STATUS IS UPREADINESS PROFILE

Website readiness profile · Snapshot 23 October 2026

derpibooru.org

derpibooru.org's public homepage, certificate and DNS checked against 31 practices and compared with 377 Forums & Communities sites.

Readiness index
70/100

Forums & Communities median 62

Ahead of
77%

of measured Forums & Communities sites

Practices observed
18/29

2 of 31 could not be measured

Popularity band
Top 10K

Chrome UX Report top-sites list

Measured 2026-10-23 11:40:25 UTC from one location. How we measure

Readiness by lane

Green: derpibooru.org. Thin bar: Forums & Communities peer median.

Enable

62/100

Peers 74

Harden

69/100

Peers 54

Accelerate

87/100

Peers 60

Recover

0/100

Peers 7

Priority fixes for derpibooru.org

Ordered by impact and by how common each practice is among peers.

  1. Priority 1 · Enable

    XML sitemap discoverable

    Observed: No sitemap was listed in robots.txt or found at /sitemap.xml.

    Why it matters: A sitemap helps search engines find new and updated pages, especially on large or frequently updated sites.

    What to do: Generate an XML sitemap of canonical URLs, reference it in robots.txt and submit it in Google Search Console.

    61% of Forums & Communities peers do this. Limit: Only the standard location was requested, once, at the time of the check.

  2. Priority 2 · Harden

    DMARC policy enforces quarantine or reject

    Observed: The DMARC policy for derpibooru.org was p=none, which asks receivers to take no action on failing mail.

    What to do: Publish DMARC with p=none and a reporting address first, fix any legitimate senders that fail SPF or DKIM alignment, then move to quarantine and finally reject.

    31% of Forums & Communities peers do this.

  3. Priority 3 · Enable

    Canonical URL declared

    Observed: The homepage did not declare a canonical URL.

    What to do: Add a self-referencing canonical link to every indexable page, using the final https:// URL.

    61% of Forums & Communities peers do this.

  4. Priority 4 · Accelerate

    HTTP/3 advertised

    Observed: The homepage did not advertise HTTP/3 through an Alt-Svc header.

    What to do: Turn on HTTP/3 at your CDN. Browsers fall back to HTTP/2 automatically, so the risk is low.

    On Cloudflare: Enable HTTP/3 (with QUIC) under Speed > Optimization > Protocol Optimization.

    33% of Forums & Communities peers do this.

What derpibooru.org already does well

Practices fewer than half of Forums & Communities peers use.

  • DNSSEC signedDNSSEC delegation (DS record) present.7.2% of peers
  • HSTS kept for at least a yearHSTS with a 365-day max-age covering subdomains.28% of peers
  • No render-blocking scripts in <head>Head scripts load without blocking.41% of peers

What we saw

Homepage checked
https://derpibooru.org/
Homepage response
HTTP 200
TLS
TLSv1.3, HTTP/2
Certificate
Google Trust Services, 90-day validity, expiring 2026-12-25
CDN or edge
Cloudflare
DNS operators
Cloudflare
HSTS
max-age 365 days, includeSubDomains, preload
DMARC policy
p=none
Homepage HTML
7 KB, br
Images on homepage
1 (webp 1)

Limits: homepage only, one location, one moment. Header checks reflect the homepage response; other pages may differ.

Stack and providers

Seen in the homepage response, certificate and DNS. Provider pages compare how their customers configure the same checks.

All 31 checks

Select a gap for the method and fix. How each check works

Observed 18

  • HTTP requests move to HTTPS
  • HSTS kept for at least a year
  • TLS 1.3 negotiated
  • Certificate has more than 14 days left
  • Certificate lifetime of 100 days or less
  • DNSSEC signed
  • X-Content-Type-Options: nosniff
  • Framing restricted
  • HTTP/2 negotiated
  • HTML compressed
  • Static files cached for 30 days or more
  • No render-blocking scripts in <head>
  • robots.txt published
  • Reachable over IPv6
  • Meta description written
  • Mobile viewport configured
  • Page language declared
  • At most one redirect to the homepage

Not measured 2

  • Modern image formats in use
  • Offscreen images lazy-loaded

Own derpibooru.org?

Re-run the checks after a change, keep a private action plan in a free workspace, or report a mistake.

Live status for this site: Status Is Down: derpibooru.org. This profile covers configuration only.

Compare with other Forums & Communities sites