Skip to content
https://rainews.it

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
80
GRADE
B
FIX
1
REVIEW
6
PASS
2
INFO
0
Probed from Santa Clara, United States
301 Moved Permanently
Checks
9
2 PASS 6 REVIEW 1 FIX
D
CDN & Delivery
Action
No CDN detected
FIX
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

B
DNS Records
1 A records, 356 ms lookup
REVIEW
1 A records, 356 ms lookup
Info::
Resolves to 1 IPv4 address(es)
Got: 212.162.68.91
Info::
Single A record — no DNS redundancy
Multiple A records provide failover if one server goes down.
Info::
No IPv6 (AAAA) records
Info::
6 nameserver(s) configured
Got: ns.rai.it, ns2.rai.it, dnsso1.interbusiness.it, dnsso2.interbusiness.it, dnsso3.interbusiness.it, dnsso4.interbusiness.it
Info::
No MX records — email not configured via DNS
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
No SPF record found in TXT records
SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.
Warning::
DNS resolution is slow (356 ms)
Slow DNS adds latency to every page load. Consider a faster DNS provider.
Got: 356 ms
A212.162.68.91
AAAA
CNAME
NSns.rai.it, ns2.rai.it, dnsso1.interbusiness.it, dnsso2.interbusiness.it, dnsso3.interbusiness.it, dnsso4.interbusiness.it
MX
TXT
3d0lxy1jwgt7b9m8cljv8rw0pgvs7tf5
_j6z6qd81dssht229qgu6n37jix3p83q
_mm40yxc2kdqt5d1cukt99uwfcslgyn5
_vu41illfct1s1aqcua8oldrhi700437
k2w08kt7cpjcffhm3n0p4021ddf7prtf
mk04klp97s98mf2tryq3bdqkpxscnrz9
p5mmm260f7qfnnkp3qjn7nf3ps1ck0kc
st0qtxks681rfk8x8t2gttj6lymssvyd
vd7r5fv7t559ll3cb4jw00rzpvj9v038
facebook-domain-verification=cdgcqgaf2wfcqpseh8cfb39n5g2phx
CAALookup not available with standard resolver
Resolved in 356 ms

Multiple A records provide failover if one server goes down.

Why this matters

Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.

Learn more

Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.

Source: SRE practice / DNS architecture

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

SPF helps prevent email spoofing. Add a TXT record starting with 'v=spf1'.

Why this matters

Without SPF, receiving servers can't validate sending IPs — your domain is easier to spoof in phishing.

Learn more

SPF complements DMARC. Both should be published. SPF records list authorized sending IPs (e.g., `v=spf1 include:_spf.google.com ~all` for Google Workspace). After publishing, verify in Google Postmaster Tools or mxtoolbox.

Source: RFC 7208 (SPF)

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Why this matters

DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.

Source: DNS performance benchmarks

B
Redirect Chain
1 redirect(s), 1067 ms total
REVIEW
1 redirect(s), 1067 ms total
Info::
Single redirect
Got: https://rainews.it → https://www.rainews.it/ (301)
Info::
WWW normalization redirect
Warning::
Redirect overhead: 1067 ms total
Got: 1067 ms

https://rainews.it

876 ms · HTTP/1.0

301

https://www.rainews.it/

191 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://rainews.it301876 msHTTP/1.0BigIP
2https://www.rainews.it/200191 msHTTP/1.1

See the visual redirect chain in the HTTP Probe tab →

C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B
Domain Intelligence
rainews.it — via DOTNICE-REG, 26 years, 8 months old, hosted on RAI-AS, IT
REVIEW
rainews.it — via DOTNICE-REG, 26 years, 8 months old, hosted on RAI-AS, IT
Critical::
Domain expires in 9 days
This domain expires on May 2, 2026. Domains that expire accidentally cause complete website downtime. Enable auto-renewal or renew manually now.
Got: Expires May 2, 2026
Info::
Registrar: DOTNICE-REG
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: RAI-AS, IT
Got: AS8234
Domain expiry

EXPIRED

May 2, 2026

SSL certificate

260 days

Issued by DigiCert Inc

Domain age

26 years, 8 months

Registered December 21, 1999

DNSSEC

Status unknown

Protects against DNS spoofing

Hosting

RAI-AS, IT

ASN AS8234

212.162.68.91

Registrar

DOTNICE-REG

Unlocked 6 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Domain has EXPIRED — renew immediately to avoid total site outage
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar DOTNICE-REG
Created December 21, 1999 (26 years, 8 months ago)
Expires May 2, 2026 (9 days)
Last Updated May 18, 2025
Name Servers ns.rai.it, ns2.rai.it, dnsso1.interbusiness.it, dnsso2.interbusiness.it, dnsso3.interbusiness.it, dnsso4.interbusiness.it
Registrant RAI Radiotelevisione Italiana S.p.A.
Hosting
IP Address 212.162.68.91
ASN AS8234 (RAI-AS, IT)
Provider RAI-AS, IT
Data source: whois (0.8s)

This domain expires on May 2, 2026. Domains that expire accidentally cause complete website downtime. Enable auto-renewal or renew manually now.

Why this matters

Domain expiry approaching — renew immediately and ensure auto-renew + alerting are configured.

Source: ICANN renewal policy

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

B
HTTP Probe Timing
Total 874 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
REVIEW
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
347 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
175 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
178 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
875 ms
Total Time Total request time from DNS lookup through full response.
875 ms

Connection waterfall

DNS Lookup 347 ms TCP Connect 175 ms TLS Handshake 178 ms Server Processing 175 ms Content Transfer 0 ms
B
TLS Certificate Expiry & Recommendations
260 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

260
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+
Crawlability
robots.txt present, sitemap with 3014 URLs
PASS
robots.txt present, sitemap with 3014 URLs
Info::
robots.txt is present
Got: 3194 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 3014 entries
Info::
Sitemap index with 3014 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 3194 B Sitemaps referenced 2 User-agents GPTBot, PerplexityBot, anthropic-ai, DataForSeoBot, magpie-crawler, news-please, *, AwarioRssBot, AwarioSmartBot, Claude-Web, omgili, omgilibot, Scrapy, Amazonbot, NewsNow, peer39_crawler/1.0, TurnitinBot, Botify, Twitterbot, FacebookBot, Bytespider, CCBot, ClaudeBot, cohere-ai, Diffbot, peer39_crawler, ChatGPT-User, Google-Extended Blocking No — crawling allowed
# Rai RadioTelevisione Italiana content is made available for your personal, non-commercial

# use subject to our Terms of Service.

# Use of any device, tool, or process designed to data mine or scrape the content

# using automated means is prohibited without prior written permission from

# Rai RadioTelevisione Italiana. Prohibited uses include but are not limited to:

# (1) text and data mining activities under Art. 4 of the EU Directive on Copyright in

# the Digital Single Market;

# (2) the development of any software, machine learning, artificial intelligence (AI),

# and/or large language models (LLMs);

# (3) creating or providing archived or cached data sets containing our content to others; and/or

# (4) any commercial purposes.

# Contact https://www.rai.it/centroassistenza


User-agent: *

Allow: /

Disallow: /app/

Disallow: /webview/

Disallow: /programmi/

Disallow: /collezioni/

Disallow: /atomatic/

Disallow: /StatisticheProxy/

Disallow: /live/

Disallow: /iframe/

Disallow: /foto/

Allow:    /tgr/*/foto/

Disallow: /*index.html?

Allow:    /dl/raiSport/speciali/*index.html

Disallow: /*ricerca.html?

Disallow: /*chi-siamo.html?

Disallow: /*live_frame.html

Disallow: /*?print$

Disallow: */related-tag-iframe.html

Disallow: /*?refresh_ce=$

Disallow: /*?nxtep

Disallow: /*.json$

Disallow: /tgr/?set

Disallow: /tgr/amp/

Disallow: /ran24/speciali/

Disallow: /hit-service/



# CARTELLE SOTTO DL


Disallow: /dl/RaiTV/

Disallow: /dl/rainews/redazioni/

Disallow: /dl/rainews/ricerca.html

Disallow: /dl/rainews/articoli/

Disallow: /dl/rainews/media/

Disallow: /dl/rainews/speciali/

Disallow: /dl/rainews/live/

Disallow: /dl/rainews/elezioni2021/

Disallow: /dl/rainews/elezioni2020/

Disallow: /dl/rainews/includes/

Disallow: /dl/rainews/TGR/

Disallow: /dl/rainews/json/

Disallow: /dl/rai24/

Allow:    /dl/rai24/assets/images/*.jpg$

Allow:    /dl/rai24/assets/images/*.png$

Disallow: /dl/Report/

Disallow: /dl/grr/

Disallow: /dl/bilancio

Disallow: /dl/portaleRadio

Disallow: /dl/portali/site/

Disallow: /dl/js/

Disallow: /dl/objects/

Disallow: /dl/raisport/

Disallow: /dl/tg3/

Disallow: /dl/video/

Disallow: /dl/portale/

Disallow: /dl/docs/

Disallow: /dl/doc/

Disallow: /dl/analytics/

Disallow: /dl/siti/

Disallow: /dl/test/


# SITEMAPS


Sitemap: https://www.rainews.it/sitemap.xml

Sitemap: https://www.rainews.it/dl/rainews/sitemap/fast/sitemap.fast.xml


# ALTRI USER AGENT


User-agent: Twitterbot

User-Agent: FacebookBot

Allow:    /*?nxtep



# AI BOTS

User-agent: ChatGPT-User

User-agent: Google-Extended

User-agent: GPTBot

User-agent: PerplexityBot


User-agent: Amazonbot

User-agent: anthropic-ai

User-agent: AwarioRssBot

User-agent: AwarioSmartBot

User-agent: Bytespider

User-agent: CCBot


User-agent: ClaudeBot

User-agent: Claude-Web

User-agent: cohere-ai

User-agent: DataForSeoBot

User-agent: Diffbot

User-agent: FacebookBot


User-agent: magpie-crawler

User-agent: NewsNow

User-agent: news-please

User-agent: omgili

User-agent: omgilibot

User-agent: peer39_crawler

User-agent: peer39_crawler/1.0


User-agent: Scrapy

User-agent: TurnitinBot

User-agent: Botify

Disallow: /
sitemap.xml 200 OK
Type Sitemap Index URLs 3014 entries Valid XML Yes
Child Sitemaps:
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

403https://www.rainews.it/
200https://rainews.it/

HTTP → HTTPS

301http://rainews.it/ https://www.rainews.it/

Consistent

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback