https://fr.de
Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.SCORE
75
GRADE
C
FIX
2
REVIEW
2
PASS
5
INFO
0
Probed from Singapore, Singapore
301 Moved Permanently
Checks
95 PASS 2 REVIEW 2 FIX
DRedirect ChainAction2 redirect(s), 4645 ms totalFIX
Redirect Chain
Action2 redirect(s), 4645 ms total
2 redirect(s), 4645 ms total
Warning::
2 redirects before reaching final URL
Each redirect adds latency. Try to minimize the chain to 1 hop.
Info::
HTTP to HTTPS redirect present
Info::
WWW normalization redirect
Warning::
2-hop chain could be reduced to 1 hop
Redirect directly from https://fr.de to https://www.fr.de/
Warning::
Redirect overhead: 4645 ms total
Got: 4645 ms
https://fr.de
3558 ms · HTTP/1.1
301
http://www.fr.de/
352 ms · HTTP/1.1
301
https://www.fr.de/
734 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://fr.de | 301 | 3558 ms | HTTP/1.1 | nginx |
| 2 | http://www.fr.de/ | 301 | 352 ms | HTTP/1.1 | nginx |
| 3 | https://www.fr.de/ | 200 | 734 ms | HTTP/1.1 | nginx |
See the visual redirect chain in the HTTP Probe tab →
Each redirect adds latency. Try to minimize the chain to 1 hop.
Why this matters
Redirect chain — each hop adds latency; combine into one redirect where possible.
Source: Google Search Central / web.dev
Redirect directly from https://fr.de to https://www.fr.de/
Why this matters
Redirect chain could be flattened to one hop — server config tweak removes intermediate latency.
Source: web.dev
DURL VariantsActionwww/non-www, trailing slash, HTTP→HTTPSFIX
URL Variants
Actionwww/non-www, trailing slash, HTTP→HTTPS
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Critical::
HTTP version does not redirect to HTTPS
Got: HTTP 301 Expected: 301 redirect to HTTPS
www / non-www
200https://www.fr.de/
200https://fr.de/
Inconsistent — duplicate content risk
HTTP → HTTPS
301http://fr.de/ → http://www.fr.de/
HTTP version does not redirect to HTTPS
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 Readiness
ActionNo IPv6 support
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
Why this matters
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BTLS Certificate Expiry & Recommendations58 days until leaf cert expires — 3 issues to addressREVIEW
TLS Certificate Expiry & Recommendations
58 days until leaf cert expires — 3 issues to address
Certificate validity
58
days left
0d 30d 60d 90d+
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records1 A records, 7 ms lookupPASS
DNS Records
1 A records, 7 ms lookup
1 A records, 7 ms lookup
Info::
Resolves to 1 IPv4 address(es)
Got: 91.234.30.212
Info::
Single A record — no DNS redundancy
Multiple A records provide failover if one server goes down.
Info::
No IPv6 (AAAA) records
Info::
2 nameserver(s) configured
Got: ns27.domaincontrol.com, ns28.domaincontrol.com
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 7 ms
Got: 7 ms
| A | 91.234.30.212 |
| AAAA | — |
| CNAME | — |
| NS | ns27.domaincontrol.com, ns28.domaincontrol.com |
| MX | 10 fr-de.mail.protection.outlook.com |
| TXT | google-site-verification=GjSuv0jCOiSWBawnKX9s_fhkIJdiSM99PKjVD-XAD4g MS=ms46433049 SPF v=spf1 include:spf.protection.outlook.com include:spf.ippen-media.de include:ffm... _globalsign-domain-verification=1FZhi2xgAaUAZkTSS5QUKLByOQMaSVn0bIcRBW1fjz facebook-domain-verification=ytl0a5j1tmvxpbgivd32ua4c8um10x google-site-verification=FLxwuEDmGwfThx5ruE_w3TAFHqE2WmoxuNdf73MTky4 it2XSVECjYZ0J/suCp4j4xLLyBUTrdlWshzpeV/snKfQZz++mo7vArYauMfUi0zq5NBAVPv0WZpPhuMh... |
| CAA | Lookup not available with standard resolver |
Resolved in 7 ms
Multiple A records provide failover if one server goes down.
Why this matters
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Why this matters
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
A+Crawlabilityrobots.txt present, sitemap with 477 URLsPASS
Crawlability
robots.txt present, sitemap with 477 URLs
robots.txt present, sitemap with 477 URLs
Info::
robots.txt is present
Got: 7002 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 477 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 7002 B Sitemaps referenced 1 User-agents Opebot-v, AndersPinkBot, contxbot, Magpie-crawler, YaK, Ai2Bot-Dolma, FDL Stats Bot, um-IC, ia_archiver-web.archive.org, Internet Archive, laion-huggingface-processor, SBIntuitionsBot, 008, Caliperbot, Readable, MixrankBot, heritrix, AhrefsBot, Barkrowler, Moz rogerbot, Prerender, xovi, Nicecrawler, MetaJobBot, linkchecker.pro, MarketGoo, SemrushBotBacklinks, SiteAuditBot, HubSpot, slickstream, Anthropic-ai, CensysInspect, Diffbot, Clickagy Intelligence Bot v2, um-LN, SiteCheckerBotCrawler, LightspeedSystemsCrawler, TTD-Content, GPTBot, Cloudtrellis, DotBot, Senutobot, SeobilityBot, ev-crawler, EtaoSpider, ICC-Crawler, Timpibot, rogerbot-crawler, BitSightBot, ds9, Keydrop.io, GrokBot, CaliberBot, ia_archiver, websauger, EzoicBot-Nicheiq, SlickBot, Teleport, AlibabaBot, SeekportBot, ActiveComply, channable, Macrobondbot, KrawlerBot, MetaInspector, SemrushBot-CT, Awario, CloudflareBrowserRenderingCrawler, BigUpDataBot, Buck, Pandalytics, LCC, James BOT, MegaIndex.ru, sitesnagger, cXensebot, webspidermount, Authory, bnf.fr_bot, iaskspider, LinksIndexerBot, Seekport, BomboraBot, webcapture, StatsDroneBot, Turnitin, WinHTTrack, Cocolyzebot, YaDirectFetcher, imageSpider, meta-externalagent, VelenPublicWebCrawler, SemrushBot-BA, XY-Archive-Compliance, DomainStatsBot, LinkCheck by Siteimprove, ContextualBot, IABot, HTTrack, aa, cludo.com, SEOkicks, TeleportPro, netEstate Imprint Crawler, contentking, SEOlizer, Huckabot, um-FC, Peer39_crawler/1.0, Nutch, BLEXBot, Clearscopebot, NitroBot, Pro Sitemaps, Cotoyogi, Applebot-Extended, ImagesiftBot, MBCrawler, DataForSEO Bot, Innguma, MedialogiaBot, omgili, PerplexityBot, Cincraw, Arquivo-web-crawler, BrightEdge Crawler, cognitiveSEO Crawler, img2dataset, SemrushBot-SI, EcoVadisSustainabilityBot, EpivozCrawler, vorebot, ClaudeBot, DataForSeoBot, Sidetrade indexer bot, Zoombot, aiHitBot, SentiBot, Peer39_crawler, Bytespider, HelloworkJobPostingBot, XoviOnpageCrawler, GrokAI, A360-Search, TrendsmapResolver, Attracta, YextBot, mirrorweb, Cxense, SEBot-WA, seo4ajax.com, page-preview-tool, webzio-extended, Offline Explorer, Moz dotbot, Datenbank Crawler, SemrushBot-SA, netEstate NE Crawler, FacebookBot, Kangaroo Bot, Huckabuy Bot, Missinglettr Bot, Owler, Amazonbot, Dataprovider.com, RevvimGort, serpstatbot, SiteCheck-sitecrawl, BrightEdge Bot, YouBot, dcrawl, OpenindexSpider, Netcraft, Twingly, AwarioRssBot, Omgilibot, Nitro-, SemrushBot-OCOB, ArchiveBot, TurnitinBot, Baidu-YunGuanCe, ServerHunterSpider, Dragonbot, webzip, SearchAtlas Bot, Blackboard, ZoominfoBot, SERankingBacklinksBot, woorankreview, Automattic Analytics Crawler, TweetmemeBot, Claude-Web, Scrapy, RSiteAuditor, MediaMonitoringBot, Mediatoolkitbot, NetSeer crawler, HTTrack 3.0, ClarityBot, online-webceo-bot, AwarioBot, panscient.com, cohere-training-data-crawler, AwarioSmartBot, Yext Inc, Sitebulb, factset_spyderbot, archive.org_bot, ChatGLM-Spider, Convermax, seo-audit-check-bot, CheckMarkNetwork, Grok, WebCapture 2.0, CCBot, SearchmetricsBot, Siteimprove Crawl, GoogleOther, LinkChecker Bot, StatusNestBacklinkSpider, linkfluence, bne.es_bot, webwhacker, MuckRack, xAI, CloudVertexBot, linkdexbot, parse.ly scraper, netarkivindsamling, Spider, seo4ajax, Mediavine Medatada Parser, bl.uk_lddc_bot, hypestat, SMTBot, special_archiver, Cohere-ai, Google-Extended, PanguBot, newspaper, Netvibes, webzio, *, Potions, MJ12bot, sistrix, LinkWalker, Twingly Recon-Sjostrom Blocking No — crawling allowed
# robots.txt www.fr.de
# Legal notice: www.fr.de expressly reserves the right to use its content for commercial text and data mining (§ 44b UrhG).
# The use of robots or other automated means to access www.fr.de or collect or mine data without the express permission of www.fr.de is strictly prohibited.
User-agent: *
Disallow: /sub/paywall/js/
Disallow: /lightweight-ajax
Disallow: /suche/
Disallow: /test/
Disallow: /fdn/bootstrap/
Disallow: /bi/bootstrap/
Disallow: /bi/doop/
Disallow: /bi/dev/
Disallow: /sso/
Disallow: /west/assets/common/js/fallback.js
Sitemap: https://www.fr.de/news.xml
# AI
User-agent: Amazonbot
User-agent: AlibabaBot
User-agent: Ai2Bot-Dolma
User-agent: Applebot-Extended
User-agent: Bytespider
User-agent: CCBot
User-agent: ChatGLM-Spider
User-agent: ClaudeBot
User-agent: Claude-Web
User-agent: CloudVertexBot
User-agent: cohere-training-data-crawler
User-agent: Cotoyogi
User-agent: Datenbank Crawler
User-agent: Diffbot
User-agent: FacebookBot
User-agent: Google-Extended
User-agent: GoogleOther
User-agent: GPTBot
User-agent: ICC-Crawler
User-agent: imageSpider
User-agent: Kangaroo Bot
User-agent: laion-huggingface-processor
User-agent: LCC
User-agent: meta-externalagent
User-agent: netEstate Imprint Crawler
User-agent: omgili
User-agent: PanguBot
User-agent: PerplexityBot
User-agent: SBIntuitionsBot
User-agent: Spider
User-agent: Timpibot
User-agent: VelenPublicWebCrawler
User-agent: webzio-extended
User-agent: YouBot
Allow: /ueber-uns/
Disallow: /
# scraper
User-agent: 008
User-agent: Dataprovider.com
User-agent: dcrawl
User-agent: HelloworkJobPostingBot
User-agent: HTTrack
User-agent: HTTrack 3.0
User-agent: KrawlerBot
User-agent: MetaInspector
User-agent: MetaJobBot
User-agent: newspaper
User-agent: Nutch
User-agent: Offline Explorer
User-agent: OpenindexSpider
User-agent: Potions
User-agent: Scrapy
User-agent: ServerHunterSpider
User-agent: StatsDroneBot
User-agent: CloudflareBrowserRenderingCrawler
Disallow: /
# seo tools
User-agent: aa
User-agent: AhrefsBot
User-agent: Attracta
User-agent: Barkrowler
User-agent: BrightEdge Crawler
User-agent: BLEXBot
User-agent: CaliberBot
User-agent: Caliperbot
User-agent: ClarityBot
User-agent: Clearscopebot
User-agent: Cloudtrellis
User-agent: cludo.com
User-agent: Cocolyzebot
User-agent: cognitiveSEO Crawler
User-agent: contentking
User-agent: Convermax
User-agent: Cxense
User-agent: DataForSeoBot
User-agent: DataForSEO Bot
User-agent: DomainStatsBot
User-agent: DotBot
User-agent: Dragonbot
User-agent: Huckabot
User-agent: Huckabuy Bot
User-agent: hypestat
User-agent: iaskspider
User-agent: img2dataset
User-agent: James BOT
User-agent: LinkCheck by Siteimprove
User-agent: LinkChecker Bot
User-agent: linkchecker.pro
User-agent: linkdexbot
User-agent: LinksIndexerBot
User-agent: MarketGoo
User-agent: MBCrawler
User-agent: MegaIndex.ru
User-agent: MJ12bot
User-agent: Moz dotbot
User-agent: Moz rogerbot
User-agent: Nitro-
User-agent: NitroBot
User-agent: online-webceo-bot
User-agent: Prerender
User-agent: Pro Sitemaps
User-agent: Readable
User-agent: RevvimGort
User-agent: rogerbot-crawler
User-agent: RSiteAuditor
User-agent: SearchAtlas Bot
User-agent: SEBot-WA
User-agent: SearchmetricsBot
User-agent: SemrushBot-BA
User-agent: SemrushBot-CT
User-agent: SemrushBot-OCOB
User-agent: SemrushBot-SA
User-agent: SemrushBot-SI
User-agent: SemrushBotBacklinks
User-agent: Senutobot
User-agent: Sidetrade indexer bot
User-agent: seo-audit-check-bot
User-agent: seo4ajax
User-agent: seo4ajax.com
User-agent: SeobilityBot
User-agent: SEOkicks
User-agent: SEOlizer
User-agent: SERankingBacklinksBot
User-agent: serpstatbot
User-agent: SiteAuditBot
User-agent: Sitebulb
User-agent: SiteCheck-sitecrawl
User-agent: SiteCheckerBotCrawler
User-agent: Siteimprove Crawl
User-agent: StatusNestBacklinkSpider
User-agent: Seekport
User-agent: SeekportBot
User-agent: sistrix
User-agent: woorankreview
User-agent: xovi
User-agent: XoviOnpageCrawler
User-agent: Zoombot
Disallow: /
# Intelligence Gatherer
User-agent: A360-Search
User-agent: ActiveComply
User-agent: aiHitBot
User-agent: AndersPinkBot
User-agent: ArchiveBot
User-agent: Automattic Analytics Crawler
User-agent: Awario
User-agent: AwarioBot
User-agent: AwarioSmartBot
User-agent: BigUpDataBot
User-agent: BitSightBot
User-agent: Blackboard
User-agent: BomboraBot
User-agent: BrightEdge Bot
User-agent: Buck
User-agent: channable
User-agent: CheckMarkNetwork
User-agent: Cincraw
User-agent: Clickagy Intelligence Bot v2
User-agent: ContextualBot
User-agent: contxbot
User-agent: cXensebot
User-agent: ds9
User-agent: EcoVadisSustainabilityBot
User-agent: EpivozCrawler
User-agent: ev-crawler
User-agent: EzoicBot-Nicheiq
User-agent: factset_spyderbot
User-agent: FDL Stats Bot
User-agent: HubSpot
User-agent: Innguma
User-agent: LightspeedSystemsCrawler
User-agent: linkfluence
User-agent: LinkWalker
User-agent: Macrobondbot
User-agent: Magpie-crawler
User-agent: MedialogiaBot
User-agent: MediaMonitoringBot
User-agent: Mediatoolkitbot
User-agent: Mediavine Medatada Parser
User-agent: Missinglettr Bot
User-agent: MixrankBot
User-agent: MuckRack
User-agent: Netcraft
User-agent: netEstate NE Crawler
User-agent: NetSeer crawler
User-agent: Netvibes
User-agent: Owler
User-agent: page-preview-tool
User-agent: Pandalytics
User-agent: panscient.com
User-agent: parse.ly scraper
User-agent: SentiBot
User-agent: SlickBot
User-agent: slickstream
User-agent: SMTBot
User-agent: TrendsmapResolver
User-agent: TTD-Content
User-agent: TurnitinBot
User-agent: TweetmemeBot
User-agent: Twingly
User-agent: Twingly Recon-Sjostrom
User-agent: um-FC
User-agent: um-IC
User-agent: um-LN
User-agent: webspidermount
User-agent: webzio
User-agent: YaDirectFetcher
User-agent: YaK
User-agent: Yext Inc
User-agent: YextBot
User-agent: ZoominfoBot
User-agent: ImagesiftBot
Allow: /ueber-uns/
Disallow: /
# Archiver
User-agent: archive.org_bot
User-agent: Arquivo-web-crawler
User-agent: Authory
User-agent: bl.uk_lddc_bot
User-agent: bne.es_bot
User-agent: bnf.fr_bot
User-agent: heritrix
User-agent: ia_archiver
User-agent: ia_archiver-web.archive.org
User-agent: IABot
User-agent: Internet Archive
User-agent: mirrorweb
User-agent: netarkivindsamling
User-agent: Nicecrawler
User-agent: special_archiver
User-agent: Turnitin
User-agent: XY-Archive-Compliance
Allow: /ueber-uns/
Disallow: /
# undocumented / uncategorized
User-agent: Anthropic-ai
User-agent: AwarioRssBot
User-agent: AwarioSmartBot
User-agent: Baidu-YunGuanCe
User-agent: Claude-Web
User-agent: Cohere-ai
User-agent: EtaoSpider
User-agent: Omgilibot
User-agent: Opebot-v
User-agent: Peer39_crawler
User-agent: Peer39_crawler/1.0
User-agent: Keydrop.io
User-agent: CensysInspect
User-agent: xAI
User-agent: Grok
User-agent: GrokBot
User-agent: GrokAI
User-agent: websauger
User-agent: webwhacker
User-agent: webzip
User-agent: webcapture
User-agent: WebCapture 2.0
User-agent: Teleport
User-agent: TeleportPro
User-agent: sitesnagger
User-agent: vorebot
User-agent: WinHTTrack
Disallow: /
sitemap.xml 200 OK
Type URL Set URLs 477 entries Valid XML Yes
Sample URLs:
- https://www.fr.de/politik/iran-krieg-news-revolutionsgarden-entern-schiffe-in-strasse-von-hormus-zr-94274278.html
- https://www.fr.de/politik/die-50-prozent-klippe-trumps-starke-zustimmungswerte-unter-republikanern-broeckeln-zr-94274479.html
- https://www.fr.de/politik/nuklearer-staub-was-ist-das-und-kann-trump-ihn-tatsaechlich-aus-dem-iran-herausholen-zr-94274466.html
- https://www.fr.de/sport/fussball/fahrlaessig-und-verantwortungslos-union-trainerin-kontert-kritik-von-felix-magath-zr-94274450.html
- https://www.fr.de/politik/meloni-wischt-putin-verbuendeten-ab-der-sie-als-faschistischen-abschaum-beschimpfte-zr-94274429.html
A+Domain Intelligencefr.de — hosted on NMM-AS D - 02742 Friedersdorf Hauptstrasse 68, DEPASS
Domain Intelligence
fr.de — hosted on NMM-AS D - 02742 Friedersdorf Hauptstrasse 68, DE
fr.de — hosted on NMM-AS D - 02742 Friedersdorf Hauptstrasse 68, DE
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: NMM-AS D - 02742 Friedersdorf Hauptstrasse 68, DE
Got: AS34788
Domain expiry
Unknown
SSL certificate
58 days
Issued by Let's Encrypt
Domain age
Unknown
DNSSEC
Status unknown
Protects against DNS spoofing
Hosting
NMM-AS D - 02742 Friedersdorf Hauptstrasse 68, DE
ASN AS34788
91.234.30.212
Registrar
Registrar unknown
Unlocked Name servers unknown
Expiry timeline
Today
+1 year
SSL expiry Danger zone (≤30 days)
Recommended actions
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar
Hosting
IP Address 91.234.30.212
ASN AS34788 (NMM-AS D - 02742 Friedersdorf Hauptstrasse 68, DE)
Provider NMM-AS D - 02742 Friedersdorf Hauptstrasse 68, DE
Data source: whois (1.5s)
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Why this matters
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice
AHTTP Probe TimingTotal 555 ms — DNS, TCP, TLS, TTFB, content transfer breakdownPASS
HTTP Probe Timing
Total 555 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
5 msTCP Connect TCP Connect — time to establish a TCP connection to the server.
181 msTLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
184 msTime to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
556 msTotal Time Total request time from DNS lookup through full response.
556 msConnection waterfall
DNS Lookup 5 ms TCP Connect 181 ms TLS Handshake 184 ms Server Processing 186 ms Content Transfer 0 ms
ACDN & DeliveryVarnish (MISS)PASS
CDN & Delivery
Varnish (MISS)
Varnish (MISS)
Info::
Site is served via Varnish CDN
Got: via: 1.1 varnish-v4
Info::
CDN cache status: MISS
CDN Detected: Varnish
Provider Varnish Cache Status MISS Evidence via: 1.1 varnish-v4
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.