Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
CCrawlabilityActionrobots.txt present, sitemap with 0 URLsREVIEW
Search engines may not be able to parse the sitemap. Fix XML validation errors.
An unparseable sitemap is silently ignored by Google — the URLs it advertises are never queued for crawl.
Learn more ▾ ▴
Google's sitemap parser is strict about XML validity. A single unescaped `&` or unclosed tag invalidates the whole file. Run your sitemap through a validator (Search Console's Sitemaps report flags it) and fix the offending entry. Most generators escape correctly; mistakes usually come from manually-written entries.
Source: sitemaps.org / Google Search Central
An empty sitemap provides no value. Add <url> entries for your pages.
An empty sitemap signals 'no content to index' to Google — actively harmful versus having no sitemap at all.
Learn more ▾ ▴
Google compares URLs in the sitemap against URLs it has crawled. An empty sitemap on a site with thousands of pages signals abandonment. Either populate it correctly (most CMSes auto-generate) or delete the file and let Google crawl normally.
Source: Google Search Central / sitemaps.org
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
# Allowlist your bot: https://help.pinterest.com/bot-submission-form
#
# Pinterest is hiring!
#
# Learn about the SEO work that we're doing at https://medium.com/@Pinterest_Engineering/demystifying-seo-with-experiments-a183b325cf4c
#
# Check out some of our available positions at https://www.pinterestcareers.com/
User-agent: 2checkout
User-agent: AASA-Bot
User-agent: AccessibleWebBot
User-agent: Adagiobot
User-agent: adbeat_bot
User-agent: adidxbot
User-agent: ADmantX
User-agent: AdometryBot
User-agent: AdsBot-Google
User-agent: AdsBot-Google-Mobile
User-agent: Adsense-Snapshot-Google
User-agent: AdsTxtCrawler
User-agent: Adyen
User-agent: AhrefsBot
User-agent: AhrefsSiteAudit
User-agent: Akismet
User-agent: Algolia Crawler
User-agent: AmazonProductDiscovery
User-agent: Aolbot-News
User-agent: APIs-Google
User-agent: AppInsights
User-agent: Applebot
User-agent: AppleNewsBot
User-agent: Archive-It
User-agent: archive.org_bot
User-agent: ArchiveBot
User-agent: ArchiveTeam-ArchiveBot
User-agent: AspiegelBot
User-agent: Audisto Crawler
User-agent: Awario
User-agent: AxonBot
User-agent: Baidu-ADS
User-agent: Baiduspider
User-agent: Barkrowler
User-agent: bingbot
User-agent: BingPreview
User-agent: bitlybot
User-agent: bl.uk_ldfc_bot
User-agent: BLP_bbot
User-agent: bordermanager
User-agent: botify
User-agent: BrandVerity
User-agent: Bravebot
User-agent: BrightEdge Crawler
User-agent: BrightEdge-Crawler
User-agent: BUbiNG
User-agent: CaliperBot
User-agent: CapitalOneBot
User-agent: cf-qualys-scanner
User-agent: Chrome-Lighthouse
User-agent: CJBot
User-agent: ClarityBot
User-agent: Clickagy Intelligence Bot v2
User-agent: Cloudflare-AI-Search
User-agent: CloudflareBrowserRenderingCrawler
User-agent: coccocbot
User-agent: ContextualBot
User-agent: CookieReports
User-agent: Coveobot
User-agent: CriteoBot
User-agent: curly-
User-agent: cXensebot
User-agent: Datadog
User-agent: DataForSeoBot
User-agent: Daum
User-agent: demandbase
User-agent: Discordbot
User-agent: DotBot
User-agent: DoubleVerifyBot
User-agent: Doximity-Pipeline
User-agent: Dragonbot
User-agent: Dratabot
User-agent: DuckAssistBot
User-agent: DuckDuckBot
User-agent: DuckDuckGo-Favicons-Bot
User-agent: DVBot
User-agent: eContext
User-agent: ecurly Webhook
User-agent: EngageBDR
User-agent: europarchive.org
User-agent: evidon
User-agent: ExaleadCloudview
User-agent: FacebookBot
User-agent: facebookcatalog
User-agent: facebookexternalhit
User-agent: Facebot
User-agent: FastDAST
User-agent: FeedBurner
User-agent: Feedfetcher-Google
User-agent: FlipboardProxy
User-agent: FlippBot
User-agent: Freshping
User-agent: GeedoProductSearch
User-agent: Google Favicon
User-agent: Google News
User-agent: Google Page Speed Insights
User-agent: Google Web Preview
User-agent: Google Wireless Transcoder
User-agent: Google-Ads-Overview
User-agent: Google-AdWords-Express
User-agent: Google-Adwords-Instant
User-agent: Google-Apps-Script
User-agent: Google-Certificates-Bridge
User-agent: Google-CWS
User-agent: Google-Display-Ads-Bot
User-agent: Google-Firebase
User-agent: Google-HotelAdsVerifier
User-agent: Google-InspectionTool
User-agent: Google-NotebookLM
User-agent: Google-PageRenderer
User-agent: Google-PhysicalWeb
User-agent: Google-Pinpoint
User-agent: Google-Read-Aloud
User-agent: Google-Safety
User-agent: Google-Site-Verification
User-agent: Google-speakr
User-agent: Google-Structured-Data-Testing
User-agent: Google-Trust-Services
User-agent: google_partner_monitoring
User-agent: GoogleAssociationService
User-agent: GoogleImageProxy
User-agent: GoogleMessages
User-agent: GoogleProducer
User-agent: GoogleSecurityScanner
User-agent: grafana/synthetic-monitoring
User-agent: GroovinaAdsbot
User-agent: GuestpostsBot
User-agent: heritrix
User-agent: Hotjar
User-agent: HubSpot
User-agent: ia_archiver
User-agent: IABot
User-agent: IAS-Crawler
User-agent: ias_crawler
User-agent: ias_wombles
User-agent: INA dlweb
User-agent: infolink
User-agent: InteractiveAdvertisingBureau
User-agent: ip-label
User-agent: J-BRW
User-agent: J-DLC
User-agent: James BOT
User-agent: JobRapido
User-agent: Jooblebot
User-agent: Jumio
User-agent: kakaotalk-scrap
User-agent: KargoBot-Artemis
User-agent: Leikibot
User-agent: LiftoffDroid
User-agent: line-poker
User-agent: Linguee Bot
User-agent: linkchecker.pro
User-agent: LinkedInBot
User-agent: LOCKSS cache
User-agent: LogicMonitor SiteMonitor
User-agent: Lyonl
User-agent: magpie-crawler
User-agent: Mastodon
User-agent: MaxPoint Bot
User-agent: MBCrawler
User-agent: mediaboardbot
User-agent: MediaMonitoringBot
User-agent: Mediatoolkitbot
User-agent: MeltwaterNews
User-agent: meta-externalads
User-agent: meta-externalfetcher
User-agent: Metorik
User-agent: MgidBot
User-agent: MicrosoftPreview
User-agent: MixrankBot
User-agent: MJ12bot
User-agent: moatbot
User-agent: MojeekBot
User-agent: Monsidobot
User-agent: Moreover
User-agent: Morningscore Bot
User-agent: MSNPTC
User-agent: msrbot
User-agent: MTRobot
User-agent: netarkivindsamling
User-agent: NetpeakCheckerBot
User-agent: NeumobBot
User-agent: Neustar
User-agent: Nielsen
User-agent: NostoCrawlerBot
User-agent: NumeratorBot
User-agent: OdklBot
User-agent: OKX-dolphin-crawler
User-agent: OnCrawl
User-agent: OneTrust
User-agent: OPBot
User-agent: OSZKbot
User-agent: outbrain
User-agent: Paddle
User-agent: PageFreezer
User-agent: Pandalytics
User-agent: parsely.com
User-agent: ParselySharesBot
User-agent: PayPal
User-agent: peer39_crawler
User-agent: Pinterest
User-agent: Pinterestbot
User-agent: Plukkie
User-agent: Prerender
User-agent: PriceSpider
User-agent: ProjectShield-UrlCheck
User-agent: proximic
User-agent: QualifiedBot
User-agent: Quantcastbot
User-agent: Qwantbot
User-agent: Qwantify
User-agent: Razorpay
User-agent: Rigor
User-agent: RiverglassScanner
User-agent: RKG Url Verifier
User-agent: rogerbot-crawler
User-agent: RuxitSynthetic
User-agent: scanalert
User-agent: search.marginalia.nu
User-agent: SearchAtlas Bot
User-agent: SeekportBot
User-agent: SemanticJuice
User-agent: SemrushBot
User-agent: SemrushBot-BA
User-agent: SemrushBot-OCOB
User-agent: SemrushBot-SA
User-agent: SemrushBot-SI
User-agent: SemrushBot-SWA
User-agent: sentry
User-agent: SentryUptimeBot
User-agent: seo-audit-check-bot
User-agent: SeobilityBot
User-agent: SERankingBacklinksBot
User-agent: SeznamBot
User-agent: SinceraSyntheticUser
User-agent: SISTRIX Optimizer
User-agent: SiteAuditBot
User-agent: sitebulb
User-agent: SiteCheckerBotCrawler
User-agent: Siteimprove-SiteCheck
User-agent: SiteSearch360
User-agent: SkypeUriPreview
User-agent: Slack-ImgProxy
User-agent: Slackbot
User-agent: Slurp
User-agent: SmarshBot
User-agent: SmartBriefBot
User-agent: Snap URL Preview Service
User-agent: SnapchatAds
User-agent: SnapPreviewBot
User-agent: Sogou
User-agent: solarwinds
User-agent: spbot
User-agent: Splunk Synthetics
User-agent: SpringBot
User-agent: SSL Labs
User-agent: ssr.ias-lab.de
User-agent: Stape
User-agent: SteamChat
User-agent: Storebot-Google
User-agent: Stripe
User-agent: Sucuri
User-agent: Taboolabot
User-agent: TagInspector
User-agent: TelegramBot
User-agent: Teoma
User-agent: trendictionbot
User-agent: trovitBot
User-agent: Tumblr
User-agent: twibble.io
User-agent: TwinWaveScanner
User-agent: um-LN
User-agent: VaultPress
User-agent: vercel-screenshot
User-agent: VigLink
User-agent: VocusBot
User-agent: W3C-checklink
User-agent: W3C_Validator
User-agent: Wappalyzer
User-agent: WhatsApp
User-agent: woorankreview
User-agent: Y!J-ASR
User-agent: Y!J-BRJ/YATS crawler
User-agent: Y!J-BRU/VSIDX
User-agent: Y!J-BRW
User-agent: Y!J-BRY/YATSH crawler
User-agent: Y!J-BRZ/YATSHA crawler
User-agent: Y!J-MMP/dscv
User-agent: Y!J-WSC
User-agent: YaDirectFetcher
User-agent: Yahoo Ad monitoring
User-agent: Yahoo Link Preview
User-agent: Yahoo! Slurp
User-agent: Yahoo-Japan-ASR
User-agent: YahooCacheSystem
User-agent: YahooExternalCache
User-agent: yahoofeedseeker
User-agent: YahooMailProxy
User-agent: YaK
User-agent: Yandex
User-agent: Yeti
User-agent: YextBot
User-agent: YioopBot
User-agent: YJ-SAD
Allow: /_ngjs/resource/*/get/
Allow: /business/create/
Allow: /resource/*/get/
Disallow: /*/*/*/_tools/*
Disallow: /*/*/*/more_ideas/
Disallow: /*/*/_tools/*
Disallow: /*/*/activity/*
Disallow: /*/*/group/
Disallow: /*/*/invite/
Disallow: /*/*/more_ideas/*
Disallow: /*/?*amp_client_id*
Disallow: /*/?z=1
Disallow: /*/__wishlist__/*
Disallow: /*/_activities/*
Disallow: /*/_activity/*
Disallow: /*/_community/*
Disallow: /*/_created/*
Disallow: /*/_followers/*
Disallow: /*/_following/*
Disallow: /*/_quick_saves/*
Disallow: /*/_saved/*
Disallow: /*/_shop/*
Disallow: /*/_shopping_list/*
Disallow: /*/communities/
Disallow: /*/discovered/*
Disallow: /*/followers/*
Disallow: /*/following/*
Disallow: /*/likes/*
Disallow: /*/organize/*
Disallow: /*/pins/
Disallow: /*/profile-about/
Disallow: /*/scheduled-pin/*
Disallow: /*/scheduled-pins/*
Disallow: /*/story_pins/*
Disallow: /*/tagged/*
Disallow: /*/tried/*
Disallow: /*/video_pins/*
Disallow: /?show_error=true
Disallow: /_/_/*
Disallow: /_/_/pixel/*
Disallow: /_ngjs/resource/
Disallow: /about/*
Disallow: /addboard/
Disallow: /admin/
Disallow: /age-appeal/*
Disallow: /amp/*
Disallow: /appealed-pin/
Disallow: /autocomplete/
Disallow: /board/*
Disallow: /board_activity/*
Disallow: /board_activity_comment/*
Disallow: /bookmarklet/
Disallow: /branded-pins/
Disallow: /business/ad_create/
Disallow: /business/business-access/*
Disallow: /business/business-hierarchy/*
Disallow: /business/business-manager/*
Disallow: /business/catalogs/*
Disallow: /business/commerce-integrations/*
Disallow: /business/community-information/
Disallow: /business/convert/
Disallow: /business/create-linked-account/
Disallow: /business/hub/
Disallow: /business/invite/*
Disallow: /business/onboarding/
Disallow: /business/pin_create/
Disallow: /business/referral/*
Disallow: /business/site/
Disallow: /business/switch-account/
Disallow: /business/top-ads/
Disallow: /business/update/
Disallow: /business/verified-merchant/status/
Disallow: /christmas-spotlight/
Disallow: /close-account/
Disallow: /communities/*
Disallow: /community/*
Disallow: /community_comment/*
Disallow: /community_post/*
Disallow: /connect/*/
Disallow: /content-claiming/*
Disallow: /conversati
BTLS Certificate Expiry & Recommendations123 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Submit your domain to hstspreload.org to be added to the Chrome preload list
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records4 A records, 11 ms lookupPASS
| A | 151.101.128.84, 151.101.0.84, 151.101.192.84, 151.101.64.84 |
| AAAA | — |
| CNAME | — |
| NS | ns9.pinterest.com, ns5.pinterest.com, ns6.pinterest.com, ns10.pinterest.com |
| MX | 0 |
| TXT | 6f38fmg588bzwdh9cngqn7v3p2yx6183 mhxfstw3wx05mwdx3t5rvzn9l2vzl4dj SPF v=spf1 redirect=_spf.pinterest.com.au |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 278 ms totalPASS
https://pinterest.com.au
11 ms · HTTP/1.1
https://au.pinterest.com/
267 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://pinterest.com.au | 308 | 11 ms | HTTP/1.1 | |
| 2 | https://au.pinterest.com/ | 200 | 267 ms | HTTP/1.1 |
See the visual redirect chain in the HTTP Probe tab →
AURL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
HTTP → HTTPS
Use 301 (permanent) instead of 302 (temporary)
A+Domain Intelligencepinterest.com.au — via MarkMonitor Corporate Services Inc, hosted on FastlyPASS
Unknown
123 days
Issued by DigiCert Inc
Unknown
Not enabled
Protects against DNS spoofing
Fastly
ASN AS54113
151.101.0.84
MarkMonitor Corporate Services Inc
Expiry timeline
Recommended actions
- Enable DNSSEC to protect visitors from DNS spoofing
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.
Learn more ▾ ▴
DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.
Source: ICANN / RFC 4033
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice