Website readiness profile · Snapshot 23 October 2026

notube.lol

notube.lol's public homepage, certificate and DNS checked against 31 practices and compared with 492 Web Tools sites.

Readiness index: 87/100
Ahead of: 97%
Practices observed: 25/30
Popularity band: Top 10K

Measured 2026-10-23 12:10:31 UTC from one location. How we measure

Readiness by lane

Green: notube.lol. Thin bar: Web Tools peer median.

Enable

100/100

Peers 84

Harden

75/100

Peers 55

Accelerate

100/100

Peers 69

Recover

0/100

Peers 6

Priority fixes for notube.lol

Ordered by impact and by how common each practice is among peers.

Priority 1 · Harden
DMARC policy enforces quarantine or reject
Observed: No DMARC record was found at _dmarc.notube.lol.
Why it matters: An enforcing DMARC policy helps receiving mail systems reject email that falsely claims to come from your domain, a common route for phishing your customers.
What to do: Publish DMARC with p=none and a reporting address first, fix any legitimate senders that fail SPF or DKIM alignment, then move to quarantine and finally reject.
23% of Web Tools peers do this. Limit: Read from public DNS at the time of the check; records may have changed since.
Guide: A Practical Website Health Check for Owners
Priority 2 · Harden
Framing restricted
Observed: The homepage did not send frame-ancestors or X-Frame-Options, so other sites may frame it.
What to do: Send Content-Security-Policy: frame-ancestors 'self' (or a list of trusted origins). X-Frame-Options: SAMEORIGIN covers older browsers.
On Cloudflare: Add the header with a response header transform rule.
48% of Web Tools peers do this.
Guide: A Practical Website Health Check for Owners
Priority 3 · Harden
security.txt published
Observed: No valid /.well-known/security.txt with a Contact field was returned.
What to do: Publish /.well-known/security.txt with at least Contact and Expires fields, as RFC 9116 requires, and review it before it expires.
On Cloudflare: Cloudflare Security Center can serve a security.txt file for the zone.
4.8% of Web Tools peers do this.
Guide: A Practical Website Health Check for Owners
Priority 4 · Harden
Referrer-Policy set
Observed: The homepage response did not include a Referrer-Policy header.
What to do: Send Referrer-Policy: strict-origin-when-cross-origin unless you have a reason to share more.
30% of Web Tools peers do this.
Guide: A Practical Website Health Check for Owners

What notube.lol already does well

Practices fewer than half of Web Tools peers use.

DNSSEC signedDNSSEC delegation (DS record) present.9.3% of peers
CAA records limit who can issue certificatesCAA limits issuance to comodoca.com, digicert.com, globalsign.com and others.14% of peers
Content Security Policy presentContent-Security-Policy present.15% of peers

What we saw

Homepage checked: https://notube.lol/
Homepage response: HTTP 200, after 1 redirect
TLS: TLSv1.3, HTTP/2
Certificate: Google Trust Services, 90-day validity, expiring 2027-01-18
CDN or edge: Cloudflare
DNS operators: Cloudflare
HSTS: max-age 365 days, includeSubDomains, preload
Homepage HTML: 100 KB, br
Images on homepage: 4 (webp 3, png 3, gif 1)

Limits: homepage only, one location, one moment. Header checks reflect the homepage response; other pages may differ.

Stack and providers

Seen in the homepage response, certificate and DNS. Provider pages compare how their customers configure the same checks.

Cloudflare (cdn and edge platform)Cloudflare (dns operator)Google Trust Services (certificate authority)Service guide: Cloudflare

All 31 checks

Select a gap for the method and fix. How each check works

Not observed 5

Observed 25

HTTP requests move to HTTPS
HSTS kept for at least a year
TLS 1.3 negotiated
Certificate has more than 14 days left
Certificate lifetime of 100 days or less
CAA records limit who can issue certificates
DNSSEC signed
X-Content-Type-Options: nosniff
Content Security Policy present
HTTP/2 negotiated
HTTP/3 advertised
HTML compressed
Static files cached for 30 days or more
Modern image formats in use
No render-blocking scripts in <head>
robots.txt published
XML sitemap discoverable
Reachable over IPv6
Canonical URL declared
Meta description written
Mobile viewport configured
Structured data present
Social preview image set
Page language declared
At most one redirect to the homepage

Not measured 1

Offscreen images lazy-loaded

Own notube.lol?

Re-run the checks after a change, keep a private action plan in a free workspace, or report a mistake.

Re-check notube.lol now Add to owner workspace Request a correction or removal

Live status for this site: Status Is Down: notube.lol. This profile covers configuration only.

Compare with other Web Tools sites

Web Tools readiness benchmark