Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BTLS Certificate Expiry & Recommendations279 days until leaf cert expires — 5 issues to addressREVIEW
Certificate validity
Recommended actions
- Extend HSTS max-age to at least 31536000 (1 year) to meet the preload list criteria
- Add includeSubDomains to the HSTS directive
- Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
BCDN & DeliveryAWS CloudFront (Error from cloudfront)REVIEW
ADNS Records4 A records, 32 ms lookupPASS
| A | 18.239.50.18, 18.239.50.121, 18.239.50.45, 18.239.50.128 |
| AAAA | — |
| CNAME | — |
| NS | — |
| MX | — |
| TXT | — |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.
Without SPF, receiving servers can't validate sending IPs — your domain is easier to spoof in phishing.
Learn more ▾ ▴
SPF complements DMARC. Both should be published. SPF records list authorized sending IPs (e.g., `v=spf1 include:_spf.google.com ~all` for Google Workspace). After publishing, verify in Google Postmaster Tools or mxtoolbox.
Source: RFC 7208 (SPF)
A+Redirect Chain0 redirect(s), 36 ms totalPASS
https://www.leboncoin.fr
36 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://www.leboncoin.fr | 403 | 36 ms | HTTP/1.1 |
ACrawlabilityrobots.txt present, no sitemapPASS
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
## It's forbidden to use search robots or other automatic methods to access Leboncoin.fr.
## Access is only permitted with special permission from Leboncoin.fr.
## Bots friendly
User-agent: Googlebot
User-agent: Googlebot-Mobile
User-agent: Yahoo! Slurp
User-agent: Slurp
User-agent: slurp
User-agent: msnbot
User-agent: bingbot
User-agent: ia_archiver
# friendly exceptions
Allow: /aide.htm
Allow: /aide_pro.htm
# www2 only
Allow: /livres
Allow: /linge_de_maison
Disallow: /ai
Disallow: /cp
Disallow: /support
Disallow: /account
Disallow: /account/index.html
Disallow: /dc/decisions_de_justice
Disallow: /dc/accessibilite
# Adviews
Disallow: /annonce
Disallow: /classified/latest/
Allow: /annonces
Disallow: /vi/*
Disallow: /li
Disallow: /*/*.htm
Disallow: /ad/animaux/*
Disallow: /ad/animaux_perdus/*
Disallow: /ad/autres/*
# Holidays calendar pages
Disallow: /*/vacancier/
# Bloquage des Demandes
Disallow: /*/demandes
# all
Disallow: /*th=0
Disallow: /aw
Disallow: /st
Disallow: /maintenance.html
Disallow: /pub
Disallow: /report-abuse
Disallow: /profile/
Disallow: /oauth2callback
Disallow: /discovery/*
# Blocage des /Recherche (Rav)
Disallow: /recherche
Disallow: /visual_similar_ads/*
Disallow: /annonces_similaires/*
Disallow: /boutique/*/*print=0
Disallow: /boutique/*.htm?*ca=*_k&*
Disallow: /popup_siege_social.htm
Disallow: /dc/popup_siege_social
Disallow: /*_mediametrie
#on autorise boutiques (.htm)
Allow: /boutique*
#on autorise les html
Allow: /*/*.html
Disallow: /*/bonnes_affaires
# Pages filtres
Allow: /f/*
# Gestion villes
Allow: /v/*
#Partners
Disallow: /partners/*
Allow: /partners/sofinco*
#Messaging
Disallow: /messages/*
Allow: /*
## AdsBot-Google and AdsBot-Google-Mobile
User-agent: AdsBot-Google
User-agent: AdsBot-Google-Mobile
# friendly exceptions
Allow: /recherche?category=2&*
Allow: /recherche?category=9&*
Allow: /recherche?category=10&*
Allow: /recherche?category=11&*
Allow: /recherche?category=13&*
Allow: /aide.htm
Allow: /aide_pro.htm
# www2 only
Allow: /livres
Allow: /linge_de_maison
Disallow: /ai
Disallow: /cp
Disallow: /support
Disallow: /account
Disallow: /account/index.html
Disallow: /dc/decisions_de_justice
Disallow: /dc/accessibilite
# Adviews
Disallow: /annonce
Disallow: /classified/latest/
Allow: /annonces
Disallow: /vi/*.htm
Disallow: /li
# Holidays calendar pages
Disallow: /*/vacancier/
# Bloquage des Demandes
Disallow: /*/demandes
# all
Disallow: /*th=0
Disallow: /aw
Disallow: /st
Disallow: /maintenance.html
Disallow: /pub
Disallow: /report-abuse
Disallow: /profile/
Disallow: /oauth2callback
Disallow: /boutique/*/*print=0
Disallow: /boutique/*.htm?*ca=*_k&*
Disallow: /popup_siege_social.htm
Disallow: /dc/popup_siege_social
Disallow: /*_mediametrie
Disallow: /discovery/*
#on autorise boutiques (.htm)
Allow: /boutique*
#on autorise les html
Allow: /*/*.html
#on bloque les annonces avec et sans parametres
Disallow: /*/*.htm
Disallow: /*/bonnes_affaires/
Disallow: /f/*
Allow: /*
# Allow specific Ads Googlebot to access all our pages
User-agent: Mediapartners-Google
Allow: /*
# Allow proximic to access all our pages
User-agent: proximic
Disallow:
# LLMs configuration
User-agent: Google-Extended
Disallow: /ad/
Allow: /*
User-agent: OAI-SearchBot
Disallow: /ad/
Allow: /*
User-agent: ChatGPT-User
Disallow: /ad/
Allow: /*
# Link to the sitemap index file
Sitemap: https://www.leboncoin.fr/auto-main.xml
Disallow: /app-router-poc
Disallow: /pages-router-poc
# Allow Meta's crawler for Instagram feature
User-agent: facebookexternalhit
Allow: /dc/cookies
Disallow: /*
No sitemap found
Adding a sitemap helps search engines discover your pages.
A+URL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: www
HTTP → HTTPS
Consistent
A+Domain Intelligenceleboncoin.fr — via NAMESHIELD, 19 years, 6 months old, hosted on AWSPASS
189 days
January 17, 2027
279 days
Issued by Amazon
19 years, 6 months
Registered January 15, 2007
Status unknown
Protects against DNS spoofing
AWS
ASN AS16509
18.239.50.18
NAMESHIELD