Skip to content
https://garant.ru

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
81
GRADE
B
FIX
1
REVIEW
4
PASS
4
INFO
0
Probed from Singapore, Singapore
301 Moved Permanently
Checks
9
4 PASS 4 REVIEW 1 FIX
D
CDN & Delivery
Action
No CDN detected
FIX
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

B
Redirect Chain
1 redirect(s), 3051 ms total
REVIEW
1 redirect(s), 3051 ms total
Info::
Single redirect
Got: https://garant.ru → https://www.garant.ru/ (301)
Info::
WWW normalization redirect
Warning::
Redirect overhead: 3051 ms total
Got: 3051 ms

https://garant.ru

1240 ms · HTTP/1.1

301

https://www.garant.ru/

1811 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://garant.ru3011240 msHTTP/1.1ddos-guard
2https://www.garant.ru/2001811 msHTTP/1.1ddos-guard

See the visual redirect chain in the HTTP Probe tab →

C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.garant.ru/
200https://garant.ru/

Inconsistent — duplicate content risk

HTTP → HTTPS

301http://garant.ru/ → https://www.garant.ru/

Consistent

B
TLS Certificate Expiry & Recommendations
345 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

345
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A
DNS Records
1 A records, 400 ms lookup
PASS
1 A records, 400 ms lookup
Info::
Resolves to 1 IPv4 address(es)
Got: 185.178.208.73
Info::
Single A record — no DNS redundancy
Multiple A records provide failover if one server goes down.
Info::
No IPv6 (AAAA) records
Info::
2 nameserver(s) configured
Got: ns20.garant.ru, ns10.garant.ru
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Warning::
DNS resolution is slow (400 ms)
Slow DNS adds latency to every page load. Consider a faster DNS provider.
Got: 400 ms
A185.178.208.73
AAAA—
CNAME—
NSns20.garant.ru, ns10.garant.ru
MX
10 forpost1.garant.ru
TXT
facebook-domain-verification=a17d16q1lpzh93nr5jrnrp821xnkn6
SPF v=spf1 ip4:80.253.4.14 ip4:80.253.7.114 ip4:80.253.4.57 ip4:80.253.7.115 ip4:80....
MS=ms33321102
136-TXT-456
MS=E24D097CD329324C57FC13B675DC4B455BE6D0CE
google-site-verification=prrgSHIyKU9G8RM04VKFclw42T8wQpiTJ722gghmwXo
CAALookup not available with standard resolver
Resolved in 400 ms

Multiple A records provide failover if one server goes down.

Why this matters

Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.

Learn more ▾

Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.

Source: SRE practice / DNS architecture

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Why this matters

DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.

Source: DNS performance benchmarks

A+
Crawlability
robots.txt present, sitemap with 33 URLs
PASS
robots.txt present, sitemap with 33 URLs
Info::
robots.txt is present
Got: 4223 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 33 entries
Info::
Sitemap index with 33 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 4223 B Sitemaps referenced 1 User-agents *, YandexDirect, Yandex Blocking No — crawling allowed
User-agent: *

Sitemap: https://www.garant.ru/sitemap.xml

Disallow: /?m_news*

Disallow: /?om/

Disallow: /?vicon.ico

Disallow: /ajax/

Disallow: /ano/

Disallow: /bio/

Disallow: /doc/busref/spr_bik/

Disallow: /gk/

Disallow: /ia/forsmi/

Disallow: /images/favicon.gif

Disallow: /info/infopartner/

Disallow: /iv/request/

Disallow: /news/473912/

Disallow: /personal/

Disallow: /pravovest-audit-sp/

Disallow: /products/ipo/editions/ggsr/

Disallow: /products/ipo/my_system/sovet/

Disallow: /products/ipo/prime/doc/digest/

Disallow: /products/ipo/system/open/

Disallow: /search/

Disallow: /services/

Disallow: /test/

Disallow: /test/news/


Clean-param: _cldee
Clean-param: _ga
Clean-param: _gl
Clean-param: _ut
Clean-param: _utl
Clean-param: _utl_t
Clean-param: _x_tr_hl
Clean-param: _x_tr_pto
Clean-param: _x_tr_sch
Clean-param: _x_tr_sl
Clean-param: _x_tr_tl
Clean-param: 0
Clean-param: 1
Clean-param: 2
Clean-param: 3
Clean-param: 4
Clean-param: 5
Clean-param: 6
Clean-param: 7
Clean-param: 8
Clean-param: 9
Clean-param: acc_id
Clean-param: amp
Clean-param: auth
Clean-param: back
Clean-param: blind
Clean-param: btx
Clean-param: c
Clean-param: c2
Clean-param: calltouch_tm
Clean-param: cd
Clean-param: city
Clean-param: clckid
Clean-param: clid
Clean-param: client
Clean-param: complect_id
Clean-param: crc
Clean-param: ct
Clean-param: d
Clean-param: data
Clean-param: disableGlobalInfoCollect
Clean-param: do
Clean-param: docid
Clean-param: dpe
Clean-param: erid
Clean-param: etext
Clean-param: fbclid
Clean-param: fmode
Clean-param: from
Clean-param: from_
Clean-param: frp
Clean-param: garant_dosug
Clean-param: garant_fed
Clean-param: garant_fedweek
Clean-param: garant_ia
Clean-param: garant_mos
Clean-param: garant_mosweek
Clean-param: garant_mweek
Clean-param: garant_nal1
Clean-param: garant_new_ogv
Clean-param: garant_release
Clean-param: garant_www
Clean-param: gl
Clean-param: gr_
Clean-param: heigh
Clean-param: hl
Clean-param: id
Clean-param: idClient
Clean-param: idOrder
Clean-param: iframe
Clean-param: instream
Clean-param: is
Clean-param: is_channel
Clean-param: key
Clean-param: keyno
Clean-param: konkurs_login
Clean-param: kp_
Clean-param: l10n
Clean-param: la
Clean-param: lang
Clean-param: listd
Clean-param: login
Clean-param: m
Clean-param: m_news1
Clean-param: mail
Clean-param: mail_fed
Clean-param: mail_fedweek
Clean-param: mail_ia
Clean-param: mail_mos
Clean-param: mail_mweek
Clean-param: mail_nal1
Clean-param: mail_www
Clean-param: member
Clean-param: messageid
Clean-param: mime
Clean-param: mod
Clean-param: msclkid
Clean-param: msgid
Clean-param: MSISDN
Clean-param: name
Clean-param: no
Clean-param: noredir
Clean-param: nw
Clean-param: ob_
Clean-param: ob_8m
Clean-param: order
Clean-param: p
Clean-param: page
Clean-param: parent
Clean-param: part
Clean-param: parter
Clean-param: partner
Clean-param: peer_id
Clean-param: pid
Clean-param: platformId
Clean-param: prime
Clean-param: q
Clean-param: ref
Clean-param: roistat_visit
Clean-param: s
Clean-param: sa
Clean-param: sfns
Clean-param: shem
Clean-param: sign
Clean-param: signature
Clean-param: source
Clean-param: special
Clean-param: sub
Clean-param: subscribe_fed
Clean-param: subscribe_ia
Clean-param: subscribe_mweek
Clean-param: subscribe_new_ogv
Clean-param: tag_id
Clean-param: target
Clean-param: targetText
Clean-param: text
Clean-param: thememessage
Clean-param: tld
Clean-param: tm
Clean-param: tno
Clean-param: token
Clean-param: tpclid
Clean-param: trk
Clean-param: typemessage
Clean-param: u
Clean-param: uid
Clean-param: uname
Clean-param: upass
Clean-param: urem
Clean-param: url
Clean-param: urn
Clean-param: userInfo
Clean-param: utm
Clean-param: utm_orderpage
Clean-param: utm_referer
Clean-param: utm_referrer
Clean-param: utm_startpage
Clean-param: v
Clean-param: y
Clean-param: y-
Clean-param: yclid
Clean-param: ys
Clean-param: ysc
Clean-param: yscl
Clean-param: yscli
Clean-param: ysclid

User-agent: YandexDirect

Disallow: /personal/


User-Agent: Yandex

Disallow: /guide/registraciya-tovarnogo-znaka-gosuslugi/
sitemap.xml 200 OK
Type Sitemap Index URLs 33 entries Valid XML Yes
Child Sitemaps:
A+
Domain Intelligence
garant.ru — via RU-CENTER-RU, 29 years old, hosted on DDOS-GUARD, RU
PASS
garant.ru — via RU-CENTER-RU, 29 years old, hosted on DDOS-GUARD, RU
Info::
Domain registered until Sep 30, 2026 (5 months remaining)
Info::
Registrar: RU-CENTER-RU
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: DDOS-GUARD, RU
Got: AS57724
Domain expiry

109 days

September 30, 2026

SSL certificate

345 days

Issued by GlobalSign nv-sa

Domain age

29 years

Registered September 15, 1997

DNSSEC

Status unknown

Protects against DNS spoofing

Hosting

DDOS-GUARD, RU

ASN AS57724

185.178.208.73

Registrar

RU-CENTER-RU

Unlocked 2 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar RU-CENTER-RU
Created September 15, 1997 (29 years ago)
Expires September 30, 2026 (5 months)
Name Servers ns10.garant.ru, ns20.garant.ru
Registrant NPP "Garant-Service" (LLC).
Hosting
IP Address 185.178.208.73
ASN AS57724 (DDOS-GUARD, RU)
Provider DDOS-GUARD, RU
Data source: whois (1.8s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A
HTTP Probe Timing
Total 551 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
206 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
37 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
41 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
552 ms
Total Time Total request time from DNS lookup through full response.
552 ms

Connection waterfall

DNS Lookup 206 ms TCP Connect 37 ms TLS Handshake 41 ms Server Processing 268 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback