twitter.com

Last analyzed: Jan 30, 2026 at 7:45 AM UTC Refreshing...

Looks Normal

Standard signals observed

This reflects observed technical signals, not a judgment of the website's intent or safety. Wondering if Twitter is legit? Below you'll find technical signals for twitter.com including domain age, HTTPS security, DNS records, and redirect behavior to help you decide if this website is trustworthy.

Observed signals

Domain registered 26 years ago

Valid HTTPS certificate

DNS records present

No redirects

HSTS preloaded (browser-enforced)

Cloudflare returned error (possible bot protection)

AI Summary Plain-language explanation of the signals

The domain twitter.com is a website with DNS records and an active IP address 162.159.140.229, nameservers a.r06.twtrdns.net and a.u06.twtrdns.net, and no redirects detected. DNS appears to be hosted via twtrdns.net (inferred from nameservers). The domain is registered with CSC Corporate Domains, Inc. and is about 26 years old, with expiration date 2027-01-21. The site enforces HTTPS and uses a certificate issued by Let's Encrypt that is a wildcard certificate covering the domain, expiring on 2026-03-08T14:12:44Z; the final URL observed is http://twitter.com/, while https is enforced. These signals describe technical characteristics only and do not indicate intent or safety.

HTTP Response

HTTPS Direct

Final URL:

http://twitter.com/

TLS Certificate

Valid

Yes

Covers Domain

Yes

Type

Wildcard

Expires in 37 days

Certificate details

Subject: /CN=twitter.com

Issuer: /C=US/O=Let's Encrypt/CN=E7

Chain: 2 certificates

Subject Alt Names (3)

*.twitter.com

cdn.syndication.twitter.com

twitter.com matches

DNS Records

A Records

AAAA

IP addresses & nameservers

A: 162.159.140.229

NS: a.r06.twtrdns.net, a.u06.twtrdns.net, b.r06.twtrdns.net, b.u06.twtrdns.net, c.r06.twtrdns.net, c.u06.twtrdns.net, d.r06.twtrdns.net, d.u06.twtrdns.net

MX records (5)

aspmx.l.google.com

alt1.aspmx.l.google.com

alt2.aspmx.l.google.com

alt3.aspmx.l.google.com

alt4.aspmx.l.google.com

TXT records (23)

0a8c0fc6-bfa5-4ea7-b09b-87f2989022d6

MS=BEE202D20C326867290BDEFA2DDDF4594B5D6860

adobe-idp-site-verification=a2ff8fc40c434d1d6f02f68b0b1a6...

apple-domain-verification=zd1iHoEO9LILEQIq

atlassian-domain-verification=j6u0o1PTkobCXC84uEF/sWpIPta...

+ 18 more

Domain Registration

26 years old

Registered Jan 21, 2000

Registrar CSC Corporate Domains, Inc.

Expires Jan 21, 2027

More details

Last changed: Jan 17, 2026

Status: client transfer prohibited server delete prohibited server transfer prohibited +1 more

Nameservers: A.R06.TWTRDNS.NET, A.U06.TWTRDNS.NET, ...

Robots.txt (Crawl directives)

Status

200 OK

Crawl Access

Restricted (blocks all paths)

These directives apply to crawlers requesting this host.

Agents

Rules

Sitemaps

Directive breakdown

Disallow 33

Allow 15

Crawl-delay 1.0s

Sitemaps 2

Sitemap URLs

https://x.com/sitemap.xml

https://twitter.com/sitemap.xml

Raw content

86 lines View full file

# Google Search Engine Robot
# ==========================
User-agent: Googlebot

Allow: /*?s=
Allow: /*?t=
Allow: /*?ref_src=
Allow: /hashtag/*?src=
Allow: /search?q=%23
Allow: /i/api/
Disallow: /*?lang=en-ss
Allow: /*?lang=
Disallow: /search/realtime
Disallow: /search/users
Disallow: /search/*/grid

Disallow: /*/analytics
Disallow: /*/followers
Disallow: /*/following

Disallow: /account/deactivated
Disallow: /settings/deactivated

Disallow: /[_0-9a-zA-Z]+/status/[0-9]+/likes
Disallow: /[_0-9a-zA-Z]+/status/[0-9]+/retweets
Disallow: /[_0-9a-zA-Z]+/likes
Disallow: /[_0-9a-zA-Z]+/media 
Disallow: /[_0-9a-zA-Z]+/photo
Allow: /*?

User-agent: facebookexternalhit

Allow: /*?lang=
Allow: /*?s=
Allow: /*?t=
Allow: /*?ref_src=
Allow: /hashtag/*?src=
Allow: /search?q=%23
Allow: /i/api/
Disallow: /search/realtime
Disallow: /search/users
Disallow: /search/*/grid

Disallow: /*?
Disallow: /*/followers
Disallow: /*/following

Disallow: /account/deactivated
Disallow: /settings/deactivated

Disallow: /[_0-9a-zA-Z]+/status/[0-9]+/likes
Disallow: /[_0-9a-zA-Z]+/status/[0-9]+/retweets
Disallow: /[_0-9a-zA-Z]+/likes
Disallow: /[_0-9a-zA-Z]+/media 
Disallow: /[_0-9a-zA-Z]+/photo

User-Agent: Google-Extended
Disallow: *

User-Agent: FacebookBot
Disallow: *

User-agent: Discordbot
Disallow: *

User-agent: Bingbot
Disallow: *

# Every bot that might possibly read and respect this file
# ========================================================
User-agent: *
Disallow: /


# WHAT-4882 - Block indexing of links in notification emails. This applies to all bots.
# =====================================================================================
Disallow: /i/u
Noindex: /i/u

# Wait 1 second between successive requests. See ONBOARD-2698 for details.
Crawl-delay: 1

# Independent of user agent. Links in the sitemap are full URLs using https:// and need to match
# the protocol of the sitemap.
Sitemap: https://x.com/sitemap.xml
Sitemap: https://twitter.com/sitemap.xml

Robots.txt directives are advisory instructions for crawlers and do not enforce access control.

Tech Stack

Platform

Not detected

JS Framework

React

Server

Express

CDN

Cloudflare

Analytics

Not detected

Security Headers

4 / 6

Cloudflare Express React

HSTS CSP X-Frame-Options X-Content-Type-Options

Detection evidence

CSP:

content-security-policy header present

HSTS:

strict-transport-security header present

React:

React library detected in page

Express:

x-powered-by header: 'Express'

Cloudflare:

cf-ray header present (IAD)

X-Frame-Options:

x-frame-options header present

X-Content-Type-Options:

x-content-type-options header present

Technologies detected from HTTP headers and HTML patterns. Detection is passive and may not capture all technologies.

Check Another Domain