Skip to content
https://morgenpost.de

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
87
GRADE
B
FIX
1
REVIEW
3
PASS
5
INFO
0
Probed from Madrid, Spain
301 Moved Permanently
Checks
9
5 PASS 3 REVIEW 1 FIX
D
CDN & Delivery
Action
No CDN detected
FIX
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.morgenpost.de/
200https://morgenpost.de/

Inconsistent — duplicate content risk

HTTP → HTTPS

301http://morgenpost.de/ → https://morgenpost.de:443/

Consistent

B
TLS Certificate Expiry & Recommendations
70 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

70
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+
DNS Records
3 A records, 55 ms lookup
PASS
3 A records, 55 ms lookup
Info::
Resolves to 3 IPv4 address(es)
Got: 18.196.221.37, 18.185.81.127, 3.72.121.83
Info::
No IPv6 (AAAA) records
Info::
3 nameserver(s) configured
Got: d.ns14.net, c.ns14.net, b.ns14.net
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 55 ms
Got: 55 ms
A18.196.221.37, 18.185.81.127, 3.72.121.83
AAAA—
CNAME—
NSd.ns14.net, c.ns14.net, b.ns14.net
MX
100 morgenpost-de.mail.protection.outlook.com
TXT
ahrefs-site-verification_85c9ada5714024784dd4ce2446bee1ccccc1206ed26c745b0f7b725...
swisssign-check=2riNyZhLtNYUl_8uanXq23pYaSk
MS=ms17724065
google-site-verification=PMEXkBCtYama_tXgb7z9mFu_v9zEm5RhICvZ-_GrojQ
SPF v=spf1 include:spf.protection.outlook.com include:spf.funkemedien.de -all
facebook-domain-verification=l7gzd9xab6g74bvmix1p6x3ldyxj9h
google-site-verification=lA7mdbLACtqpFaxJeOIj3SxP-QnOPWMcfsP_8AzJkZA
adobe-idp-site-verification=1817294f-b27b-457d-b7ff-a083919f44a4
google-site-verification: cav9Y_NkGywFRDz_giyujLtv8KzD9uRTrYm7BmFUliM
CAALookup not available with standard resolver
Resolved in 55 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A
Redirect Chain
1 redirect(s), 215 ms total
PASS
1 redirect(s), 215 ms total
Info::
Single redirect
Got: https://morgenpost.de → https://www.morgenpost.de:443/ (301)
Info::
WWW normalization redirect

https://morgenpost.de

95 ms · HTTP/1.1

301

https://www.morgenpost.de:443/

120 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://morgenpost.de30195 msHTTP/1.1awselb/2.0
2https://www.morgenpost.de:443/200120 msHTTP/1.1

See the visual redirect chain in the HTTP Probe tab →

A+
Crawlability
robots.txt present, sitemap with 239 URLs
PASS
robots.txt present, sitemap with 239 URLs
Info::
robots.txt is present
Got: 6366 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 239 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 6366 B Sitemaps referenced 1 User-agents ICC-Crawler, DotBot, Amazon-Kendra, anthropic-ai, ClaudeBot, SBIntuitionsBot, MetaJobBot, linkdebot, Cotoyogi, YandexAdditional, PetalBot, SirdataBot, Yeti, QualifiedBot, coccocbot, contao/crawler, urlsuma, SEOkicks, Brightbot, Buddybot, fluid, Monsidobot, Semrushbot-SI, AllenAI, Anomura, PoseidonResearchCrawler, browsertrix, Devin, Optimizer, AihitBot, archive.org_bot, Google-Cloud-Vertex-Bot, BLEXBot, KlaviyoAIBot, netEstate, Gemini-Deep-Research, ChatGPT-User, Perplexity-User, MyCentralAIScraperBot, XAI-Grok, Cloudflare-Authorag, Flamingo_SearchEngine, AddSearchBot, ImagesiftBot, MistralAI, OGDWCtcxCrawler, openindexspider, Applebot-Extended, Google-Extended, GrokBot, img2dataset, ShapBot, Semanticbot, omgilibot, peer39_crawler/1.0, Tag-Crawler, deepcrawl, Majestic, OpenindexSpider, SEOkicks-Robot, PanguBot, Cincraw, WiseGuys Robot, Diffbot, KangarooBot, sistrix, AtlassianBot, Cloudflare-Autorag, CrawlSpace, HappyWing, rogerbot, MJ12bot, arquivo.pt, SemanticScholarBot, Claude-SearchBot, SISTRIX, Claude-Web, peer39_crawler, DomainStatsBot, LinerBot, User-agent, Yandex, ai2bot, meta-externalagent, hatena antenna, mail.RU_Bot, Riddler, CloudVertexBot, Toplistbot, MistralAI-User, LinkChecker, VelenPublicWebCrawler, harsilbot, NovaAct, BacklinkCrawler, OnPageBot, FactSet_SpyderBot, YouBot, Testcrawler, Baiduspider, SeznamBot, Bytespider, HaosouSpider, ResearchBot, DuckAssistBot, Seobility, SEOdiver, FireCrawlAgent, GPTBot, Barkrowler, dotbot, kazbtbot, weborama-fetcher, omgili, OpenAI, arquivo-web-crawler, SentiBot, GoogleAgent-Mariner, Timpibot, Linkfluence Yak Bot, DataForSeoBot, Meta-WebIndexer, Heritrix, meta-externalfetcher, SidetradeIndexerBot, BuiltWith, Kraken, AhrefsBot, SISTRIX Optimizer, GoogleOther, Dmbot, VsuSearchSpider, AmazonAdBot, Majestic12, Amazonbot, ByteDance, CCBot, cohere-ai, ia_archiver-web.archive.org, PerplexityBot, ThinkBot, Sogou spider, SemrushBot-SA, SISTRIX Crawler, FriendlyCrawler, LingueeBot, TikTokSpider, brozzler, SplitSignalBot, RyteBot, Cohere-Training-Data-Crawler, BedrockBot, spbot, special_archiver, thinkers-bot, uipbot/1.0, wpbot, *, Cliqzbot, SemrushBot, SiteAuditBot, FacebookBot, bigsur.ai, Google-NotebookLM, DeepSeekBot, Terracotta, Grok-DeepSearch, ia_archiver Blocking No — crawling allowed
Sitemap: https://www.morgenpost.de/sitemaps/news.xml

User-agent: *
Allow: /static/*/client.js
Allow: /static/*/main.css
Allow: /static/*/favicon.png
Disallow: /stats/*
Disallow: /*?config*
Disallow: /*.xmli*
Disallow: /*?service=Ajax
Disallow: /*?service=ajax
Disallow: /config/*
Disallow: /test/*
Disallow: /Test/*
Disallow: /template/*
Disallow: /*?*token=*
Disallow: /*?*eventId=*
Disallow: /static/*
Disallow: /migration_import_no_section/*
Disallow: /secure/
Disallow: /socialmedia/*
Disallow: *reader_id=READER_ID*
Disallow: /suche/*
Disallow: /*?widgetid=
Disallow: /newsletter-result/
Disallow: *tpcc=*
Disallow: /resources/
Disallow: /bin/
Disallow: /downloads/
Disallow: /service/newsletter-adconsent
Disallow: /pagespeed_static/
Disallow: /resources/img/*icon*pagespeed

# search engines
User-agent: Cliqzbot
User-agent: Baiduspider
User-agent: Flamingo_SearchEngine
User-agent: SeznamBot
User-agent: Sogou spider
User-agent: Yandex
Disallow: /

# seo tools
User-agent: AhrefsBot
User-agent: BacklinkCrawler
User-agent: DataForSeoBot
User-agent: deepcrawl
User-agent: LinkChecker
User-agent: linkdebot
User-agent: Linkfluence Yak Bot
User-agent: Majestic
User-agent: Majestic12
User-agent: MJ12bot
User-agent: OnPageBot
User-agent: OpenindexSpider
User-agent: openindexspider
User-agent: Optimizer
User-agent: RyteBot
User-agent: SemrushBot
User-agent: SemrushBot-SA
User-agent: Semrushbot-SI
User-agent: Seobility
User-agent: SEOdiver
User-agent: SEOkicks
User-agent: SEOkicks-Robot
User-agent: SISTRIX
User-agent: sistrix
User-agent: SISTRIX Crawler
User-agent: SISTRIX Optimizer
User-agent: SiteAuditBot
Disallow: /

# ai tools
User-agent: AddSearchBot
User-agent: ai2bot
User-agent: AihitBot
User-agent: AllenAI
User-agent: Amazon-Kendra
User-agent: Amazonbot
User-agent: Anomura
User-agent: anthropic-ai
User-agent: Applebot-Extended
User-agent: archive.org_bot
User-agent: AtlassianBot
User-agent: BedrockBot
User-agent: Brightbot
User-agent: ByteDance
User-agent: Bytespider
User-agent: CCBot
User-agent: ClaudeBot
User-agent: Claude-Web
User-agent: Cloudflare-Authorag
User-agent: Cloudflare-Autorag
User-agent: CloudVertexBot
User-agent: Cohere-Training-Data-Crawler
User-agent: Cotoyogi
User-agent: cohere-ai
User-agent: CrawlSpace
User-agent: DeepSeekBot
User-agent: Diffbot
User-agent: FacebookBot
User-agent: FactSet_SpyderBot
User-agent: FireCrawlAgent
User-agent: FriendlyCrawler
User-agent: Google-Cloud-Vertex-Bot
User-agent: Google-Extended
User-agent: GoogleOther
User-agent: GPTBot
User-agent: Grok-DeepSearch
User-agent: GrokBot
User-agent: ia_archiver
User-agent: ia_archiver-web.archive.org
User-agent: ICC-Crawler
User-Agent: ImagesiftBot
User-agent: img2dataset
User-agent: KangarooBot
User-agent: KlaviyoAIBot
User-agent: LingueeBot
User-Agent: meta-externalagent
User-agent: Meta-WebIndexer
User-agent: MistralAI
User-agent: MyCentralAIScraperBot
User-agent: omgili
User-agent: omgilibot
User-agent: OpenAI
User-agent: PanguBot
User-agent: peer39_crawler
User-agent: peer39_crawler/1.0
User-agent: PerplexityBot
User-agent: PoseidonResearchCrawler
User-agent: QualifiedBot
User-agent: SBIntuitionsBot
User-agent: ShapBot
User-agent: SidetradeIndexerBot
User-agent: Terracotta
User-agent: Timpibot
User-agent: ThinkBot
User-agent: TikTokSpider
User-agent: VelenPublicWebCrawler
User-agent: XAI-Grok
User-agent: YandexAdditional
User-agent: YouBot
Disallow: /

# other
User-agent: arquivo-web-crawler
User-agent: arquivo.pt
User-agent: Barkrowler
User-agent: bigsur.ai
User-agent: BLEXBot
User-agent: browsertrix
User-agent: brozzler
User-agent: Buddybot
User-agent: BuiltWith
User-agent: Cincraw
User-agent: coccocbot
User-agent: contao/crawler
User-agent: Devin
User-agent: Dmbot
User-agent: DomainStatsBot
User-agent: DotBot
User-agent: dotbot
User-agent: fluid
User-agent: HaosouSpider
User-agent: HappyWing
User-agent: harsilbot
User-agent: hatena antenna
User-agent: Heritrix
User-agent: ImagesiftBot
User-agent: kazbtbot
User-agent: Kraken
User-agent: LinerBot
User-agent: linkdebot
User-agent: Linkfluence Yak Bot
User-agent: mail.RU_Bot
User-agent: MetaJobBot
User-agent: Monsidobot
User-agent: netEstate
User-agent: OGDWCtcxCrawler
User-agent: PetalBot
User-agent: ResearchBot
User-agent: Riddler
User-agent: SentiBot
User-agent: rogerbot
User-agent: Semanticbot
User-agent: SemanticScholarBot
User-agent: SirdataBot
User-agent: spbot
User-agent: special_archiver
User-agent: SplitSignalBot
User-agent: Tag-Crawler
User-agent: Testcrawler
User-agent: thinkers-bot
User-agent: Toplistbot
User-agent: uipbot/1.0
User-agent: urlsuma
User-agent: User-agent
User-agent: VsuSearchSpider
User-agent: weborama-fetcher
User-agent: WiseGuys Robot
User-agent: wpbot
User-agent: Yeti
Disallow: /

# ad-bots
User-agent: AmazonAdBot
Disallow: /stats/*
Disallow: /*?config*
Disallow: /*.xmli*
Disallow: /*?service=Ajax
Disallow: /*?service=ajax
Disallow: /config/*
Disallow: /test/*
Disallow: /Test/*
Disallow: /template/*
Disallow: /*?*token=*
Disallow: /*?*eventId=*
Disallow: /static/*
Disallow: /migration_import_no_section/*
Disallow: /secure/
Disallow: /socialmedia/*
Disallow: *reader_id=READER_ID*
Disallow: /suche/*
Disallow: /*?widgetid=
Disallow: /newsletter-result/
Disallow: *tpcc=*
Disallow: /resources/
Disallow: /bin/
Disallow: /downloads/
Disallow: /service/newsletter-adconsent
Disallow: /pagespeed_static/
Disallow: /resources/img/*icon*pagespeed

# disallow only articles
User-agent: DuckAssistBot
User-agent: Gemini-Deep-Research
User-agent: ChatGPT-User
User-agent: Google-NotebookLM
User-agent: GoogleAgent-Mariner
User-agent: meta-externalfetcher
User-agent: MistralAI-User
User-agent: NovaAct
User-agent: Perplexity-User
User-agent: Claude-SearchBot
Disallow: /*/article*.html
Disallow: /stats/*
Disallow: /*?config*
Disallow: /*.xmli*
Disallow: /*?service=Ajax
Disallow: /*?service=ajax
Disallow: /config/*
Disallow: /test/*
Disallow: /Test/*
Disallow: /template/*
Disallow: /*?*token=*
Disallow: /*?*eventId=*
Disallow: /static/*
Disallow: /migration_import_no_section/*
Disallow: /secure/
Disallow: /socialmedia/*
Disallow: *reader_id=READER_ID*
Disallow: /suche/*
Disallow: /*?widgetid=
Disallow: /newsletter-result/
Disallow: *tpcc=*
Disallow: /resources/
Disallow: /bin/
Disallow: /downloads/
Disallow: /service/newsletter-adconsent
Disallow: /pagespeed_static/
Disallow: /resources/img/*icon*pagespeed
sitemap.xml 200 OK
Type URL Set URLs 239 entries Valid XML Yes
Sample URLs:
A+
Domain Intelligence
morgenpost.de — hosted on AWS
PASS
morgenpost.de — hosted on AWS
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Info::
Hosting: AWS
Got: AS16509
Domain expiry

Unknown

SSL certificate

70 days

Issued by Amazon

Domain age

Unknown

DNSSEC

Status unknown

Protects against DNS spoofing

Hosting

AWS

ASN AS16509

18.185.81.127

Registrar

Registrar unknown

Unlocked Name servers unknown
Expiry timeline
Today
+1 year
SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar
Hosting
IP Address 18.185.81.127
ASN AS16509 (AMAZON-02 - Amazon.com, Inc., US)
Provider AWS
Data source: whois (0.7s)

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

A+
HTTP Probe Timing
Total 163 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
60 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
34 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
35 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
163 ms
Total Time Total request time from DNS lookup through full response.
163 ms

Connection waterfall

DNS Lookup 60 ms TCP Connect 34 ms TLS Handshake 35 ms Server Processing 34 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback