Skip to content
https://marketwatch.com

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
85
GRADE
B
FIX
0
REVIEW
4
PASS
5
INFO
0
Probed from Madrid, Spain
301 Moved Permanently
Checks
9
5 PASS 4 REVIEW
C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

C
Crawlability
Action
robots.txt present, sitemap with 344 URLs
REVIEW
robots.txt present, sitemap with 344 URLs
Info::
robots.txt is present
Got: 4250 bytes
Critical::
robots.txt blocks all crawlers
Disallow: / for all user-agents prevents search engines from indexing any page. This will remove the site from search results.
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 344 entries
Info::
Sitemap index with 344 child sitemaps
Info::
robots.txt references sitemap

Disallow: / for all user-agents prevents search engines from indexing any page. This will remove the site from search results.

Why this matters

Disallow: / in robots.txt blocks every search crawler — the site becomes invisible in organic search.

Learn more

Common deployment mistake: a staging robots.txt with `User-agent: * / Disallow: /` ships to prod. The site falls out of search results within days. Verify your robots.txt is the production-intended version. If this is intentional (private site), no action needed.

Source: Google Search Central

robots.txt 200 OK
Size 4250 B Sitemaps referenced 7 User-agents msnbot, flipboard, SemrushBot, facebot, uptimerobot, schema-validator, newrelicpinger, siteimprovebot, duckduckbot, SISTRIX, EpvzCrawl6194680250, Citoid, bingbot, pingdom.com_bot_version_1.4, Google-InspectionTool, Storebot-Google, Applebot, outbrain, smartologybot, SimilarWebBot, linkedinbot, MojeekBot, google-cloudvertexbot, petalbot, Googlebot-Video, AdsBot-Google, mediapartners-google, yahoo, AmazonAdBot, AdsBot-Google-Mobile, YandexImages, Pinterestbot, Yeti, 360Spider, snapchat, ZoteroTranslationServer, googlebot-image, slurp, qwantbot, SeznamBot, yisouspider, thetradedesk, AdsBot-Google-Mobile-Apps, proximic, OAI-SearchBot, GoogleOther, google-read-aloud, admantx, GPTBot, googleimageproxy, Screaming Frog SEO Spider, Chrome-Lighthouse, Iframely, Vocabtracker, googlebot, bingpreview, AppleNewsBot, pubmatic, parselybot, OnCrawl, botify, twitterbot, *, ias_crawler, ChatGPT-User, telegrambot, sentry, yandex, baiduspider, AhrefsBot, facebookexternalhit, DeepCrawl Blocking Yes — all crawlers blocked
# NOTICE: Collection of content and other data on https://www.marketwatch.com/ through
# automated means is prohibited unless you have express written
# permission from Dow Jones & Company, Inc. and may only be conducted for the
# limited purpose contained in said permission.
#
# Dow Jones & Company, Inc. Terms of Use may be found at
# https://www.dowjones.com/terms-of-use/
#
# If you would like to apply for permission to license the
# intellectual property and/or other materials of Dow Jones & Company, Inc.’s
# brands, please contact us via email at copyright@dowjones.com.


User-agent: *
Disallow: /

User-agent: googlebot
User-agent: googlebot-image
User-agent: GoogleOther
User-agent: Googlebot-Video
User-agent: Google-InspectionTool
User-agent: AdsBot-Google
User-agent: AdsBot-Google-Mobile
User-agent: AdsBot-Google-Mobile-Apps
User-agent: Storebot-Google
User-agent: google-read-aloud
User-agent: mediapartners-google
User-agent: bingbot
User-agent: msnbot
User-agent: bingpreview
User-agent: slurp
User-agent: yahoo
User-agent: yandex
User-agent: YandexImages
User-agent: baiduspider
User-agent: Pinterestbot
User-agent: Yeti
User-agent: MojeekBot
User-agent: 360Spider
User-agent: google-cloudvertexbot
User-agent: duckduckbot
User-agent: petalbot
User-agent: Applebot
User-agent: AppleNewsBot
User-agent: flipboard
User-agent: qwantbot
User-agent: SeznamBot
User-agent: yisouspider


User-agent: proximic
User-agent: admantx
User-agent: thetradedesk
User-agent: outbrain
User-agent: ias_crawler
User-agent: AmazonAdBot
User-agent: pubmatic
User-agent: smartologybot
User-agent: parselybot


User-agent: Screaming Frog SEO Spider
User-agent: DeepCrawl
User-agent: AhrefsBot
User-agent: SemrushBot
User-agent: SimilarWebBot
User-agent: SISTRIX
User-agent: OnCrawl
User-agent: botify
User-agent: Chrome-Lighthouse


User-agent: ChatGPT-User
User-agent: GPTBot
User-agent: OAI-SearchBot


User-agent: facebookexternalhit
User-agent: facebot
User-agent: twitterbot
User-agent: linkedinbot
User-agent: telegrambot
User-agent: snapchat
User-agent: newrelicpinger
User-agent: siteimprovebot
User-agent: uptimerobot
User-agent: pingdom.com_bot_version_1.4
User-agent: sentry
User-agent: schema-validator
User-agent: googleimageproxy
User-agent: Iframely
User-agent: Vocabtracker
User-agent: EpvzCrawl6194680250
User-agent: Citoid
User-agent: ZoteroTranslationServer


Allow: /

Disallow: /2/
Disallow: /3com/
Disallow: /admin/
Disallow: /bgpoxy/
Disallow: /bin/
Disallow: /cDN_contENt/
Disallow: /cgi-bin/
Disallow: /client/
Disallow: /data/
Disallow: /dbcfiles/
Disallow: /dhtml/
Disallow: /dhtmlmenu/
Disallow: /doubleclick/
Disallow: /dynamiclogic/
Disallow: /email/
Disallow: /feeds/
Disallow: /free/
Disallow: /http2_data/
Disallow: /game/*
Disallow: /games/*
Disallow: /*?tickers=
Disallow: /*?submit=
Disallow: /*?exchange=
Disallow: /login/
Disallow: /MarketPerception/
Disallow: /marketperception/
Disallow: /MyPortfolio/
Disallow: /myportfolio/
Disallow: /news/current/
Disallow: /portfolio/
Disallow: /print/
Disallow: /RealMedia/
Disallow: /realmedia/
Disallow: /registration/
Disallow: /search/
Disallow: /search
Disallow: /story/twittershare
Disallow: /tools/alerts/
Disallow: /tpx/
Disallow: /investing/secfile/
Disallow: /tools/quotes/secfilings.asp
Disallow: /tools/quotes/form10k.asp
Disallow: /tools/quotes/form10q.asp
Disallow: /tools/quotes/form8k.asp
Disallow: /tools/quotes/registrationstate.asp
Disallow: /tools/quotes/sched13d.asp
Disallow: /tools/quotes/sched13f.asp
Disallow: /tools/quotes/sched13g.asp
Disallow: /tools/quotes/secarticle.asp
Disallow: /wsj/
Disallow: /xhtml/v/
Disallow: /user/login/profile
Disallow: /auth/

User-agent: googlebot
Disallow: /client

Sitemap: https://www.marketwatch.com/sitemaps/web/mw/en/sitemap_mw_en_index.xml
Sitemap: https://www.marketwatch.com/sitemaps/web/mw-video/en/sitemap_mw-video_en_index.xml
Sitemap: https://www.marketwatch.com/mw_news_sitemap.xml
Sitemap: https://www.marketwatch.com/mw_live_news_sitemap.xml
Sitemap: https://www.marketwatch.com/api-video/sitemaps/google/sitemap-google-video-marketwatch.asp
Sitemap: https://www.marketwatch.com/mw/mw_quote_index_sitemap.xml
Sitemap: https://www.marketwatch.com/sitemaps/web/mw-pr/en/sitemap_mw-pr_en_index.xml

sitemap.xml 200 OK
Type Sitemap Index URLs 344 entries Valid XML Yes
Child Sitemaps:
B
TLS Certificate Expiry & Recommendations
307 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

307
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
CDN & Delivery
AWS CloudFront (LambdaGeneratedResponse from cloudfront)
REVIEW
AWS CloudFront (LambdaGeneratedResponse from cloudfront)
Info::
Site is served via AWS CloudFront CDN (edge: CDG50-P6)
Got: x-amz-cf-id: W56IieRmhWbxSr327f0o2ELG8tR3X7wrHau2Viu0FGsR-x382dVD5g==
Info::
CDN cache status: LambdaGeneratedResponse from cloudfront
CDN Detected: AWS CloudFront
Provider AWS CloudFront Cache Status LambdaGeneratedResponse from cloudfront Evidence x-amz-cf-id: W56IieRmhWbxSr327f0o2ELG8tR3X7wrHau2Viu0FGsR-x382dVD5g==
A+
DNS Records
4 A records, 87 ms lookup
PASS
4 A records, 87 ms lookup
Info::
Resolves to 4 IPv4 address(es)
Got: 13.249.228.125, 13.249.228.104, 13.249.228.112, 13.249.228.24
Info::
No IPv6 (AAAA) records
Info::
4 nameserver(s) configured
Got: ns-1291.awsdns-33.org, ns-450.awsdns-56.com, ns-705.awsdns-24.net, ns-1588.awsdns-06.co.uk
Info::
2 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 87 ms
Got: 87 ms
A13.249.228.125, 13.249.228.104, 13.249.228.112, 13.249.228.24
AAAA
CNAME
NSns-1291.awsdns-33.org, ns-450.awsdns-56.com, ns-705.awsdns-24.net, ns-1588.awsdns-06.co.uk
MX
10 mxa-00596a01.gslb.pphosted.com
10 mxb-00596a01.gslb.pphosted.com
TXT
google-site-verification=9D2VzJi-QCek9CtqC2XV8G4VYkTiiDYYTmkM5152ad8
google-site-verification=zbCAdHPPQU1MVv0UikjwLoiAgCLikxMKJ1h64y226-g
adobe-idp-site-verification=7ef638bb68822798685f96e436bfc87a6f79319dd86369e447b8...
google-site-verification=nnn1LRQtO0v0X_DpMDGX_xZmSwTZqOaMaD0e6NDZvdA
miro-verification=fc4f542b1bf4fc981e2f11e463246349bde0a8d0
knowbe4-site-verification=0694ce74005828dc4bb8b7299bfb6f61
google-site-verification=g1arhZY9MX2Af0YQgBFVYh8WTDUG-WtEE55qEGH6hsU
SPF v=spf1 ip4:68.232.128.0/19 ip4:63.240.26.0/24 include:spf-1.dowjones.com include...
google-site-verification=uYFppydFtsdAeVh-4zcS07cMFtUdZHp_QZz-ACw_AHg
atlassian-domain-verification=uNoIhBXurxzVlQa0FvK2t9Yld5byfvXbFRQaMToGvrieKjBdyl...
openai-domain-verification=dv-Z1O5z6g6UeNwdxBpVlxRw8J6
mongodb-site-verification=3NjKxTnfMRjvs5GmXZrJcJDqqu8GCjDz
ValidationTokenValue=aa1d350e-32a6-4129-b29a-0a17a8fbe63c
datadome-domain-verify=mBXJ0OcsBIxmEYtkepO9rBwdPNmfTk5Q
figma-domain-verification=b411f1d2852c2c7e057a2d6d70fb22896f37ccc1412d1e1bb4f9da...
docker-verification=2b229513-3448-4073-9530-e57440f198d5
CAALookup not available with standard resolver
Resolved in 87 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A
Redirect Chain
1 redirect(s), 288 ms total
PASS
1 redirect(s), 288 ms total
Info::
Single redirect
Got: https://marketwatch.com → https://www.marketwatch.com/ (301)
Info::
WWW normalization redirect

https://marketwatch.com

78 ms · HTTP/1.1

301

https://www.marketwatch.com/

209 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://marketwatch.com30178 msHTTP/1.1CloudFront
2https://www.marketwatch.com/401209 msHTTP/1.1CloudFront

See the visual redirect chain in the HTTP Probe tab →

A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

401https://www.marketwatch.com/
200https://marketwatch.com/

HTTP → HTTPS

301http://marketwatch.com/ https://www.marketwatch.com/

Consistent

A+
Domain Intelligence
marketwatch.com — via CSC Corporate Domains, Inc., 29 years, 1 months old, hosted on AWS
PASS
marketwatch.com — via CSC Corporate Domains, Inc., 29 years, 1 months old, hosted on AWS
Info::
Domain registered until Jul 30, 2026 (3 months remaining)
Info::
DNSSEC is not enabled
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Info::
Registrar: CSC Corporate Domains, Inc.
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: AWS
Got: AS16509
Domain expiry

15 days

July 30, 2026

SSL certificate

307 days

Issued by Amazon

Domain age

29 years, 1 months

Registered July 31, 1997

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

AWS

ASN AS16509

13.249.228.104

Registrar

CSC Corporate Domains, Inc.

Unlocked 4 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Renew the domain or enable auto-renewal to prevent accidental expiry
  • Enable DNSSEC to protect visitors from DNS spoofing
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar CSC Corporate Domains, Inc.
Created July 31, 1997 (29 years, 1 months ago)
Expires July 30, 2026 (3 months)
Last Updated July 26, 2025
Name Servers ns-1291.awsdns-33.org, ns-1588.awsdns-06.co.uk, ns-450.awsdns-56.com, ns-705.awsdns-24.net
DNSSEC Not enabled
Hosting
IP Address 13.249.228.104
ASN AS16509 (AMAZON-02 - Amazon.com, Inc., US)
Provider AWS
Data source: rdap (0.2s)

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 133 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
39 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
17 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
22 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
133 ms
Total Time Total request time from DNS lookup through full response.
134 ms

Connection waterfall

DNS Lookup 39 ms TCP Connect 17 ms TLS Handshake 22 ms Server Processing 56 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback