alibaba.com describes itself as "Find quality Manufacturers, Suppliers, Exporters, Importers, Buyers, Wholesalers, Products and Trade Leads from our award-winning International Trade Site. Import & Export on…". It was registered in 1999, served from Sterling, United States. It has a valid HTTPS certificate, 3 of 6 common security headers.
What is alibaba.com about?
The words appearing most often on the homepage, excluding common filler, are
a rough indication of subject matter rather than a description of the business:
- prom ×620
- prod ×401
- header ×393
- comp ×340
- sctnh ×270
- base ×262
- signin ×226
- prom01 ×200
- meta ×190
- https ×172
Does alibaba.com publish the usual trust pages?
All four of the pages a established business normally publishes were found:
about, contact, privacy and terms.
These were checked at conventional paths only, so a site using different URLs may
publish them elsewhere.
How does alibaba.com compare with other domains analysed here?
Measured against the 12 domains in this index. This is a
small, self-selected sample — the domains people happened to look up — not a
representative sample of the web.
| Response time | Faster than 25% of them (median 467ms) |
|---|---|
| Security headers | More than 55% of them |
| Domain age | Older than 45% of them |
Related domains in this index
Other analysed domains served from the same country:
When was alibaba.com registered?
alibaba.com was registered on 15 April 1999, which makes it about 27 years old.
A registration this old means the domain has been renewed repeatedly, which costs money every year and is not something abandoned or disposable projects tend to do.
The registrar of record is Alibaba Cloud Computing (Beijing) Co., Ltd..
Registration runs until 23 May 2030.
The domain carries 4 registry locks, which blocks unauthorised transfer or deletion.
| Registered | 15 April 1999 |
|---|---|
| Expires | 23 May 2030 |
| Registrar | Alibaba Cloud Computing (Beijing) Co., Ltd. |
| Registry status | client transfer prohibited, server delete prohibited, server transfer prohibited, server update prohibited |
Where is alibaba.com hosted?
The first address resolves to infrastructure in Sterling, United States.
The network is operated by Alibaba Cloud LLC (AS45102 Alibaba (US) Technology Co., Ltd.).
Hosting location describes where the responding server sits, not where the business is. A CDN will report its nearest edge rather than the origin.
What is alibaba.com running on?
No platform, framework or analytics fingerprints were found in the homepage markup of alibaba.com. That usually means hand-written HTML, an uncommon stack, or a page assembled entirely at the edge.
No recognisable platform, framework or analytics fingerprints were found in the homepage markup.
How does the homepage respond?
The server answered with HTTP 200 over
HTTPS.
At 938ms to first byte this response is slow for a homepage measured from a single European location.
The HTML weighs 225KB, which is ordinary for a homepage.
The HTML is compressed with gzip.
| Server header | not disclosed |
|---|---|
| Compression | gzip |
| Page size | 230,058 bytes |
| Declared language | en |
| Mobile viewport | declared |
What does the homepage say about itself?
The title runs to 108 characters, so search results will truncate it and the end of the sentence will not be read.
The meta description is 186 characters and will be cut short in most result layouts.
No H1 heading was found, so the page offers no single top-level statement of what it is.
All 34 images on the homepage have alt attributes.
| Title | Alibaba.com: Manufacturers, Suppliers, Exporters & Importers from the world's largest online B2B marketplace (108 chars) |
|---|---|
| Meta description | Find quality Manufacturers, Suppliers, Exporters, Importers, Buyers, Wholesalers, Products and Trade Leads from our award-winning International Trade Site. Import & Export on alibaba.com (186 chars) |
| H1 | — none — (0 on the page) |
| Canonical | https://www.alibaba.com |
| Open Graph title | Find quality Manufacturers, Suppliers, Exporters, Importers, Buyers, Wholesalers, Products and Trade Leads from our award-winning International Trade Site. Import & Export on alibaba.com |
| Headings / images | 0 H2s, 34 images (0 without alt text) |
Is alibaba.com served over a valid certificate?
The HTTPS certificate is issued by GlobalSign nv-sa and is
valid until 2027-03-26, which is 172 days from the date of this check. It covers
435 hostnames.
- *.alibaba.com
- gw.api.alibaba.com
- m.dutch.alibaba.com
- m.indonesian.alibaba.com
- service.blue.alibaba.com
- *.10e.alibaba-inc.com
- *.4.alibaba-inc.com
- *.aas-ehp-data-service.amap.com
- *.ad.alibaba-inc.com
- *.ade.taobao.org
- *.admin.alibaba.com
- *.admin.shejijia.com
The certificate has 172 days left to run.
It covers 435 hostnames, which is characteristic of a shared or platform-issued certificate rather than one bought for this domain alone.
Which security headers does it set?
3 of 6 are set (HSTS, X-Content-Type-Options, X-Frame-Options). Absent: Content Security Policy, Referrer-Policy, Permissions-Policy.
With no Content Security Policy, any script that reaches the page — including one injected through a compromised third-party dependency — runs with full access to it.
| Header | Set | Value |
|---|---|---|
| HSTS | yes | max-age=31536000 |
| Content Security Policy | no | — |
| X-Content-Type-Options | yes | nosniff |
| X-Frame-Options | yes | DENY |
| Referrer-Policy | no | — |
| Permissions-Policy | no | — |
How is DNS configured for alibaba.com?
| IP addresses | 47.246.136.52, 47.246.137.105, 47.246.136.156, 47.246.131.198 |
|---|---|
| Reverse DNS | 47.246.136.52, 47.246.137.105 |
| Name servers | ns1.alibabadns.com, ns2.alibabadns.com |
| Mail (MX) | mx01.mail.alibaba.com (pri 10), mx02.mail.alibaba.com (pri 20) |
| SPF | v=spf1 include:spf1.alibaba.mail.aliyun.com -all |
| TXT records | 11 |
alibaba.com resolves to 4 addresses, which indicates load balancing or a CDN rather than a single origin server.
Mail is handled by 2 exchangers.
An SPF record is published, giving receiving servers a rule for which hosts may send as this domain.
Reverse DNS resolves to 47.246.136.52, 47.246.137.105, which usually names the hosting provider.
Who runs DNS and mail for alibaba.com?
Mail exchangers point at hosts that do not match any major provider, which usually means self-hosted or niche-provider mail.
No AAAA records are published, so the site is reachable over IPv4 only.
What else is worth noting about alibaba.com?
3 of 3 externally hosted scripts carry no subresource integrity hash. If one of those hosts were compromised, the replacement script would run with full access to the page.
Can alibaba.com be spoofed in email?
DMARC is set to reject, the strictest setting: mail that fails authentication is refused outright. This is the configuration that actually stops domain spoofing.
No CAA records are published, so any certificate authority may issue a certificate for this domain.
The zone is not DNSSEC-signed. That is still the norm for most domains, but it means DNS answers cannot be cryptographically verified.
What does robots.txt allow?
robots.txt is 5,406 bytes and names
6 user-agent groups.
It does not blanket-disallow general crawlers.
No sitemap is declared in robots.txt.
AI crawler policy
| Crawler | Policy |
|---|---|
| gptbot | blocked |
| google-extended | blocked |
No sitemap is declared in robots.txt, so crawlers must discover pages by following links.
Every named AI crawler is blocked (gptbot, google-extended). This domain has opted out of AI training and AI answer surfaces wholesale.
What structured data does the homepage publish?
- WebSite
- SearchAction
- EntryPoint
The homepage publishes 3 structured data types: WebSite, SearchAction, EntryPoint.
What does alibaba.com load from third parties?
The homepage pulls resources from 5 third-party hosts (accio.com, assets.alicdn.com, g.alicdn.com, s.alicdn.com, sc01.alicdn.com). Each one sees the visitor IP and user agent on every page load.
5 cookies are set before any interaction (JSESSIONID, sc_g_cfg_f, cna, ug_se_c, ug_se_c_tag). 1 lacks the Secure flag.
| Cookie | Secure | HttpOnly | SameSite |
|---|---|---|---|
| JSESSIONID | no | yes | none/unset |
| sc_g_cfg_f | yes | no | none/unset |
| cna | yes | no | none |
| ug_se_c | yes | no | none/unset |
| ug_se_c_tag | yes | no | none/unset |
Does alibaba.com settle on one address?
Plain HTTP redirects to HTTPS, so visitors who type the bare address still land on the secure version.
Both alibaba.com and www.alibaba.com answer with 200 and neither redirects to the other. Search engines therefore see two complete copies of the site, and link equity is split between them unless a canonical tag resolves it.
How easily can alibaba.com be crawled?
No readable sitemap was found, so crawlers have to discover every page by following links.
A deliberately invalid URL returns HTTP 200 rather than 404. That is a soft 404: every mistyped or stale link becomes an indexable page, which inflates the site with duplicates.
What tracking does alibaba.com run?
No analytics or advertising trackers were detected on the homepage of alibaba.com, which is unusual for a commercial site.
How does alibaba.com look when shared?
2 of 5 social preview tags are set. Missing: og:description, og:image, twitter:card.
The page declares 18 hreflang alternates (fr, es, de, it, pt, ru, ar, ko, en, ja, tr, th), so it targets more than one language or region.
How are images, fonts and scripts handled?
34 images on the homepage, 0 of them lazy-loaded (0%).
All image references use JPEG, PNG or GIF. WebP or AVIF typically cut image weight substantially at the same visual quality.
No srcset attributes are used, so every device is served the same image size regardless of screen.
The page pulls 1 external stylesheet and 6 external scripts, with 7 carrying defer or async.
Is alibaba.com accessible and current?
The page uses 3 landmark elements and 25 ARIA attributes.
No skip-to-content link was found, which keyboard users rely on to bypass navigation.
Can search engines index alibaba.com?
Nothing on the homepage prevents indexing: no noindex is set in the robots meta tag or the X-Robots-Tag header.
The homepage carries 32 internal and 0 external links across 0 outside hosts.
Visible text makes up 58% of the HTML.
How is alibaba.com delivered?
The HTML is served with Cache-Control: no-cache, no-store, max-age=0, must-revalidate.
HTTP/3 is advertised via alt-svc, so modern browsers will upgrade to QUIC after the first visit.
The TLS certificate also covers 5 subdomains: gw.api.alibaba.com, m.dutch.alibaba.com, m.indonesian.alibaba.com, service.blue.alibaba.com, admin.alibaba.com.
- gw.api.alibaba.com
- m.dutch.alibaba.com
- m.indonesian.alibaba.com
- service.blue.alibaba.com
- admin.alibaba.com
Frequently asked questions
Does alibaba.com set the usual HTTP security headers?
It sets 3 of 6. The ones not present are: Content Security Policy, Referrer-Policy, Permissions-Policy.
Does alibaba.com allow AI crawlers?
No — robots.txt blocks gptbot, google-extended.
Where does this data come from?
Every figure was measured by our own server on 4 October 2026: DNS lookups, one HTTPS request to the homepage, a TLS handshake and a request for robots.txt. No third-party SEO API is involved.
Is any of this traffic or authority data?
No. Traffic, authority and ranking figures cannot be measured by inspecting a domain, only modelled. Everything here is a direct observation.
I own alibaba.com and want this page removed.
Ask through the contact page on this site, from an address at the domain, and the report will be taken down. It only ever shows what the domain already serves publicly.
Analysed 4 October 2026.
Analyse another domain →