Audit: instagram.com

Audited on 3 Sep 2026

Needs attention

  • TLS certificate expires in 8 days If auto-renewal is configured, it has not run yet.
  • 6 AI crawlers are blocked Intentional for some sites, accidental for most: GPTBot, ClaudeBot, PerplexityBot, Google-Extended, Applebot-Extended.
68
overall score
On-page SEO
0
Crawlability
67
TLS & security
83
Network
83
Email
90
DNS
83

The site is up · responded in 145 ms

  • Reachable 0% of the last 24 hours
  • Outages cost you traffic and rankings while they last, and they rarely happen while you are watching.

On-page SEO

0/100
  • ? Page indexing The page was not fetched
  • ? On-page markup The page was not fetched

Crawlability

67/100
  • robots.txt present + valid Parsed cleanly · 5 sitemap(s) declared
  • Sitemap.xml is valid XML Present but does not parse — EntityRef: expecting ';'

TLS & security

83/100
  • TLS handshake succeeds
  • Certificate not expiring soon -11 days left

Network

83/100
  • Hostname resolves to an A record 57.144.20.34
  • ! Server header does not leak version

Email

90/100
  • MX records valid + reachable
  • SPF record present v=spf1 include:facebookmail.com include:_spf.fb.com -all
  • DMARC record present
  • DMARC policy enforced p=reject
  • ! DKIM key published Tried default + common selectors; supply your real selector at /dkim-lookup

DNS

83/100
  • A records resolve
  • NS records present
  • MX records present
  • DNS resolvers agree on the same A record 45% of 12 resolvers agree
  • Domain registration not expiring soon 2813 days left
  • Domain is established 22y 2m 28d (2004-06-04)

What changed

Nothing has changed on instagram.com since we started watching it.

Certificates expire, DNS gets edited, a header goes missing in a deploy. Prove the domain is yours and we watch it on a schedule — free — and email you the moment something moves, so you hear it from us instead of from a customer.

Tech stack detected

1 technology · Pro: track changes over time →

Signature-based identification from the public homepage. Pattern set is fixed; nothing is sent to third parties.

Analytics

  • Google Analytics

A certificate that expires on Tuesday should not wait until Friday. Prove a domain is yours and we check it free, once a week, emailing you anything that changed. Pro checks it once a day, looks at every host on the domain, and keeps 365 days of history — so you hear about a problem in hours rather than days.

Compare plans →