nextstrain.org
Nextstrain
Last scanned Aug 24, 2026, 1:22 PM
Overall score
Great
Summary
Real-time tracking of pathogen evolution. This website uses Next.js hosted on AWS. SEO is good (85/100) and accessibility is excellent (100/100). Security scores fair (65/100) and performance excellent (90/100). Top issue: Missing canonical link.
Real-time tracking of pathogen evolution
- United States
- Hosted on AWS
Top issues to fix
7 issues found · 2 high priority
Missing Strict-Transport-Security header
SecurityAdd HSTS so browsers always use HTTPS — this closes the protocol-downgrade attack window.
Missing Content-Security-Policy header
SecurityAdd a CSP to control which sources can run scripts — the strongest single defense against XSS.
Missing X-Content-Type-Options header
SecurityAdd X-Content-Type-Options: nosniff to stop MIME-sniffing attacks.
Missing X-Frame-Options header
SecurityAdd X-Frame-Options (or a CSP frame-ancestors rule) to prevent clickjacking via hidden iframes.
Missing canonical link
SEOAdd <link rel="canonical"> so search engines know which URL variant to index.
Multiple H1 headings found
SEOKeep a single H1 per page and demote the others to H2/H3.
+1 more issue — details in the sections below.
SEO
3 issue(s) found
Performance
190 ms
Security
HTTPS & header checks
Accessibility
0 issue(s) found
Organization
Company details published in this site's own structured data.
Real-time tracking of pathogen evolution
Contact
Email, phone, and address published on this site's own pages.
- hello@nextstrain.org
Source: https://nextstrain.org/contact
Meta tags
- Title
- Nextstrain
- Description
- Real-time tracking of pathogen evolution
- Canonical
- Language
- en
- Charset
- utf-8
- Viewport
- width=device-width, initial-scale=1
- Robots meta
- Manifest
Technologies
Detected frameworks, languages, and tools.
Hosting & CDN
- Hosting provider
- AWS
- CDN provider
- —
- IP address
- 35.71.150.51
- ASN
- AS16509 (AMAZON-02 - Amazon.com, Inc., US)
DNS records
| Type | Value |
|---|---|
| A |
|
| AAAA | — |
| MX |
|
| TXT |
|
| NS |
|
| CAA | — |
| CNAME | — |
| IPv6 support | No |
TLS / SSL certificate
- Version
- TLS 1.3
- Issuer
- Let's Encrypt
- Subject
- nextstrain.org
- Valid from
- Jul 7, 2026
- Valid to
- Oct 5, 2026
- Days until expiry
- 41
- SAN domains
- nextstrain.org
Security headers
- Strict-Transport-SecurityMissing
- Content-Security-PolicyMissing
- X-Frame-OptionsMissing
- X-Content-Type-OptionsMissing
- Referrer-PolicyMissing
- Permissions-PolicyMissing
Compression: gzip · 0 cookie(s) observed
Content & assets
Headings
H1 3 · H2 4 · H3 4
Links
39 internal · 34 external · 0 broken
Images
85 total · 0 missing alt
Scripts / Styles
20 scripts · 2 stylesheets
JS / CSS size
518 KB · 56.9 KB
Page size
76.2 KB
Robots.txt & Sitemap
- robots.txt
- Found
- Disallow rules
- 0
- sitemap.xml
- Not found
- URLs in sitemap
- 0
SEO issues
- Missing canonical link
- Multiple H1 headings found
- sitemap.xml not found
Accessibility issues
No accessibility issues detected.
Scan details
- Requested URL
- https://nextstrain.org
- Final URL
- https://nextstrain.org
- HTTP status
- 200
- HTTP version
- HTTP/2
- Response time
- 189 ms
- HTML size
- 76.2 KB
- Redirect chain
- https://nextstrain.org
See something wrong on this report? Request a correction
Related websites
Same technology stack
bookaway.com
Search, compare, and book buses, trains and ferries | Bookaway
sfstandard.com
The San Francisco Standard
mbohlen.de
Matthias Bohlen (iSAQB Accredited Trainer)
convertcart.com
eCommerce Growth Platform and Consulting | Convertcart
gyftr.com
Gift Cards - Buy/Send Gift Vouchers of 300+ brands on discount Online!
quizzory.in
Create Online Quizzes for Classes, Exams & WhatsApp Groups | Quizzory
Same hosting provider
ashbyprd.com
All-in-one Recruiting Software for Ambitious Teams | Ashby
mailroute.net
MailRoute — Cloud Email Security & Threat Protection
relive.com
Relive | Run, Ride, Hike & more
cyware.com
Cyware - AI-Powered Threat Intelligence Platform | Home
moderntreasury.com
Modern Treasury - Build Products That Move Money
rosa.be
Rosa | Find a doctor quickly and book an appointment online
Frequently asked questions
- What technology does nextstrain.org use?
- nextstrain.org is built with Next.js, Express, Node.js, Plausible Analytics.
- Is nextstrain.org secure (HTTPS)?
- Yes. nextstrain.org uses TLS 1.3 with a certificate issued by Let's Encrypt, valid until Oct 5, 2026.
- Who hosts nextstrain.org?
- nextstrain.org is hosted on AWS.
- What is nextstrain.org's SEO score?
- nextstrain.org scored 85/100 for SEO in the latest analysis (great).
- What is nextstrain.org's overall website score?
- nextstrain.org has an overall SiteGraph score of 84/100, combining SEO, performance, security, and accessibility.
OpenGraph & Twitter Card
OpenGraph
Twitter Card