Skip to content
https://thomsonreuters.com

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
83
GRADE
B
FIX
1
REVIEW
4
PASS
4
INFO
0
Probed from Madrid, Spain
301 Moved Permanently
Checks
9
4 PASS 4 REVIEW 1 FIX
D
CDN & Delivery
Action
No CDN detected
FIX
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

B
Redirect Chain
2 redirect(s), 553 ms total
REVIEW
2 redirect(s), 553 ms total
Warning::
2 redirects before reaching final URL
Each redirect adds latency. Try to minimize the chain to 1 hop.
Info::
WWW normalization redirect
Info::
Redirect overhead: 553 ms total
Got: 553 ms

https://thomsonreuters.com

496 ms · HTTP/1.0

301

https://www.thomsonreuters.com/

50 ms · HTTP/1.1

301

https://www.thomsonreuters.com/en

6 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://thomsonreuters.com301496 msHTTP/1.0BigIP
2https://www.thomsonreuters.com/30150 msHTTP/1.1
3https://www.thomsonreuters.com/en2006 msHTTP/1.1

See the visual redirect chain in the HTTP Probe tab →

Each redirect adds latency. Try to minimize the chain to 1 hop.

Why this matters

Redirect chain — each hop adds latency; combine into one redirect where possible.

Source: Google Search Central / web.dev

C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Critical::
HTTP version does not redirect to HTTPS
Got: HTTP 301 Expected: 301 redirect to HTTPS

www / non-www

301https://www.thomsonreuters.com/
200https://thomsonreuters.com/

Preferred variant: non-www

HTTP → HTTPS

301http://thomsonreuters.com/ → http://www.thomsonreuters.com/

HTTP version does not redirect to HTTPS

B
TLS Certificate Expiry & Recommendations
186 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

186
days left
0d 30d 60d 90d+

Recommended actions

  • Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+
DNS Records
1 A records, 86 ms lookup
PASS
1 A records, 86 ms lookup
Info::
Resolves to 1 IPv4 address(es)
Got: 155.46.172.255
Info::
Single A record — no DNS redundancy
Multiple A records provide failover if one server goes down.
Info::
No IPv6 (AAAA) records
Info::
4 nameserver(s) configured
Got: ns-aws-7.thomsonreuters.org, ns-aws-6.thomsonreuters.net, ns-aws-5.thomsonreuters.com, ns-aws-8.thomsonreuters.co.uk
Info::
2 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 86 ms
Got: 86 ms
A155.46.172.255
AAAA—
CNAME—
NSns-aws-7.thomsonreuters.org, ns-aws-6.thomsonreuters.net, ns-aws-5.thomsonreuters.com, ns-aws-8.thomsonreuters.co.uk
MX
10 mxb-00160c04.gslb.pphosted.com
10 mxa-00160c04.gslb.pphosted.com
TXT
_5f1xjdegb3hgbmb85nfedina9uzjgkq
postman-domain-verification=0d8b80562ae1824f3321234031738be1f4b5c0228905306bdfea...
pexip-ms-tenant-domain-verification=53a8a815-6df1-4486-8cf1-58c358700c4f
microsoft-site-verification=6ex1JKbgBafQfCZSu9W2PkES7pzOEssDJSmUqnF14buApkUuXuaX...
oci-domain-verification=DhQsN0a5vJEOE2cLCiDX7RGoJGZny3vKzR2JEbp51
mongodb-site-verification=TOB0H8CZfBWwEXdMblD6BRN61xKHX6kX
elevenlabs=Lt6gbAYFWe0I_F8MHRf4iE5ZplBomz0-74r3IRgQOVU
apple-domain-verification=eRGp4zKokpCndMZU
status-page-domain-verification=b1rl37cjwt4p
atlassian-domain-verification=0n1gBban2ijoxEeHEYG9HvDUH10dw8a/8NQAEOE4zIQz2L5aBA...
google-site-verification=bkcGR8CDR4PAkZtYFoy3vwGpnNfvJOOp20zgU0ieQwY
docusign=d544be33-31ee-47d3-b1b7-2617dd10b046
amazonses:lIIlkGIiC4u5Z56yfvW6DQIvM9JhFVVXXcrrbnFMyvk=
linear-domain-verification=9cnkn4gwywkf
stripe-verification=883B5E59A4086462D8939DE4083F7D6F74A45E37D126835A397DE53EAF1B...
c08cff0784414d9aaf7ebf6a4cddcd01
69AAF362D7E5A544AC590729BCF721E5E58DCE88E429EB7D37160F1FF31DE491
google-site-verification=aKXwOLCnhDJc_NJ0_HRm2T7heOqk8DLnv04KxM3UI4I
jamf-site-verification=DxDupr_BH0hLVOFDILupGA
onetrust-domain-verification=f29fc709451a4dffb27dd3f10f9d45dd
jamf-site-verification=8-eBDOfffzCRywWdIMU5AA
Sendinblue-code:0d38bf86b81833ecc3a015b5b9e3a1c7
google-site-verification=JeOQZIbRQFHYLju7pJ9pA1jcBQ_YuJr1BJYZDamvOG8
adobe-idp-site-verification=f6a6830182f1e0dcbcb7781acc7f1ee9eac983529878d0c8ed38...
docker-verification=ed0c56d0-0bab-4875-86bb-fdfa31ccff9c
h1-domain-verification=Eh9QTPjgF8sdAzUvjh35dJbq2dz9Q1sd8XJDJW895jKLgRdi
adobe-idp-site-verification=94ddc4fa-09b2-4150-82be-c7ec87321c70
sending_domain299951=c983a032056b26b764d40c3a8a5f98d3c62ec686adc4e127659141a973c...
linear-domain-verification=j96xgcg6axms
amazonses:v3UnzPZ83hX92rRo+Jl8TOx32xxGSlwFhgd3lzQTDCY=
cursor-domain-verification-1f0skn=n5dwd5vVS3umKyEckyLWCuPU4
onetrust-domain-verification=2d76838cbc56485e9e32447386c1ddb9
google-site-verification=mjn2U0vAS8wRywmdGcIN3FkK_N3BkMNFNc5YMe6QYDo
anthropic-domain-verification-dd448w=5LzCgB65qkxp0Miig6DR7Ckmp
stripe-verification=78EFA9D2CD953392341BF430035DC7C67C713E60B30CE2DD371B39061AE7...
stripe-verification=69AAF362D7E5A544AC590729BCF721E5E58DCE88E429EB7D37160F1FF31D...
apple-domain-verification=voAz1fDhqIN4vRxG52m4VSOgLipH0OMyfJIprobVB1U
teamviewer-sso-verification=94a81ec83dc14e098b8b9832a9589180
amazonses:zJH854fDfgTJzUP1sSYem9nEgeuvTFhxADpFSogN2xw=
brevo-code:0d38bf86b81833ecc3a015b5b9e3a1c7
smartsheet-site-validation=mtVjlUTVB_Xb8kvZmKxrtk759fhaQ6o8
linear-domain-verification=xdgupa7f4quh
datadome-domain-verify=y5WtOufNeZ56druqIi42VfOOisXeUqZh
pexip-ms-tenant-domain-verification=8c720225-37d0-468c-bad2-75600ba7be98
google-site-verification=BJMjc5b5RrTLbcWFEUdEWchLp89mi5fsKEowihqQdMA
SPF v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
_amazonses.thomsonreuters.com=LsY5zfTHvxP01nLdSqlKfTqQdqPTiUXgV5O7QgQsRRY=
pexip-portal-domain-verification=8c720225-37d0-468c-bad2-75600ba7be98
yahoo-verification-key=VxZJ1Z2mvpck/GvOO+6mc1QN8TRgfoh7sRLJ51FHOUE=
openai-domain-verification=dv-9Hy9nYHk6zNo0dHqol5JFCJG
google-site-verification=ZBvvfGQJ8LXaxkZNfbBy9gkLknU2euUSyITxq5HKTCw
google-site-verification=uavxXCPtaVBB3nDV93qsksXEq1kowMc3Mztcpfm2yxo
segment-site-verification=i4swjTyiv0fzz199v83ipMm2LjAYngwQ
_h8vjqnujcr4fq2g3tsqm6n15yq1jekk
amazonses:voZl9lBlnYBY+ap0Ab3vZCGHfGaGRgMe+ioYEKGdy2M=
MS=ms99622046
CAALookup not available with standard resolver
Resolved in 86 ms

Multiple A records provide failover if one server goes down.

Why this matters

Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.

Learn more ▾

Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.

Source: SRE practice / DNS architecture

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+
Crawlability
robots.txt present, sitemap with 1419 URLs
PASS
robots.txt present, sitemap with 1419 URLs
Info::
robots.txt is present
Got: 483 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 1419 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 483 B Sitemaps referenced 2 User-agents * Blocking No — crawling allowed
# Global robots config

User-agent: *


Disallow: /*?*

Allow: /*js*

Allow: /*css*


# robots.txt for http://thomsonreuters.com/

Disallow: /404.html

Disallow: /500.html

Disallow: /en/60279341234.html

Disallow: /en/60279341234

Disallow: /content/ewp-marketing-websites

Disallow: /content/ciam-user-profile

Disallow: /*/profile/email-verification


Sitemap: https://www.thomsonreuters.com/en/sitemap.xml

Sitemap: https://www.thomsonreuters.com/en-us/posts/sitemap_index.xml
sitemap.xml 200 OK
Type URL Set URLs 1419 entries Valid XML Yes
Sample URLs:
A+
Domain Intelligence
thomsonreuters.com — via MarkMonitor Inc., 19 years, 2 months old, hosted on THOMSON-REUTERS - West Publishing Corporation, US
PASS
thomsonreuters.com — via MarkMonitor Inc., 19 years, 2 months old, hosted on THOMSON-REUTERS - West Publishing Corporation, US
Info::
Domain registered until May 4, 2027 (1 years remaining)
Info::
DNSSEC is enabled
Info::
Registrar: MarkMonitor Inc.
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: THOMSON-REUTERS - West Publishing Corporation, US
Got: AS4583
Domain expiry

296 days

May 4, 2027

SSL certificate

186 days

Issued by Sectigo Limited

Domain age

19 years, 2 months

Registered May 4, 2007

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

THOMSON-REUTERS - West Publishing Corporation, US

ASN AS4583

155.46.172.255

Registrar

MarkMonitor Inc.

Unlocked 4 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar MarkMonitor Inc.
Created May 4, 2007 (19 years, 2 months ago)
Expires May 4, 2027 (1 years)
Last Updated April 2, 2026
Name Servers ns-aws-5.thomsonreuters.com, ns-aws-6.thomsonreuters.net, ns-aws-7.thomsonreuters.org, ns-aws-8.thomsonreuters.co.uk
DNSSEC Enabled
Hosting
IP Address 155.46.172.255
ASN AS4583 (THOMSON-REUTERS - West Publishing Corporation, US)
Provider THOMSON-REUTERS - West Publishing Corporation, US
Data source: rdap (0.4s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A
HTTP Probe Timing
Total 517 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
21 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
123 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
250 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
517 ms
Total Time Total request time from DNS lookup through full response.
517 ms

Connection waterfall

DNS Lookup 21 ms TCP Connect 123 ms TLS Handshake 250 ms Server Processing 123 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback