Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.

SCORE

GRADE

FIX

REVIEW

PASS

INFO

Probed from Singapore, Singapore

301 Moved Permanently

Checks

3 PASS 4 REVIEW 2 FIX

Redirect Chain

Action

2 redirect(s), 1472 ms total

FIX

2 redirect(s), 1472 ms total

2 redirects before reaching final URL

Each redirect adds latency. Try to minimize the chain to 1 hop.

WWW normalization redirect

Redirect overhead: 1472 ms total

Got: 1472 ms

https://blackrock.com

937 ms · HTTP/1.0

301

https://www.blackrock.com/

27 ms · HTTP/1.1

301

https://www.blackrock.com/tw

509 ms · HTTP/1.1 FINAL

#	URL	Status	Time	Protocol	Server
1	https://blackrock.com	301	937 ms	HTTP/1.0	BigIP
2	https://www.blackrock.com/	301	27 ms	HTTP/1.1	AkamaiGHost
3	https://www.blackrock.com/tw	200	509 ms	HTTP/1.1	istio-envoy

See the visual redirect chain in the HTTP Probe tab →

Each redirect adds latency. Try to minimize the chain to 1 hop.

Why this matters

Redirect chain — each hop adds latency; combine into one redirect where possible.

Source: Google Search Central / web.dev

CDN & Delivery

Action

No CDN detected

FIX

No CDN detected

A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.

No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

IPv6 Readiness

Action

No IPv6 support

REVIEW

No IPv6 support

No IPv6 (AAAA) records found

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

No IPv6 Support

About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

URL Variants

www/non-www, trailing slash, HTTP→HTTPS

REVIEW

www/non-www, trailing slash, HTTP→HTTPS

www/non-www redirect configured correctly (preferred: non-www)

HTTP version does not redirect to HTTPS

Got: HTTP 301 Expected: 301 redirect to HTTPS

www / non-www

301https://www.blackrock.com/

200https://blackrock.com/

Preferred variant: non-www

HTTP → HTTPS

301http://blackrock.com/ → http://www.blackrock.com/

HTTP version does not redirect to HTTPS

HTTP Probe Timing

Total 960 ms — DNS, TCP, TLS, TTFB, content transfer breakdown

REVIEW

DNS Lookup

7 ms

TCP Connect

238 ms

TLS Handshake

478 ms

Time to First Byte

961 ms

Total Time

961 ms

Connection waterfall

DNS Lookup 7 ms TCP Connect 238 ms TLS Handshake 478 ms Server Processing 238 ms Content Transfer 0 ms

TLS Certificate Expiry & Recommendations

56 days until leaf cert expires — 3 issues to address

REVIEW

Certificate validity

days left

0d 30d 60d 90d+

Recommended actions

Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy

A+

DNS Records

2 A records, 12 ms lookup

PASS

2 A records, 12 ms lookup

Resolves to 2 IPv4 address(es)

Got: 69.52.2.199, 69.52.13.199

No IPv6 (AAAA) records

6 nameserver(s) configured

Got: ns1.blackrock.com, ns2.blackrock.com, ns3.blackrock.com, ns4.blackrock.com, ns5.blackrock.com, ns6.blackrock.com

2 mail exchanger(s) configured

CAA records not checked

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

SPF record present in TXT

DNS resolution time: 12 ms

Got: 12 ms

A	69.52.2.199, 69.52.13.199
AAAA	—
CNAME	—
NS	ns1.blackrock.com, ns2.blackrock.com, ns3.blackrock.com, ns4.blackrock.com, ns5.blackrock.com, ns6.blackrock.com
MX	10 mxa-00162b01.gslb.pphosted.com 10 mxb-00162b01.gslb.pphosted.com
TXT	MS=ms38828697 _slack-challenge 00DcT000002htHp=1TBcT000000009h 00Df4000001SWZk=1TBQm00000006YU _9duhsauogp5bndkjabtkk5hacebwcch _mv3vc0paxjh9yetwpw0f8mhpxn3oksc LastPass-ty@2D8o^qLhx3B8CYS3h9G^q ZOOM_verify_FsOJw095SMyypVXs8wlBQQ ZOOM_verify_u51YW9QoScOHBUzIhbDgtg 0f1815be-65d1-4cbf-9fda-f331702621b5 18E2-B4A1-A780-E9D8-DE27-00BD-E084-6F52 2FE6-F3BB-EDF8-C58F-D2A4-8035-EDCF-AFB0 ibmid=50361729-4788-493b-babc-bc3e853dbcb7 docusign=a2dbcd74-2a86-49de-b3f6-0c5d794d9f70 docusign=b627a610-c752-4e1d-8de5-13f584944729 jamf-site-verification=vkr91zki8qtmKiMDd0tVgA canva-site-verification=2AxQuQbX2q8uqx6olltpBA astro-domain-verification=cmcccdx4h018d01gvk7ehyv61 amazonses:1HI9lAXiWsijpz4JNXwXz2gQaHC2wXzskAqDUj3RTg8= openai-domain-verification=dv-t8zlUHqPKw7yePArKHz0zNoz SPF v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all miro-verification=eceb7135b08ca0b6c70bfa3efeb5d7a66f1ea1bb mongodb-site-verification=ocUum2f1wfuEq7KWecCMvS3K0fWQLjaP facebook-domain-verification=jgst7ahvoqwagulxzu7zstebenl0nh lutron-domain-verification-c654xa=rAODDyHiWZEBSCvuKbUWqNGvt smartsheet-site-validation=DhO08aWdiKQgWHj44tKwLySIpkgYcV7V onetrust-domain-verification=325159a07083492d9c6b3d8986a51286 intercom-domain-validation=6c808e04-1e9c-4301-b565-60af75f09d6a 5c6b3a4f931e1cee133989872555093bf795d13585b18b9815abae5b154b34b2 google-site-verification=z1Aw-cih_E2FKOWotfSW8RUFHKmTIfB1VXHbV_J6bM8 passthrough-domain-verification=8038ac2a-be11-480b-a6e7-f5e44be2e61f censys-domain-verification=10dhRNVA4LQ-8TgjCYUytGfLfyvQy-1-JvrSVHn_RTmP h1-domain-verification=ktpxEvEwdQXJNsQuFywMvSrzMVyqLQXdXK4LzzPHBeUwK6Sa intersight=162938a7f29649663d27ccf1b81d58259224c4820fdd02fa3612e95c123f8ce7 duo_sso_verification=4Rjlata2GmnHS66E9wbFXjZGtssVPUzUaV5XE4YjDS726aDgVMQOkbZTdmU... duo_sso_verification=JnQQBWIliQ5FriK2DOPrGg16cJoZiSOfSLUCv02CQtvxU8NXyRChuWaXLem... QKhkBUJSEzOyADjEzY5RtC49rqKCWcl+c1NvPPP3l0+9gSO+nqR+Np2Zs2cpzzvf7BLyScIteZHHljt5... drift-domain-verification=f5a2bbc86ce9fdecab7db01d6dc30ec356433bbc94c69811bf448b... atlassian-domain-verification=/7tbKaFSdZhcOO/GdUR3mRtktoygLTnQQB/iYPocT7G/NaOQ2q... atlassian-domain-verification=382cypeoFrrqy4R9MkRopItq5Cbixu5CS3S0UGcjZHHS6Rf6Lq... atlassian-domain-verification=VDrpZs9FnE3/l/dJxRC+0mkjndLafqB2r3l/ztET32a5TZyDfa... atlassian-domain-verification=WJ8MzekF2peo6fDKQYCdEEjA3lSWMu4d9RzmwTIy57ZQgyvGhi... atlassian-domain-verification=gKyJvs5LHKSU2cnhoDphrlXuha6402LZ6H5FuWqZQ5XyBmqxQ2... atlassian-domain-verification=gpaZ6yD5DHLQQ/PnbDYc6mniHJSy0NQVRJpoOaOi35f1NPuZ10... atlassian-domain-verification=hZorrHGXbuJUq3Jvcxg5W1DmpbQMDNbxaijAJjD8a9ysCLigs0... figma-domain-verification=51041a35bcb8b65a438d169362eb0ec479cd7c25e3f5e5b1c7530f... postman-domain-verification=1f2166c59f809215f1f2302acee74f2135a8be53fced04f4e973...
CAA	Lookup not available with standard resolver

Resolved in 12 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+

Crawlability

robots.txt present, sitemap with 63 URLs

PASS

robots.txt present, sitemap with 63 URLs

robots.txt is present

Got: 5506 bytes

sitemap.xml is present

sitemap.xml is valid XML

sitemap.xml contains 63 entries

robots.txt references sitemap

robots.txt 200 OK

Size 5506 B Sitemaps referenced 81 User-agents Brightbot 1.0, * Blocking No — crawling allowed

User-agent: Brightbot 1.0
Disallow: /

User-agent: *

Disallow: /au-institutional-iframe*
Disallow: /pensions-planning-iframe*
Disallow: /capstone*

Disallow: /*.dl$

Disallow: /*sign-on.oauth
Disallow: /*sign-on.saml
Disallow: /*sign-on-popup.saml
Disallow: /user-platform/
Disallow: /userplatform/
Disallow: /search/
Disallow: /*?truepdf*
Disallow: /*?norepdf*
  
Disallow: /X/
Disallow: /compliance/
  
Disallow: /ref/docs

Disallow: /api-tester/

Disallow: /ee$
Disallow: /gr$
Disallow: /is$
Disallow: /ie$
Disallow: /lv$
Disallow: /li$
Disallow: /lt$
Disallow: /mt$
Disallow: /cy$
Disallow: /gg$
Disallow: /gi$
Disallow: /im$
Disallow: /je$
Disallow: /bg$
Disallow: /hr$
Disallow: /ro$
Disallow: /si$

Disallow: /ee/
Disallow: /gr/
Disallow: /is/
Disallow: /ie/
Disallow: /lv/
Disallow: /li/
Disallow: /lt/
Disallow: /mt/
Disallow: /cy/
Disallow: /gg/
Disallow: /gi/
Disallow: /im/
Disallow: /je/
Disallow: /bg/
Disallow: /hr/
Disallow: /ro/
Disallow: /si/

Disallow: /us/financial-professionals/*.pdf$

SITEMAP: https://www.blackrock.com/ae/sitemap.xml
SITEMAP: https://www.blackrock.com/ae/product-sitemap.xml
SITEMAP: https://www.blackrock.com/aladdin/sitemap.xml
SITEMAP: https://www.blackrock.com/americas-offshore/sitemap.xml
SITEMAP: https://www.blackrock.com/americas-offshore/product-sitemap.xml
SITEMAP: https://www.blackrock.com/at/sitemap.xml
SITEMAP: https://www.blackrock.com/at/product-sitemap.xml
SITEMAP: https://www.blackrock.com/au/sitemap.xml
SITEMAP: https://www.blackrock.com/au/product-sitemap.xml
SITEMAP: https://www.blackrock.com/be/sitemap.xml
SITEMAP: https://www.blackrock.com/be/product-sitemap.xml
SITEMAP: https://www.blackrock.com/br/sitemap.xml
SITEMAP: https://www.blackrock.com/br/product-sitemap.xml
SITEMAP: https://www.blackrock.com/ca/sitemap.xml
SITEMAP: https://www.blackrock.com/ca/product-sitemap.xml
SITEMAP: https://www.blackrock.com/cash/sitemap.xml
SITEMAP: https://www.blackrock.com/cash/product-sitemap.xml
SITEMAP: https://www.blackrock.com/ch/sitemap.xml
SITEMAP: https://www.blackrock.com/ch/product-sitemap.xml
SITEMAP: https://www.blackrock.com/cl/sitemap.xml
SITEMAP: https://www.blackrock.com/cl/product-sitemap.xml
SITEMAP: https://www.blackrock.com/cn/sitemap.xml
SITEMAP: https://www.blackrock.com/cn/product-sitemap.xml
SITEMAP: https://www.blackrock.com/co/sitemap.xml
SITEMAP: https://www.blackrock.com/co/product-sitemap.xml
SITEMAP: https://www.blackrock.com/corporate/sitemap.xml
SITEMAP: https://www.blackrock.com/cz/sitemap.xml
SITEMAP: https://www.blackrock.com/cz/product-sitemap.xml
SITEMAP: https://www.blackrock.com/de/sitemap.xml
SITEMAP: https://www.blackrock.com/de/product-sitemap.xml
SITEMAP: https://www.blackrock.com/dk/sitemap.xml
SITEMAP: https://www.blackrock.com/dk/product-sitemap.xml
SITEMAP: https://www.blackrock.com/es/sitemap.xml
SITEMAP: https://www.blackrock.com/es/product-sitemap.xml
SITEMAP: https://www.blackrock.com/fi/sitemap.xml
SITEMAP: https://www.blackrock.com/fi/product-sitemap.xml
SITEMAP: https://www.blackrock.com/financial-markets-advisory/sitemap.xml
SITEMAP: https://www.blackrock.com/fr/sitemap.xml
SITEMAP: https://www.blackrock.com/fr/product-sitemap.xml
SITEMAP: https://www.blackrock.com/hk/sitemap.xml
SITEMAP: https://www.blackrock.com/hk/product-sitemap.xml
SITEMAP: https://www.blackrock.com/hu/sitemap.xml
SITEMAP: https://www.blackrock.com/hu/product-sitemap.xml
SITEMAP: https://www.blackrock.com/il/sitemap.xml
SITEMAP: https://www.blackrock.com/il/product-sitemap.xml
SITEMAP: https://www.blackrock.com/institutions/sitemap.xml
SITEMAP: https://www.blackrock.com/it/sitemap.xml
SITEMAP: https://www.blackrock.com/it/product-sitemap.xml
SITEMAP: https://www.blackrock.com/jp/sitemap.xml
SITEMAP: https://www.blackrock.com/jp/product-sitemap.xml
SITEMAP: https://www.blackrock.com/kiid/sitemap.xml
SITEMAP: https://www.blackrock.com/kr/sitemap.xml
SITEMAP: https://www.blackrock.com/lu/sitemap.xml
SITEMAP: https://www.blackrock.com/lu/product-sitemap.xml
SITEMAP: https://www.blackrock.com/mx/sitemap.xml
SITEMAP: https://www.blackrock.com/mx/product-sitemap.xml
SITEMAP: https://www.blackrock.com/nl/sitemap.xml
SITEMAP: https://www.blackrock.com/nl/product-sitemap.xml
SITEMAP: https://www.blackrock.com/no/sitemap.xml
SITEMAP: https://www.blackrock.com/no/product-sitemap.xml
SITEMAP: https://www.blackrock.com/pl/sitemap.xml
SITEMAP: https://www.blackrock.com/pl/product-sitemap.xml
SITEMAP: https://www.blackrock.com/pt/sitemap.xml
SITEMAP: https://www.blackrock.com/pt/product-sitemap.xml
SITEMAP: https://www.blackrock.com/sa/sitemap.xml
SITEMAP: https://www.blackrock.com/se/sitemap.xml
SITEMAP: https://www.blackrock.com/se/product-sitemap.xml
SITEMAP: https://www.blackrock.com/sg/sitemap.xml
SITEMAP: https://www.blackrock.com/sg/product-sitemap.xml
SITEMAP: https://www.blackrock.com/sk/sitemap.xml
SITEMAP: https://www.blackrock.com/sk/product-sitemap.xml
SITEMAP: https://www.blackrock.com/tw/sitemap.xml
SITEMAP: https://www.blackrock.com/tw/product-sitemap.xml
SITEMAP: https://www.blackrock.com/uk/sitemap.xml
SITEMAP: https://www.blackrock.com/uk/product-sitemap.xml
SITEMAP: https://www.blackrock.com/us/individual/sitemap.xml
SITEMAP: https://www.blackrock.com/us/individual/product-sitemap.xml
SITEMAP: https://www.blackrock.com/us/financial-professionals/sitemap.xml
SITEMAP: https://www.blackrock.com/us/financial-professionals/product-sitemap.xml
SITEMAP: https://www.blackrock.com/za/sitemap.xml
SITEMAP: https://www.blackrock.com/za/product-sitemap.xml

sitemap.xml 200 OK

Type URL Set URLs 63 entries Valid XML Yes

Sample URLs:

A+

Domain Intelligence

blackrock.com — via CSC Corporate Domains, Inc., 28 years, 9 months old, hosted on BLACKROCK-FINANCIAL-MANAGEMENT-2 - BlackRock Financial Management, Inc., US

PASS

blackrock.com — via CSC Corporate Domains, Inc., 28 years, 9 months old, hosted on BLACKROCK-FINANCIAL-MANAGEMENT-2 - BlackRock Financial Management, Inc., US

Domain registered until Nov 25, 2026 (7 months remaining)

DNSSEC is enabled

Registrar: CSC Corporate Domains, Inc.

Registrar lock is NOT enabled

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Hosting: BLACKROCK-FINANCIAL-MANAGEMENT-2 - BlackRock Financial Management, Inc., US

Got: AS31747

Domain expiry

162 days

November 25, 2026

SSL certificate

56 days

Issued by DigiCert Inc

Domain age

28 years, 9 months

Registered November 26, 1997

DNSSEC

Enabled

Protects against DNS spoofing

Hosting

BLACKROCK-FINANCIAL-MANAGEMENT-2 - BlackRock Financial Management, Inc., US

ASN AS31747

69.52.2.199

Registrar

CSC Corporate Domains, Inc.

Unlocked 6 NS records

Expiry timeline

Today

+1 year

Domain expiry SSL expiry Danger zone (≤30 days)

Recommended actions

Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers

Registrar CSC Corporate Domains, Inc.

Created November 26, 1997 (28 years, 9 months ago)

Expires November 25, 2026 (7 months)

Last Updated November 21, 2025

Name Servers ns1.blackrock.com, ns2.blackrock.com, ns3.blackrock.com, ns4.blackrock.com, ns5.blackrock.com, ns6.blackrock.com

DNSSEC Enabled

Hosting

IP Address 69.52.2.199

ASN AS31747 (BLACKROCK-FINANCIAL-MANAGEMENT-2 - BlackRock Financial Management, Inc., US)

Provider BLACKROCK-FINANCIAL-MANAGEMENT-2 - BlackRock Financial Management, Inc., US

Data source: rdap (1.0s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.