https://www.xictraq.com/en/blog Website monitoring, security, compliance & analytics — practical know-how. en-US https://www.xictraq.com/en/blog/strikethrough-prices-black-friday-30-day-price-evidence https://www.xictraq.com/en/blog/strikethrough-prices-black-friday-30-day-price-evidence Sat, 17 Oct 2026 00:00:00 +0000 On Black Friday, every struck price in Germany must come with the lowest price of the past 30 days. How price history and dated screenshots back that up. https://www.xictraq.com/en/blog/ai-gift-questions-brand-mentioned-holiday-season https://www.xictraq.com/en/blog/ai-gift-questions-brand-mentioned-holiday-season Fri, 16 Oct 2026 00:00:00 +0000 Gift questions also land in AI chats. How retailers set up a seasonal prompt set and track from October to December whether AI answers name their brand. https://www.xictraq.com/en/blog/payment-methods-analysis-checkout-abandonment https://www.xictraq.com/en/blog/payment-methods-analysis-checkout-abandonment Thu, 15 Oct 2026 00:00:00 +0000 Payment method analysis: measure completion rates and failed payments per method and find out which payment option makes buyers abandon your shop checkout. https://www.xictraq.com/en/blog/accessibility-enforcement-remediation-evidence-authority https://www.xictraq.com/en/blog/accessibility-enforcement-remediation-evidence-authority Wed, 14 Oct 2026 00:00:00 +0000 German accessibility enforcement under the BFSG: how the Section 29 deadlines work and how shops prove their remediation to the authority with dated WCAG scans. https://www.xictraq.com/en/blog/black-friday-page-permanent-url-every-year-seo https://www.xictraq.com/en/blog/black-friday-page-permanent-url-every-year-seo Tue, 13 Oct 2026 00:00:00 +0000 A permanent address for your Black Friday page keeps its links over the years. What Google recommends and how the page stays indexed between sales events. https://www.xictraq.com/en/blog/fake-shops-brand-imitators-holiday-season-detect https://www.xictraq.com/en/blog/fake-shops-brand-imitators-holiday-season-detect Mon, 12 Oct 2026 00:00:00 +0000 In the holiday season, copies of your shop appear under other domains. How to spot domain variants and new certificates early and prepare the takedown in time. https://www.xictraq.com/en/blog/year-over-year-q4-reports-shifting-sale-days https://www.xictraq.com/en/blog/year-over-year-q4-reports-shifting-sale-days Sun, 11 Oct 2026 00:00:00 +0000 In 2026 Black Friday falls on November 27 and Cyber Monday moves into November. How a date-based year-over-year comparison pits sale days against ordinary days, and how shops compare by weekday and report adjusted figures. https://www.xictraq.com/en/blog/cyber-insurance-website-evidence-for-agency-clients https://www.xictraq.com/en/blog/cyber-insurance-website-evidence-for-agency-clients Sat, 10 Oct 2026 00:00:00 +0000 Insurers ask about patches, backups and access before cover starts. Which website details an agency can measure and document for its clients, and where the limit lies. https://www.xictraq.com/en/blog/worker-pool-exhaustion-queueing-latency-before-errors https://www.xictraq.com/en/blog/worker-pool-exhaustion-queueing-latency-before-errors Fri, 09 Oct 2026 00:00:00 +0000 A full PHP-FPM pool first causes waiting time, then 504 and 502 errors. Learn which limits apply and which metrics reveal the growing queue early. https://www.xictraq.com/en/blog/frozen-user-agent-strings-device-reports https://www.xictraq.com/en/blog/frozen-user-agent-strings-device-reports Thu, 08 Oct 2026 00:00:00 +0000 Android 10, macOS 10.15.7, Windows NT 10.0: browsers report fixed values. Which device report details still hold and which are only constants. https://www.xictraq.com/en/blog/fake-captcha-overlays-hijacked-site-spreads-malware https://www.xictraq.com/en/blog/fake-captcha-overlays-hijacked-site-spreads-malware Wed, 07 Oct 2026 00:00:00 +0000 ClickFix on hijacked websites: how fake CAPTCHA overlays get into a page, which traces remain in the source and how operators can detect them early. https://www.xictraq.com/en/blog/withdrawal-button-online-shop-function-monitoring https://www.xictraq.com/en/blog/withdrawal-button-online-shop-function-monitoring Tue, 06 Oct 2026 00:00:00 +0000 Since 19 June 2026, Section 356a BGB has required a withdrawal function in German online shops. How to monitor the two-stage procedure as a browser flow without triggering real withdrawals, and how dated captures document permanent availability. https://www.xictraq.com/en/blog/root-zone-ksk-rollover-october-2026-resolver-check https://www.xictraq.com/en/blog/root-zone-ksk-rollover-october-2026-resolver-check Mon, 05 Oct 2026 00:00:00 +0000 From 11 October 2026 only KSK-2024 signs the root zone. Why servers with their own resolver then resolve nothing, how to check Key Tag 38696 and how to recognise an outage. https://www.xictraq.com/en/blog/deploy-as-outage-cause-rollback-and-verify https://www.xictraq.com/en/blog/deploy-as-outage-cause-rollback-and-verify Sun, 04 Oct 2026 00:00:00 +0000 Roughly 70 percent of outages are due to changes in a live system. How a fixed change window, an automated post-deploy check and a practised rollback cut outage duration from hours to minutes. https://www.xictraq.com/en/blog/maintenance-window-503-retry-after-done-right https://www.xictraq.com/en/blog/maintenance-window-503-retry-after-done-right Sat, 03 Oct 2026 00:00:00 +0000 When the maintenance window should run, what a 503 actually promises and how to set Retry-After - all three measurable before the date. https://www.xictraq.com/en/blog/field-data-chrome-only-ios-safari-blind-spot https://www.xictraq.com/en/blog/field-data-chrome-only-ios-safari-blind-spot Fri, 02 Oct 2026 00:00:00 +0000 Public Core Web Vitals field data comes from Chrome only: iPhones, Safari, Firefox and in-app browsers are missing entirely. What that means for the assessment, how large the invisible share in Germany is, and how first-party field measurement closes the gap. https://www.xictraq.com/en/blog/bfcache-back-navigation-analytics-blind-spot https://www.xictraq.com/en/blog/bfcache-back-navigation-analytics-blind-spot Thu, 01 Oct 2026 00:00:00 +0000 The back/forward cache serves pages without a new build. Why most measurement scripts lose these visits and how pageshow closes the gap. https://www.xictraq.com/en/blog/agency-handover-protocol-client-websites https://www.xictraq.com/en/blog/agency-handover-protocol-client-websites Wed, 30 Sep 2026 00:00:00 +0000 Which positions belong in a handover record, which deadlines run during a domain transfer, why the auth code is not a bargaining chip, what Article 28 GDPR requires on deletion and return, and how every promised position can be measured instead of asserted. https://www.xictraq.com/en/blog/sla-measurement-point-service-credits-contract https://www.xictraq.com/en/blog/sla-measurement-point-service-credits-contract Tue, 29 Sep 2026 00:00:00 +0000 An availability promise without a measurement point, outage definition and reference period carries nothing in a dispute. What an SLA needs so the number holds. https://www.xictraq.com/en/blog/website-acceptance-test-report-burden-of-proof https://www.xictraq.com/en/blog/website-acceptance-test-report-burden-of-proof Mon, 28 Sep 2026 00:00:00 +0000 Acceptance reverses the burden of proof. Which measured values belong in an acceptance report, how the dated annex is built, and what a reservation still saves. https://www.xictraq.com/en/blog/data-processing-agreement-article-28-monitoring https://www.xictraq.com/en/blog/data-processing-agreement-article-28-monitoring Sun, 27 Sep 2026 00:00:00 +0000 The eight obligations Article 28(3) sets out for a contract with a monitoring vendor, how sub-processors are authorised, what belongs in the record of processing activities and what happens to measurement data when the contract ends. https://www.xictraq.com/en/blog/sunset-deprecation-headers-api-lifecycle-monitoring https://www.xictraq.com/en/blog/sunset-deprecation-headers-api-lifecycle-monitoring Sat, 26 Sep 2026 00:00:00 +0000 Sunset and Deprecation headers announce an API shutdown in the response header. What the two fields state, why they use two date formats and how a check rule turns them into lead time. https://www.xictraq.com/en/blog/character-encoding-broken-umlauts-after-migration https://www.xictraq.com/en/blog/character-encoding-broken-umlauts-after-migration Fri, 25 Sep 2026 00:00:00 +0000 After a server move, a database migration or a system change, pages suddenly show Grüße instead of Grüße. Where the encoding is decided, which declaration takes precedence and how to measure the state after the switch. https://www.xictraq.com/en/blog/bgp-rpki-route-hijack-reachability-monitoring https://www.xictraq.com/en/blog/bgp-rpki-route-hijack-reachability-monitoring Thu, 24 Sep 2026 00:00:00 +0000 The server is up and DNS answers, yet part of your audience does not arrive. What BGP, prefixes and RPKI have to do with it, and how to measure a partial outage. https://www.xictraq.com/en/blog/open-zone-transfer-axfr-dns-monitoring https://www.xictraq.com/en/blog/open-zone-transfer-axfr-dns-monitoring Wed, 23 Sep 2026 00:00:00 +0000 An open zone transfer hands over a domain's entire DNS record set in a single answer. How to check, restrict and continuously monitor AXFR. https://www.xictraq.com/en/blog/double-opt-in-flow-monitoring-confirmation-email https://www.xictraq.com/en/blog/double-opt-in-flow-monitoring-confirmation-email Tue, 22 Sep 2026 00:00:00 +0000 The confirmation flow breaks quietly: the form answers, the mail stalls, nobody complains. Five measuring points, matching deadlines and the evidence that consent requires. https://www.xictraq.com/en/blog/daylight-saving-time-monitoring-analytics-timezones https://www.xictraq.com/en/blog/daylight-saving-time-monitoring-analytics-timezones Mon, 21 Sep 2026 00:00:00 +0000 What happens to cron, maintenance windows, on-call shifts and reports in the night of 25 October 2026 - and what can be checked beforehand so the doubled hour does not turn into quiet data damage. https://www.xictraq.com/en/blog/gdpr-access-requests-article-15-tracking-data https://www.xictraq.com/en/blog/gdpr-access-requests-article-15-tracking-data Sun, 20 Sep 2026 00:00:00 +0000 An Article 15 request reaches your tracking data too. Two decision points determine what you disclose - and the one-month clock starts on receipt. https://www.xictraq.com/en/blog/chrome-unload-removal-complete-analytics-measurement https://www.xictraq.com/en/blog/chrome-unload-removal-complete-analytics-measurement Sat, 19 Sep 2026 00:00:00 +0000 Chrome is switching off the unload event in stages. How to capture dwell time, scroll depth and cart abandonment completely again by measuring on the visibility change. https://www.xictraq.com/en/blog/real-visitor-ip-x-forwarded-for-proxy-handling https://www.xictraq.com/en/blog/real-visitor-ip-x-forwarded-for-proxy-handling Fri, 18 Sep 2026 00:00:00 +0000 Behind a proxy, load balancer or CDN your log holds the wrong address. How to set the trust boundary and read X-Forwarded-For reliably. https://www.xictraq.com/en/blog/measure-attention-scroll-depth-instead-of-bounce-rate https://www.xictraq.com/en/blog/measure-attention-scroll-depth-instead-of-bounce-rate Thu, 17 Sep 2026 00:00:00 +0000 Bounce rate only shows whether a second page followed. Scroll depth, visible time per section and events show how far people read - and all three can be collected without touching device storage. https://www.xictraq.com/en/blog/origin-monitoring-behind-cdn-cache-hidden-outage https://www.xictraq.com/en/blog/origin-monitoring-behind-cdn-cache-hidden-outage Wed, 16 Sep 2026 00:00:00 +0000 An uptime check can report green while the origin server has long been down: the edge answers from cache. How Age and Cache-Status expose the blind flight and how two separate check paths reveal the outage before visitors do. https://www.xictraq.com/en/blog/detect-cloaking-googlebot-sees-different-content https://www.xictraq.com/en/blog/detect-cloaking-googlebot-sees-different-content Tue, 15 Sep 2026 00:00:00 +0000 Cloaking serves crawlers different content than visitors, often after a hack. How to measure the deviation with four fetches and monitor it continuously. https://www.xictraq.com/en/blog/q4-traffic-peaks-peak-season-readiness-monitoring https://www.xictraq.com/en/blog/q4-traffic-peaks-peak-season-readiness-monitoring Mon, 14 Sep 2026 00:00:00 +0000 How a shop prepares for the fourth quarter from mid-September: a staged change freeze, tighter check intervals, percentiles instead of averages, deadlines and an alert chain somebody actually acknowledges. https://www.xictraq.com/en/blog/end-of-life-web-stack-components-without-updates https://www.xictraq.com/en/blog/end-of-life-web-stack-components-without-updates Sun, 13 Sep 2026 00:00:00 +0000 Support windows for PHP, Node.js, Angular and other building blocks end by calendar. How to inventory components, calculate remaining runtime and plan the move before the CRA deadline. https://www.xictraq.com/en/blog/coop-coep-corp-cross-origin-headers-guide https://www.xictraq.com/en/blog/coop-coep-corp-cross-origin-headers-guide Sat, 12 Sep 2026 00:00:00 +0000 COOP separates window groups, COEP governs the load paths, CORP releases resources. What each header does, which values get confused and how to keep the state under observation. https://www.xictraq.com/en/blog/returning-visitors-without-cookies-measurement https://www.xictraq.com/en/blog/returning-visitors-without-cookies-measurement Fri, 11 Sep 2026 00:00:00 +0000 Cookies last seven days in Safari and at most 400 in Chrome. How to measure return anyway: as a cohort, without any read or write access to the device. https://www.xictraq.com/en/blog/keyboard-navigation-focus-testing https://www.xictraq.com/en/blog/keyboard-navigation-focus-testing Thu, 10 Sep 2026 00:00:00 +0000 Automated scans cover roughly half of all WCAG failures. Tab order, keyboard traps and obscured focus belong to the other half - here is how to test them without a mouse. https://www.xictraq.com/en/blog/incomplete-certificate-chain-detection https://www.xictraq.com/en/blog/incomplete-certificate-chain-detection Wed, 09 Sep 2026 00:00:00 +0000 The browser shows the padlock while the application fails: how an incomplete certificate chain arises, why it stays invisible and how to prove it. https://www.xictraq.com/en/blog/health-check-endpoint-design-deep-checks https://www.xictraq.com/en/blog/health-check-endpoint-design-deep-checks Tue, 08 Sep 2026 00:00:00 +0000 Why a 200 from the health endpoint says nothing about the database - and how to separate liveness, readiness and startup with time budgets and status codes. https://www.xictraq.com/en/blog/canonical-tag-errors-monitoring-duplicate-content https://www.xictraq.com/en/blog/canonical-tag-errors-monitoring-duplicate-content Mon, 07 Sep 2026 00:00:00 +0000 Canonical declarations rarely fail on the line itself, but on an invalid head section, rendering and contradictions. How to measure the state continuously. https://www.xictraq.com/en/blog/version-banners-server-headers-disclosure https://www.xictraq.com/en/blog/version-banners-server-headers-disclosure Sun, 06 Sep 2026 00:00:00 +0000 Server, X-Powered-By, X-AspNet-Version: response headers name product and version. What the disclosure causes, which setting helps and what stays visible afterwards. https://www.xictraq.com/en/blog/chrome-two-week-releases-test-windows-2026 https://www.xictraq.com/en/blog/chrome-two-week-releases-test-windows-2026 Sat, 05 Sep 2026 00:00:00 +0000 From 8 September 2026 Chrome ships a new major version every two weeks. What that means for test windows, beta checks and monitoring browser flows. https://www.xictraq.com/en/blog/monitoring-coverage-audit-url-inventory https://www.xictraq.com/en/blog/monitoring-coverage-audit-url-inventory Fri, 04 Sep 2026 00:00:00 +0000 Green means checked, not healthy. How a complete URL inventory grows out of sitemap, server log, crawl and search index, and where each source fails on its own. https://www.xictraq.com/en/blog/cookie-banner-reform-2026-consent-draft https://www.xictraq.com/en/blog/cookie-banner-reform-2026-consent-draft Thu, 03 Sep 2026 00:00:00 +0000 A proposal from Brussels would move the cookie rules into the General Data Protection Regulation. What Section 25 TDDDG requires today, what Articles 88a and 88b propose, where the procedure stands and which work pays off under either regime. https://www.xictraq.com/en/blog/orphan-pages-internal-linking-monitoring https://www.xictraq.com/en/blog/orphan-pages-internal-linking-monitoring Wed, 02 Sep 2026 00:00:00 +0000 Orphan pages are live, yet no internal link points to them. Here is how comparing crawl, sitemap, server logs and pageview data finds them reliably. https://www.xictraq.com/en/blog/session-cookies-secure-httponly-samesite https://www.xictraq.com/en/blog/session-cookies-secure-httponly-samesite Tue, 01 Sep 2026 00:00:00 +0000 Secure, HttpOnly and SameSite decide how hard a session identifier is to steal. What each attribute does, what it does not do, and how to keep measuring the state. https://www.xictraq.com/en/blog/user-paths-page-transitions-analytics https://www.xictraq.com/en/blog/user-paths-page-transitions-analytics Mon, 31 Aug 2026 00:00:00 +0000 Analysing user paths means measuring transitions: which edge between two pages loses visitors, and why referrer policies and soft navigation break the chain. https://www.xictraq.com/en/blog/stale-cache-after-deploy-detecting-old-content https://www.xictraq.com/en/blog/stale-cache-after-deploy-detecting-old-content Sun, 30 Aug 2026 00:00:00 +0000 The new version is live, visitors still see the old one. How cache layers serve stale pages and how to check after every deploy what actually reaches people. https://www.xictraq.com/en/blog/hreflang-errors-multilingual-sites-monitoring https://www.xictraq.com/en/blog/hreflang-errors-multilingual-sites-monitoring Sat, 29 Aug 2026 00:00:00 +0000 hreflang fails quietly: missing return links, targets that 404 or redirect, canonical conflicts. How to check every language version continuously.