606:4700::6812:6971
Data source: rdap (0.0s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 24 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
11 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
1 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
6 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
24 ms
Total Time Total request time from DNS lookup through full response.
24 ms

Connection waterfall

DNS Lookup 11 ms TCP Connect 1 ms TLS Handshake 6 ms Server Processing 5 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback