Skip to content
https://ipsos.com

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
87
GRADE
B
FIX
0
REVIEW
4
PASS
5
INFO
0
Probed from Madrid, Spain
301 Moved Permanently
Checks
9
5 PASS 4 REVIEW
B
Redirect Chain
2 redirect(s), 414 ms total
REVIEW
2 redirect(s), 414 ms total
Warning::
2 redirects before reaching final URL
Each redirect adds latency. Try to minimize the chain to 1 hop.
Info::
WWW normalization redirect

https://ipsos.com

61 ms · HTTP/1.1

301

https://www.ipsos.com/

213 ms · HTTP/1.1

301

https://www.ipsos.com/en

140 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://ipsos.com30161 msHTTP/1.1cloudflare
2https://www.ipsos.com/301213 msHTTP/1.1cloudflare
3https://www.ipsos.com/en200140 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

Each redirect adds latency. Try to minimize the chain to 1 hop.

Why this matters

Redirect chain — each hop adds latency; combine into one redirect where possible.

Source: Google Search Central / web.dev

C
Crawlability
Action
robots.txt present, sitemap with 0 URLs
REVIEW
robots.txt present, sitemap with 0 URLs
Info::
robots.txt is present
Got: 10240 bytes
Info::
sitemap.xml is present
Warning::
sitemap.xml contains invalid XML
Search engines may not be able to parse the sitemap. Fix XML validation errors.
Warning::
sitemap.xml is empty — no URLs found
An empty sitemap provides no value. Add <url> entries for your pages.
Info::
robots.txt does not reference a sitemap
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.

Search engines may not be able to parse the sitemap. Fix XML validation errors.

Why this matters

An unparseable sitemap is silently ignored by Google — the URLs it advertises are never queued for crawl.

Learn more ▾

Google's sitemap parser is strict about XML validity. A single unescaped `&` or unclosed tag invalidates the whole file. Run your sitemap through a validator (Search Console's Sitemaps report flags it) and fix the offending entry. Most generators escape correctly; mistakes usually come from manually-written entries.

Source: sitemaps.org / Google Search Central

An empty sitemap provides no value. Add <url> entries for your pages.

Why this matters

An empty sitemap signals 'no content to index' to Google — actively harmful versus having no sitemap at all.

Learn more ▾

Google compares URLs in the sitemap against URLs it has crawled. An empty sitemap on a site with thousands of pages signals abandonment. Either populate it correctly (most CMSes auto-generate) or delete the file and let Google crawl normally.

Source: Google Search Central / sitemaps.org

Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.

Why this matters

robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.

Source: sitemaps.org

robots.txt 200 OK
Size 10240 B Sitemaps referenced 0 User-agents Blocking No — crawling allowed
  <!DOCTYPE html>
<html lang="en" dir="ltr" class="karla-site-font merriweather-site-font ltr" prefix="og: https://ogp.me/ns#">
  <head>
    <meta charset="utf-8" />
<noscript><style>form.antibot * :not(.antibot-message) { display: none !important; }</style>
</noscript><link rel="preconnect" href="https://fonts.googleapis.com" />
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin="anonymous" />
<link href="https://fonts.googleapis.com/css2?family=Barlow+Semi+Condensed:ital,wght@0,400;0,500;0,600;0,700;1,400;1,500;1,600;1,700&amp;family=Roboto+Condensed:wght@400;500;700&amp;family=Noto+Sans+JP:wght@400;500;700&amp;family=Noto+Sans+KR:wght@400;500;700&amp;family=Noto+Sans+SC:wght@400;500;700&amp;family=Noto+Sans+TC:wght@400;500;700&amp;display=swap" rel="stylesheet" />
<meta name="description" content="Global leader in market research, Ipsos delivers reliable information and true understanding of Society, Markets and People. Our solutions use data from surveys, polls, social media or qualitative, and provide actionable insights into the experience and opinions of citizens, consumers, patients, customers, employees." />
<link rel="shortlink" href="https://www.ipsos.com/en" />
<meta name="referrer" content="no-referrer" />
<meta property="og:type" content="article" />
<meta property="og:url" content="https://www.ipsos.com/en/homepage" />
<meta property="og:title" content="Ipsos" />
<meta property="og:description" content="Ipsos | Global Market Research and Public Opinion specialist." />
<meta property="og:image" content="https://www.ipsos.com/themes/custom/ipsos/logo.svg" />
<meta name="MobileOptimized" content="width" />
<meta name="HandheldFriendly" content="true" />
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
<link rel="alternate" hreflang="x-default" href="https://www.ipsos.com/en" />
<link rel="alternate" hreflang="en" href="https://www.ipsos.com/en" />
<link rel="alternate" hreflang="sq-al" href="https://www.ipsos.com/sq-al" />
<link rel="alternate" hreflang="sq-xk" href="https://www.ipsos.com/sq-xk" />
<link rel="alternate" hreflang="sq-mk" href="https://www.ipsos.com/sq-mk" />
<link rel="alternate" hreflang="bs-ba" href="https://www.ipsos.com/bs-ba" />
<link rel="alternate" hreflang="bg-bg" href="https://www.ipsos.com/bg-bg" />
<link rel="alternate" hreflang="zh-cn" href="https://www.ipsos.com/zh-cn" />
<link rel="alternate" hreflang="hr-hr" href="https://www.ipsos.com/hr-hr" />
<link rel="alternate" hreflang="cs-cz" href="https://www.ipsos.com/cs-cz" />
<link rel="alternate" hreflang="da-dk" href="https://www.ipsos.com/da-dk" />
<link rel="alternate" hreflang="de-at" href="https://www.ipsos.com/de-at" />
<link rel="alternate" hreflang="de-de" href="https://www.ipsos.com/de-de" />
<link rel="alternate" hreflang="de-ch" href="https://www.ipsos.com/de-ch" />
<link rel="alternate" hreflang="nl-nl" href="https://www.ipsos.com/nl-nl" />
<link rel="alternate" hreflang="en-au" href="https://www.ipsos.com/en-au" />
<link rel="alternate" hreflang="en-bh" href="https://www.ipsos.com/en-bh" />
<link rel="alternate" hreflang="en-be" href="https://www.ipsos.com/en-be" />
<link rel="alternate" hreflang="fr-be" href="https://www.ipsos.com/en-be" />
<link rel="alternate" hreflang="nl-be" href="https://www.ipsos.com/en-be" />
<link rel="alternate" hreflang="en-ba" href="https://www.ipsos.com/en-ba" />
<link rel="alternate" hreflang="en-ca" href="https://www.ipsos.com/en-ca" />
<link rel="alternate" hreflang="en-cn" href="https://www.ipsos.com/en-cn" />
<link rel="alternate" hreflang="en-hr" href="https://www.ipsos.com/en-hr" />
<link rel="alternate" hreflang="en-dk" href="https://www.ipsos.com/en-dk" />
<link rel="alternate" hreflang="en-eg" href="https://www.ipsos.com/en-eg" />
<link rel="alternate" hreflang="en-gh" href="https://www.ipsos.com/en-gh" />
<link rel="alternate" hreflang="en-hk" href="https://www.ipsos.com/en-hk" />
<link rel="alternate" hreflang="en-in" href="https://www.ipsos.com/en-in" />
<link rel="alternate" hreflang="en-id" href="https://www.ipsos.com/en-id" />
<link rel="alternate" hreflang="en-ie" href="https://www.ipsos.com/en-ie" />
<link rel="alternate" hreflang="en-jo" href="https://www.ipsos.com/en-jo" />
<link rel="alternate" hreflang="en-ke" href="https://www.ipsos.com/en-ke" />
<link rel="alternate" hreflang="en-sa" href="https://www.ipsos.com/en-sa" />
<link rel="alternate" hreflang="en-kw" href="https://www.ipsos.com/en-kw" />
<link rel="alternate" hreflang="en-lb" href="https://www.ipsos.com/en-lb" />
<link rel="alternate" hreflang="en-my" href="https://www.ipsos.com/en-my" />
<link rel="alternate" hreflang="en-nl" href="https://www.ipsos.com/en-nl" />
<link rel="alternate" hreflang="en-nz" href="https://www.ipsos.com/en-nz" />
<link rel="alternate" hreflang="en-ng" href="https://www.ipsos.com/en-ng" />
<link rel="alternate" hreflang="en-pk" href="https://www.ipsos.com/en-pk" />
<link rel="alternate" hreflang="en-ph" href="https://www.ipsos.com/en-ph" />
<link rel="alternate" hreflang="en-pr" href="https://www.ipsos.com/en-pr" />
<link rel="alternate" hreflang="en-qa" href="https://www.ipsos.com/en-qa" />
<link rel="alternate" hreflang="en-ro" href="https://www.ipsos.com/en-ro" />
<link rel="alternate" hreflang="en-sg" href="https://www.ipsos.com/en-sg" />
<link rel="alternate" hreflang="en-si" href="https://www.ipsos.com/en-si" />
<link rel="alternate" hreflang="en-za" href="https://www.ipsos.com/en-za" />
<link rel="alternate" hreflang="en-ch" href="https://www.ipsos.com/en-ch" />
<link rel="alternate" hreflang="en-tw" href="https://www.ipsos.com/en-tw" />
<link rel="alternate" hreflang="en-tz" href="https://www.ipsos.com/en-tz" />
<link rel="alternate" hreflang="en-th" href="https://www.ipsos.com/en-th" />
<link rel="alternate" hreflang="en-ae" href="https://www.ipsos.com/en-ae" />
<link rel="alternate" hreflang="en-ug" href="https://www.ipsos.com/en-ug" />
<link rel="alternate" hreflang="en-gb" href="https://www.ipsos.com/en-uk" />
<link rel="alternate" hreflang="en-ua" href="https://www.ipsos.com/en-ua" />
<link rel="alternate" hreflang="en-us" href="https://www.ipsos.com/en-us" />
<link rel="alternate" hreflang="en-vn" href="https://www.ipsos.com/en-vn" />
<link rel="alternate" hreflang="en-zm" href="https://www.ipsos.com/en-zm" />
<link rel="alternate" hreflang="fr-dz" href="https://www.ipsos.com/fr-dz" />
<link rel="alternate" hreflang="fr-ca" href="https://www.ipsos.com/fr-ca" />
<link rel="alternate" hreflang="fr-fr" href="https://www.ipsos.com/fr-fr" />
<link rel="alternate" hreflang="fr-ma" href="https://www.ipsos.com/fr-ma" />
<link rel="alternate" hreflang="fr-tn" href="https://www.ipsos.com/fr-tn" />
<link rel="alternate" hreflang="hu-hu" href="https://www.ipsos.com/hu-hu" />
<link rel="alternate" hreflang="he-il" href="https://www.ipsos.com/he-il" />
<link rel="alternate" hreflang="it-it" href="https://www.ipsos.com/it-it" />
<link rel="alternate" hreflang="ja-jp" href="https://www.ipsos.com/ja-jp" />
<link rel="alternate" hreflang="kk-kz" href="https://www.ipsos.com/kk-kz" />
<link rel="alternate" hreflang="ko-kr" href="https://www.ipsos.com/ko-kr" />
<link rel="alternate" hreflang="mk-mk" href="https://www.ipsos.com/mk-mk" />
<link rel="alternate" hreflang="sr-me" href="https://www.ipsos.com/sr-me" />
<link rel="alternate" hreflang="nb-no" href="https://www.ipsos.com/nb-no" />
<link rel="alternate" hreflang="pl-pl" href="https://www.ipsos.com/pl-pl" />
<link rel="alternate" hreflang="pt-mz" href="https://www.ipsos.com/pt-mz" />
<link rel="alternate" hreflang="pt-pt" href="https://www.ipsos.com/pt-pt" />
<link rel="alternate" hreflang="pt-br" href="https://www.ipsos.com/pt-br" />
<link rel="alternate" hreflang="ro-ro" href="https://www.ipsos.com/ro-ro" />
<link rel="alternate" hreflang="ru-kz" href="https://www.ipsos.com/ru-kz" />
<link rel="alternate" hreflang="ru-ru" href="https://www.ipsos.com/ru-ru" />
<link rel="alternate" hreflang="sr-xk" href="https://www.ipsos.com/sr-xk" />
<link rel="alternate" hreflang="sr-rs" href="https://www.ipsos.com/sr-rs" />
<link rel="alternate" hreflang="sk-sk" href="https://www.ipsos.com/sk-sk" />
<link rel="alternate" hreflang="sl-si" href="https://www.ipsos.com/sl-si" />
<link rel="alternate" hreflang="es-ar" href="https://www.ipsos.com/es-ar" />
<link rel="alternate" hreflang="es-bo" href="https://www.ipsos.com/es-bo" />
<link rel="alternate" hreflang="es-cl" href="https://www.ipsos.com/es-cl" />
<link rel="alternate" hreflang="es-co" href="https://www.ipsos.com/es-co" />
<link rel="alternate" hreflang="es-cr" href="https://www.ipsos.com/es-cr" />
<link rel="alternate" hreflang="es-do" href="https://www.ipsos.com/es-do" />
<link rel="alternate" hreflang="es-ec" href="https://www.ipsos.com/es-ec" />
<link rel="alternate" hreflang="es-sv" href="https://www.ipsos.com/es-sv" />
<link rel="alternate" hreflang="es-gt" href="https://www.ipsos.com/es-gt" />
<link rel="alternate" hreflang="es-mx" href="https://www.ipsos.com/es-mx" />
<link rel="alternate" hreflang="es-pa" href="https://www.ipsos.com/es-pa" />
<link rel="alternate" hreflang="es-pe" href="https://www.ipsos.com/es-pe" />
<link rel="alternate" hreflang="es-es" href="https://www.ipsos.com/es-es" />
<link rel="alternate" hreflang="es-ve" href="https://www.ipsos.com/es-ve" />
<link rel="alternate" hreflang="sv-se" href="https://www.ipsos.com/sv-se" />
<link rel="alternate" hreflang="tr-tr" href="https://www.ipsos.com/tr-tr" />
<link rel="alternate" hreflang="uk-ua" href="https://www.ipsos.com/ua-ua" />
<link rel="icon" href="/sites/ipsos/themes/custom/ipsos/favicon.ico" type="image/vnd.microsoft.icon" />
<link rel="canonical" href="https://www.ipsos.com/en" />

    <script>
        dataLayer = [{
                      'env_work': "prod",
                      'env_language': "EN",
                      'env_country': "EN",
                      'page_cat1': "Homepage",
                      'page_template': "Homepage",
                      'env_channel': "Desktop",
                    'cookieGA': (typeof cookieGA !== "undefined") ? cookieGA : ''
        }];

        (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
          new Date().getTime(),event:'gtm.js'});v
sitemap.xml 200 OK
Type URL Set URLs 0 entries Valid XML No
B
TLS Certificate Expiry & Recommendations
57 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

57
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
CDN & Delivery
Cloudflare
REVIEW
Cloudflare
Info::
Site is served via Cloudflare CDN (edge: CDG)
Got: cf-ray: 9eff4a266ede99df-CDG
CDN Detected: Cloudflare
Provider Cloudflare Evidence cf-ray: 9eff4a266ede99df-CDG
A+
DNS Records
2 A records, 101 ms lookup
PASS
2 A records, 101 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.18.17.121, 104.18.16.121
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2606:4700::6812:1079, 2606:4700::6812:1179
Info::
2 nameserver(s) configured
Got: iris.ns.cloudflare.com, randy.ns.cloudflare.com
Info::
2 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 101 ms
Got: 101 ms
A104.18.17.121, 104.18.16.121
AAAA2606:4700::6812:1079, 2606:4700::6812:1179
CNAME—
NSiris.ns.cloudflare.com, randy.ns.cloudflare.com
MX
10 mxb-00322403.gslb.pphosted.com
10 mxa-00322403.gslb.pphosted.com
TXT
00w787mm3ksyxdmvmkkq664sk8blxbly
t793hbf8okhj5boolm2rolkvl8
DirectFedPassiveSignInUri=https://login.microsoftonline.com/1092197f-937b-439b-a...
jxkgxzp1f86cpvq2vn63dfh12kb9sdb7
nfhs5ljlrzkrt2jd6c6mqg2dl3ld9r2f
dz6v4lpkhq2nz7vs2g7k6lvn8qs7v1hy
9sar24ttrvrvadh04h7o2um01g
piTZfI2372xcjyhekM4FUNBD32uY3kxCKv4dgZRXmgoW1/4PPkgAwKB0FcCP1bJD229j4j+XHK1+B359...
ca3-4c3ad7c8239343c196d732f63d8fe23a
f2w6q0pd3443knggbvh50lqj3zbhjf2h
anthropic-domain-verification-016m0h=KVp64q8rLboXOeFEgd8ZsmLmv
3gplc46bmdn49b3dz4b55cy4m6wvjvl8
atlassian-domain-verification=108jra5Nm43sSluI4XvLofj59uEP7752ktXVSrlXNXt6no6Dez...
w6chf1g2jj3cnzgl89fy8ztjbr8hh2l1
r3sk3jttgxfzyjvth70zygxv0xjtl2tp
b5g93f3q14l6n0xhvtszj3b6mx8z2fcf
1nwwzqcvltdj6mpjkclvh2g6yd33jdl3
vymyt86mdlvv29zhyvnxs7bndp1q8rs4
mc-domain-verification=(UUID)
figma-domain-verification=ccf3c4cd6ce20388a315166374924e8c9423e18950e13be2f59e70...
0bpyl1qsyxvdzlmcb29cydk2zl9bwb39
google-site-verification=FX9klVYeiT6bKQv2QvrH1xKukRIkz_t9Oo4lC8c9Nbs
atlassian-domain-verification=vatYP0V1xKswvPvcGUbY6nLJGWq2fxRJHdhwgcCPo3aJK4QLEn...
b0m08n0dbjl0ehhfmuh7jjmvfm
_mumiizvt66vm74thhfwss96owz0e8bb
docusign=1880deaa-da99-49b1-8259-81cf3693db57
google-site-verification=SpG8AB7jiwCDdpr9HIBAAfTmefZeP05lyqM5Kj9YtkA
k86fz18fbf5pnw104gdys7zkpq99xz7m
h44y51gb687g14j78sjkgbgn27lwz5xk
zoho-verification=zb09133943.zmverify.zoho.eu
MS=ms42235156
zoho-verification=zb41913388.zmverify.zoho.eu
qtq5jrsu0uc8slpt0llcvl90aq
24hkgdyr86xdnf6vm330hvb3yn7pw65r
SPF v=spf1 include:spf-00322403.pphosted.com include:e19ezl49dr.powerspf.com -all
_su14332l1fq1agolw7sq4trn5mt4ijx
apple-domain-verification=wBpKo7tQc7VM6XI4
9ahnssmktbsa0nmg5em6rg3c19
_globalsign-domain-verification=TaiKpECIKUi0jTJNS0HSr0fFrMJ0ccIDMsS241Pp8U
A1932C14E0NDIyMDk4Mw2#!0l7xos7n7onvv7sk77yh
google-site-verification=zeC5pey-RdyHhSXp-2JkKjK2e-siE-G7uwTZW6I8Nhs
cl4s8g2k7bw5mszvrn2j83rvf6ps5xsd
apple-domain-verification=0PdDMbU4k3h34U8A
mongodb-site-verification=WdXEamqSS0zS7VP6S8Zsc8nPC0d0wl4k
r6kyf4t5lk3pccrw3jgz59cq9k5042f0
docker-verification=79e39bcd-ccf3-4100-bacd-f8b88d50297c
kecu47v0n1een8gct4klnmj0lr
t2p1z64sv9sb066lmjmnzcyjqq0jgttt
_si127jbwxzsr1u70dsleaqldcateu0t
l5vwb1t7smwfj95gch249xq1yhc4ktsw
openai-domain-verification=dv-d6PjUBO3wJj9ECkwQVeU8Wdb
workplace-domain-verification=6yiFIjjTxW57TC79Zwlm3fOnkk9Atc
amazonses:uVQuML8lIAdaFMEeehTOLtMM1D36fT07MHwY0MtBIZc=
CAALookup not available with standard resolver
Resolved in 101 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+
IPv6 Readiness
IPv6 reachable (17 ms)
PASS
IPv6 reachable (17 ms)
Info::
IPv6 is configured and reachable at 2606:4700::6812:1079, 2606:4700::6812:1179
Got: 17 ms connect
IPv6 Ready
AAAA Records 2606:4700::6812:1079, 2606:4700::6812:1179 Connection Reachable (17 ms)
A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

301https://www.ipsos.com/
200https://ipsos.com/

Preferred variant: non-www

HTTP → HTTPS

301http://ipsos.com/ → https://www.ipsos.com/

Consistent

A
Domain Intelligence
ipsos.com — via InterNetX GmbH, 28 years, 3 months old
PASS
ipsos.com — via InterNetX GmbH, 28 years, 3 months old
Warning::
Domain expires in 34 days
Consider enabling auto-renewal to prevent accidental expiration.
Got: Expires May 26, 2026
Info::
DNSSEC is not enabled
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Info::
Registrar: InterNetX GmbH
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Domain expiry

EXPIRED

May 26, 2026

SSL certificate

57 days

Issued by Google Trust Services

Domain age

28 years, 3 months

Registered May 27, 1998

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

Unknown

2606:4700::6812:1079

Registrar

InterNetX GmbH

Unlocked 2 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Domain has EXPIRED — renew immediately to avoid total site outage
  • Enable DNSSEC to protect visitors from DNS spoofing
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar InterNetX GmbH
Created May 27, 1998 (28 years, 3 months ago)
Expires May 26, 2026 (1 months)
Last Updated May 27, 2025
Name Servers iris.ns.cloudflare.com, randy.ns.cloudflare.com
DNSSEC Not enabled
Hosting
IP Address 2606:4700::6812:1079
Data source: rdap (0.1s)

Consider enabling auto-renewal to prevent accidental expiration.

Why this matters

Domain expiry approaching — renew immediately and ensure auto-renew + alerting are configured.

Source: ICANN renewal policy

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more ▾

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 113 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
54 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
16 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
24 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
113 ms
Total Time Total request time from DNS lookup through full response.
113 ms

Connection waterfall

DNS Lookup 54 ms TCP Connect 16 ms TLS Handshake 24 ms Server Processing 19 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback