Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations141 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records4 A records, 89 ms lookupPASS
| A | 108.157.98.49, 108.157.98.36, 108.157.98.37, 108.157.98.35 |
| AAAA | — |
| CNAME | — |
| NS | ns-20.awsdns-02.com, ns-1357.awsdns-41.org, ns-1870.awsdns-41.co.uk, ns-538.awsdns-03.net |
| MX | 0 kompas-com.mail.protection.outlook.com |
| TXT | **MTk4NzE4OQ** MS=ms84945085 google-site-verification=H0tXTYJNRgPTgcHFau-bdFkdiiyetws5svWgourEr80 tollbit-domain-verification=10a868ec8c3697e54ff65c61bebfcb8ab151461e38f7c05a9083... google-site-verification=C8IHxOsurHI6KnEjI5orFUdtvLHOPcUrZ5AOk8cTY_k google-site-verification=zQHJmcEyDu60qQYhDywvbk0wifyqgIeaqLOvASV3KRE SPF v=spf1 a mx ip4:18.136.63.198 ip4:202.146.3.250 ip4:202.146.3.244 include:spf.pr... google-site-verification=b7BrJ3ddLVmzJk9IcDC2pnNQrED3Xp5lU2BD6yv8XDU amazonses:4hUC60ay8/wkevi2b5CPOBxL9Ea6+smIpAzYhxq8gWY= tiktok-developers-site-verification=2nMUQvdoDfWrtSIBQ8oJTXmUov7FQ8G3 MqeiDGbipprn+mBly+qsW5FM+UYKOi9yvFRPJoraae+5E3+TEa8agCGuAfqThjOhTJKH6wJTtTCPoWbi... XFM0**Verify**86LYs**Domain**95EgYm3x**Ownership**4Tkx681 02dsS5G7Vse8r9T65 tiktok-developers-site-verification=hcHdGkx6Jn96Ml6MYhqoBk6jDosHue62 adobe-idp-site-verification=5fe66a06-9d34-4a9b-a1c0-6363935d41bb tiktok-developers-site-verification=dBZthsAMCXTO67YoMpnM0z2yIZAE9wNP amazonses:WJvdRs55q14AeqPq4aifGGiktUCqAewzEfjQ9Hkb3HI= tiktok-developers-site-verification=UhWrrUo8wlHK8Yzh5kkiMxyuhtkao5c6 tfbnmxvc google-site-verification=ZsR5qYwtnVqJLz6M9GLjfdOndstFeLnivKq64OA91SY dailymotion-domain-verification=dmpiwida7prf9ms8x google-site-verification=DboOgHSkD5VLwCxI1uZSo6xqWmJt-8EAybzLAt8zhEE adobe-idp-site-verification=c59abdfe-c5e0-4584-9079-7ddb8def0d78 |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 106 ms totalPASS
https://kompas.com
37 ms · HTTP/1.1
https://www.kompas.com/
69 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://kompas.com | 301 | 37 ms | HTTP/1.1 | KG Media |
| 2 | https://www.kompas.com/ | 200 | 69 ms | HTTP/1.1 | KG Media |
See the visual redirect chain in the HTTP Probe tab →
A+Crawlabilityrobots.txt present, sitemap with 51 URLsPASS
# Kompas.com content is made available for your personal, non-commercial
# use subject to our Terms of Service here:
# https://inside.kompas.com/term-of-use.
# Use of any device, tool, or process designed to data mine or scrape the content
# using automated means is prohibited without prior written permission from
# PT. Kompas Cyber Media. Prohibited uses include but are not limited to:
# (1) text and data mining activities;
# (2) the development of any software, machine learning, artificial intelligence (AI),
# and/or large language models (LLMs);
# (3) creating or providing archived or cached data sets containing our content to others; and/or
# (4) any commercial purposes.
# Contact https://inside.kompas.com/about-us#meet for assistance.
# ===== GOOGLE & SEARCH BOTS =====
User-agent: *
Disallow: /search/
Disallow: /komentar/
Disallow: /copy/
Disallow: /*?jxrecoid=*
Disallow: /*?utm_source=*
# ===== X Image Crawl =====
User-agent: Twitterbot
Allow: /
User-agent: Twitterbot/1.0
Allow: /
User-agent: Xbot
Allow: /
User-agent: X-Twitter-Image-Crawler
Allow: /
Sitemap: https://www.kompas.com/sitemap.xml
# ---------------------------------------------
# AI TRAINING BOTS Block All
# ---------------------------------------------
User-agent: Amazonbot
User-agent: GPTBot
User-agent: OpenAI
User-agent: ChatGPT-User
User-agent: CCBot
User-agent: anthropic-ai
User-agent: Claude-Web
User-Agent: PerplexityBot
User-agent: Applebot-Extended
User-agent: AudigentAdBot
User-agent: AwarioRssBot
User-agent: AwarioSmartBot
User-agent: BLEXBot
User-agent: Bytespider
User-agent: ClaudeBot
User-agent: cohere-ai
User-agent: DataForSeoBot
User-agent: Diffbot
User-agent: DuckAssistBot
User-agent: EchoboxBot
User-agent: FacebookBot
User-agent: FriendlyCrawler
User-agent: ImagesiftBot
User-agent: Jetslide
User-agent: magpie-crawler
User-agent: Meta-ExternalAgent
User-agent: meta-externalagent
User-agent: Meta-ExternalFetcher
User-agent: meta-externalfetcher
User-agent: Meta-WebIndexer
User-agent: MistralAI-User
User-agent: MyCentralAIScraperBot
User-agent: NewsNow
User-agent: news-please
User-agent: OAI-SearchBot
User-agent: omgili
User-agent: omgilibot
User-agent: peer39_crawler
User-agent: peer39_crawler/1.0
User-agent: Poseidon Research Crawler
User-agent: quillbot.com
User-agent: Quora-Bot
User-agent: Scrapy
User-agent: SeekrBot
User-agent: SeznamHomepageCrawler
User-agent: TaraGroup Intelligent Bot
User-agent: Timpibot
User-agent: TurnitinBot
User-agent: ViennaTinyBot
User-agent: YouBot
User-agent: newspaper
User-agent: Perplexity-User
User-agent: docomo
User-agent: yisouspider
User-agent: trendictionbot
User-agent: tin_eye
User-agent: metaexternalagent
User-agent: chatgpt_user
User-agent: meta-externalagent
User-agent: Claude-User
User-agent: Claude-SearchBot
User-agent: ias-va
User-agent: ias-or
User-agent: ias-ir
User-agent: ias-jp
User-agent: ias-sg
User-agent: ias-au
User-agent: ias_crawler
User-agent: admantx
User-agent: Webz.io
User-agent: ICC-Crawler
User-agent: you.com.
User-agent: ChatGPT’s agent Operator.
User-agent: Bing’s Copilot chat.
User-agent: Grok.
# Block Baidu spiders
User-agent: Baiduspider
User-agent: baiduspider
User-agent: Baiduspider-image
User-agent: Baiduspider-video
User-agent: Baiduspider
Disallow: /
- https://www.kompas.com/sitemap-basic.xml
- https://www.kompas.com/sitemap-news-tren...
- https://www.kompas.com/sitemap-news-edu....
- https://www.kompas.com/sitemap-news-hype...
- https://www.kompas.com/sitemap-news-food...
- https://www.kompas.com/sitemap-news-glob...
- https://www.kompas.com/sitemap-news-home...
- https://www.kompas.com/sitemap-news-prop...
- https://www.kompas.com/sitemap-news-jawa...
- https://www.kompas.com/sitemap-news-jawa...
- https://www.kompas.com/sitemap-news-jawa...
- https://www.kompas.com/sitemap-news-bant...
- https://www.kompas.com/sitemap-news-lamp...
- https://www.kompas.com/sitemap-news-kali...
- https://www.kompas.com/sitemap-news-kali...
- https://www.kompas.com/sitemap-news-suma...
- https://www.kompas.com/sitemap-news-suma...
- https://www.kompas.com/sitemap-news-sula...
- https://www.kompas.com/sitemap-news-riau...
- https://www.kompas.com/sitemap-news-sula...
- https://www.kompas.com/sitemap-news-sain...
- https://www.kompas.com/sitemap-news-spor...
- https://www.kompas.com/sitemap-news-skol...
- https://www.kompas.com/sitemap-news-badm...
- https://www.kompas.com/sitemap-news-moto...
- https://www.kompas.com/sitemap-news-cekf...
- https://www.kompas.com/sitemap-archive-t...
- https://www.kompas.com/sitemap-archive-e...
- https://www.kompas.com/sitemap-archive-h...
- https://www.kompas.com/sitemap-archive-f...
- https://www.kompas.com/sitemap-archive-g...
- https://www.kompas.com/sitemap-archive-h...
- https://www.kompas.com/sitemap-archive-p...
- https://www.kompas.com/sitemap-archive-j...
- https://www.kompas.com/sitemap-archive-j...
- https://www.kompas.com/sitemap-archive-j...
- https://www.kompas.com/sitemap-archive-b...
- https://www.kompas.com/sitemap-archive-l...
- https://www.kompas.com/sitemap-archive-k...
- https://www.kompas.com/sitemap-archive-k...
- https://www.kompas.com/sitemap-archive-s...
- https://www.kompas.com/sitemap-archive-s...
- https://www.kompas.com/sitemap-archive-s...
- https://www.kompas.com/sitemap-archive-r...
- https://www.kompas.com/sitemap-archive-s...
- https://www.kompas.com/sitemap-archive-s...
- https://www.kompas.com/sitemap-archive-s...
- https://www.kompas.com/sitemap-archive-s...
- https://www.kompas.com/sitemap-archive-b...
- https://www.kompas.com/sitemap-archive-m...
- https://www.kompas.com/sitemap-archive-c...
A+Domain Intelligencekompas.com — via Network Solutions, LLC, 30 years, 9 months old, hosted on AWSPASS
1978 days
December 17, 2031
141 days
Issued by Amazon
30 years, 9 months
Registered December 18, 1995
Not enabled
Protects against DNS spoofing
AWS
ASN AS16509
108.157.98.49
Network Solutions, LLC
Expiry timeline
Recommended actions
- Enable DNSSEC to protect visitors from DNS spoofing
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.
Learn more ▾ ▴
DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.
Source: ICANN / RFC 4033
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice