Skip to content
https://nzz.ch

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
93
GRADE
A
FIX
0
REVIEW
3
PASS
5
INFO
1
Probed from Madrid, Spain
301 Moved Permanently
Checks
9
5 PASS 3 REVIEW
B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.nzz.ch/
200https://nzz.ch/

Inconsistent — duplicate content risk

HTTP → HTTPS

301http://nzz.ch/ → https://nzz.ch/

Consistent

B
TLS Certificate Expiry & Recommendations
178 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

178
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
B
CDN & Delivery
Cloudflare
REVIEW
Cloudflare
Info::
Site is served via Cloudflare CDN (edge: CDG)
Got: cf-ray: 9effd56e9b61b868-CDG
CDN Detected: Cloudflare
Provider Cloudflare Evidence cf-ray: 9effd56e9b61b868-CDG
A+
DNS Records
2 A records, 95 ms lookup
PASS
2 A records, 95 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.18.20.211, 104.18.21.211
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2606:4700::6812:15d3, 2606:4700::6812:14d3
Info::
2 nameserver(s) configured
Got: ns0105.secondary.cloudflare.com, ns0222.secondary.cloudflare.com
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 95 ms
Got: 95 ms
A104.18.20.211, 104.18.21.211
AAAA2606:4700::6812:15d3, 2606:4700::6812:14d3
CNAME—
NSns0105.secondary.cloudflare.com, ns0222.secondary.cloudflare.com
MX
5 nzz-ch.mail.protection.outlook.com
TXT
google-site-verification=BqwET1eLK1eX728XgQeMQZp5Dk6KBQOYeqv_1mgqqt4
SPF v=spf1 ip4:194.40.217.80 include:spf.protection.outlook.com include:amazonses.co...
airtable-verification=b34c12a97f89d57846cc460c42d4f6ec
tuerchen:74kmsddapWPJ3gBszpy2mf
google-site-verification=Bd9X02Kg3aE4IIXBie99MJz26ZxwpnpzLg0hC60R0Vk
swisssign-check=fJ7cSWfjG9dsBh34K96wRYoQUFipkyttHfu6vSUrDd
_globalsign-domain-verification=IG4UdrI9gc_SVSE132aTagdWhxkvONdbIBhHhhcMlP
mailerlite-domain-verification=c808458334c8bb2ce2401d4f5b314a59ecc65906
swisssign-check=fQjJnN5vbqU81JLXcz2oGoLwUw9VRTsOw3gBXnSevA
ca3-50ced7979e77414796eff767cf518d07
atlassian-domain-verification=nxaNw1Rd1OgCV8ZImhCXRaHc0jtaBgGhNn4nueeVr4Z93e/8Z0...
google-site-verification=32KPy4TVl3lo_EHRKJ4jSsPONfr3pOsXo3Tv5yumprQ
jamf-site-verification=RXwV6EjWqTX15b0aSzyZcw
swisssign-check=7gkTNT-JVc8xEfRiMM3peYt1bfU
1password-site-verification=VVALG3BZGBBQZGBU7H22OFK4FE
apple-domain-verification=Eo3RaF8YcMUZLfj5
tollbit-domain-verification=b97231ef118c36df71387116225f4cbbfd30e006bfc82f9f6974...
85880a3254a6d2642da7f91065052c28
adobe-idp-site-verification=305904bc29521b4fe068cfcf1c548c7923e677d62ac462b0bdec...
swisssign-check=6Mak8L2U-ajgaeg263AKO6_N9dc
facebook-domain-verification=o41fc1g162l40m4ga0st0kw19yyksl
ms-domain-verification=50c397c0-a3d4-4f24-90d1-0eceefa6ccc3
google-site-verification=iBdUfvZpz_oZixNJoPl_eC4gyxg0bYamWResDBJ2lSM
Sendinblue-code:6ef1bdca0140128a0b0cdffd769c529f
dtm-domain-verification=Iq9KZR3gfZ-nWYA5R8IXi1XjoPqdLm7zUpU1aSJW4Hs
swisssign-check=a9EWcObuGchwITF-r8uwwUk8N5I
miro-verification=6f7f0a9e108a9c0fc9f7c26b05bb1d8fffa8f933
CAALookup not available with standard resolver
Resolved in 95 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A
Redirect Chain
1 redirect(s), 196 ms total
PASS
1 redirect(s), 196 ms total
Info::
Single redirect
Got: https://nzz.ch → https://www.nzz.ch/ (301)
Info::
WWW normalization redirect

https://nzz.ch

67 ms · HTTP/1.1

301

https://www.nzz.ch/

129 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://nzz.ch30167 msHTTP/1.1cloudflare
2https://www.nzz.ch/200129 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

A+
IPv6 Readiness
IPv6 reachable (17 ms)
PASS
IPv6 reachable (17 ms)
Info::
IPv6 is configured and reachable at 2606:4700::6812:15d3, 2606:4700::6812:14d3
Got: 17 ms connect
IPv6 Ready
AAAA Records 2606:4700::6812:15d3, 2606:4700::6812:14d3 Connection Reachable (17 ms)
A+
Crawlability
robots.txt present, sitemap with 1710 URLs
PASS
robots.txt present, sitemap with 1710 URLs
Info::
robots.txt is present
Got: 2546 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 1710 entries
Info::
Sitemap index with 1710 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 2546 B Sitemaps referenced 1 User-agents Meta-ExternalAgent, TikTokSpider, Timpibot, Bytespider, cohere-ai, magpie-crawler, FriendlyCrawler, meta-externalagent, Perplexity-User, MistralAI-User, Meta-ExternalFetcher, BLP_bbot/0.1, Google-Extended, anthropic-ai, ClaudeBot, Claude-Web, PetalBot, Webzio-Extended, GPTBot, FacebookBot, NewsNow, news-please, AwarioRssBot, Quora-Bot, ChatGPT, MegaIndex.ru/2.0, Diffbot, Applebot-Extended, OAI-SearchBot, peer39_crawler/1.0, Scrapy, TurnitinBot, Googlebot-News, ChatGPT-User, omgilibot, AwarioSmartBot, ICC-Crawler, omgili, CCBot, peer39_crawler, Operator, *, DataForSeoBot, PerplexityBot, ImagesiftBot, Anchor Browser, Slurp, Amazonbot Blocking No — crawling allowed
# robots.txt for https://www.nzz.ch/


User-agent: *
Disallow: /suche$
Disallow: /suche?
Disallow: /add-visit/
Disallow: /add-article-share/
Disallow: /statistic
Disallow: /marktplaetze/
Disallow: /IDMS/
Disallow: /nzzidms/
Disallow: /test/
Disallow: /inbox
Disallow: /app.php/
Disallow: /_fragment?
Disallow: /fragments/render/
Disallow: /overlay/
Disallow: /themen/uebersicht/
Disallow: /api/
Disallow: /webview/
Disallow: /webview2/
Disallow: /best/webview2/
Disallow: /msn/
Disallow: /screen/image/
Disallow: /dynamic-partials/
Disallow: /digitaldata
Disallow: /sport/live-resultate

Sitemap: https://www.nzz.ch/sitemap.xml

User-agent: Googlebot-News
Disallow: /branded-content
Disallow: /sponsored-content
Disallow: /promoted-content
Disallow: /sponsored-topic
Disallow: /marktplaetze
Disallow: /themen-dossiers

User-agent: MegaIndex.ru/2.0
Disallow: /

User-agent: BLP_bbot/0.1
Disallow: /

User-agent: Slurp
Crawl-delay: 1

User-agent: GPTBot
Disallow: /

User-agent: ChatGPT-User
Disallow: /

User-agent: Google-Extended
Disallow: /

User-agent: CCBot
Disallow: /

User-agent: anthropic-ai
Disallow: /

User-agent: Bytespider
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: Claude-Web
Disallow: /

User-agent: cohere-ai
Disallow: /

User-agent: DataForSeoBot
Disallow: /

User-agent: Diffbot
Disallow: /

User-agent: FacebookBot
Disallow: /

User-agent: magpie-crawler
Disallow: /

User-agent: NewsNow
Disallow: /

User-agent: news-please
Disallow: /

User-agent: omgilibot
Disallow: /

User-agent: PerplexityBot
Disallow: /

User-agent: Amazonbot
Disallow: /

User-agent: Applebot-Extended
Disallow: /

User-agent: AwarioRssBot
Disallow: /

User-agent: AwarioSmartBot
Disallow: /

User-agent: FriendlyCrawler
Disallow: /

User-agent: ImagesiftBot
Disallow: /

User-agent: Meta-ExternalAgent
Disallow: /

User-agent: meta-externalagent
Disallow: /

User-agent: OAI-SearchBot
Disallow: /

User-agent: peer39_crawler
Disallow: /

User-agent: peer39_crawler/1.0
Disallow: /

User-agent: Quora-Bot
Disallow: /

User-agent: Scrapy
Disallow: /

User-agent: TurnitinBot
Disallow: /

User-agent: ChatGPT
Disallow: /

User-agent: ICC-Crawler
Disallow: /

User-agent: omgili
Disallow: /

User-agent: Operator
Disallow: /

User-agent: Perplexity-User
Disallow: /

User-agent: PetalBot
Disallow: /

User-agent: TikTokSpider
Disallow: /

User-agent: Timpibot
Disallow: /

User-agent: Webzio-Extended
Disallow: /

User-agent: MistralAI-User
Disallow: /

User-agent: Anchor Browser
Disallow: /

User-agent: Meta-ExternalFetcher
Disallow: /
sitemap.xml 200 OK
Type Sitemap Index URLs 1710 entries Valid XML Yes
Child Sitemaps:
A+
HTTP Probe Timing
Total 91 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
31 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
17 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
22 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
91 ms
Total Time Total request time from DNS lookup through full response.
91 ms

Connection waterfall

DNS Lookup 31 ms TCP Connect 17 ms TLS Handshake 22 ms Server Processing 22 ms Content Transfer 0 ms
Domain Intelligence
Domain intelligence data not available
INFO
Domain intelligence data not available

RDAP and WHOIS lookup both failed

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback