Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DRedirect ChainAction2 redirect(s), 2646 ms totalFIX
https://unibas.ch
636 ms · HTTP/1.1
https://unibas.ch/de
636 ms · HTTP/1.1
https://www.unibas.ch/de
1374 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://unibas.ch | 301 | 636 ms | HTTP/1.1 | Apache |
| 2 | https://unibas.ch/de | 301 | 636 ms | HTTP/1.1 | Apache |
| 3 | https://www.unibas.ch/de | 200 | 1374 ms | HTTP/1.1 |
See the visual redirect chain in the HTTP Probe tab →
Each redirect adds latency. Try to minimize the chain to 1 hop.
Redirect chain — each hop adds latency; combine into one redirect where possible.
Source: Google Search Central / web.dev
DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BCrawlabilityrobots.txt present, sitemap with 1716 URLsREVIEW
Search engines may not be able to parse the sitemap. Fix XML validation errors.
An unparseable sitemap is silently ignored by Google — the URLs it advertises are never queued for crawl.
Learn more ▾ ▴
Google's sitemap parser is strict about XML validity. A single unescaped `&` or unclosed tag invalidates the whole file. Run your sitemap through a validator (Search Console's Sitemaps report flags it) and fix the offending entry. Most generators escape correctly; mistakes usually come from manually-written entries.
Source: sitemaps.org / Google Search Central
User-agent: *
Allow: /
Sitemap: https://www.unibas.ch/de/sitemap.xml
Sitemap: https://www.unibas.ch/en/sitemap.xml
- https://www.unibas.ch/en.html
- https://www.unibas.ch/en/News-Events.html
- https://www.unibas.ch/en/News-Events/News.html
- https://www.unibas.ch/en/News-Events/News/Uni-Agenda/Nobel-laureate-Christiane-Nuesslein-Volhard-at-the-Biozentrum.html
- https://www.unibas.ch/en/News-Events/News/Uni-Agenda/Biozentrum-Farewell-Symposium-for-Erich-Nigg.html
BTLS Certificate Expiry & Recommendations75 days until leaf cert expires — 4 issues to addressREVIEW
Certificate validity
Recommended actions
- Add includeSubDomains to the HSTS directive
- Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
ADNS Records1 A records, 320 ms lookupPASS
| A | 131.152.215.57 |
| AAAA | — |
| CNAME | — |
| NS | ns1-ext.unibas.ch, ns2-ext.unibas.ch, scsnms.switch.ch |
| MX | 10 unibas-ch.mail.protection.outlook.com |
| TXT | adobe-idp-site-verification=436f76e07f446b09133441f29006ba5d3a745ba696884502e9cd... google-site-verification=f31BGWXkgIjce5ZOz3CNdKVV9Np-_j76uZT0QiLfT9A 65t-9jh-gd5 mindmanager-verification=a80be184f50daf8680bb73ffe6ad93b72bc204aaec68be6e6b33f5b... _d9sga8js5y2hpyxq7kzpobajwsxulkv SPF v=spf1 ip4:131.152.231.230 ip4:131.152.226.208/30 include:spf.protection.outlook... MS=ms14683477 ZOOM_verify_XEObkK_wTwWD3x_cgl14Zg google-site-verification=u1RGStDhqHk6Rx70H1NUUOZEiQXJcw7qzX8vYe29C4w mistral-domain-verification=b8b4807b324a1bc50daebc68c86b08f45e476e91 ZOOM_verify_3ibFhaTdTWugZYxGjpml4g jamf-site-verification=3MP_01XF6kgHpdWpyPLuGg atlassian-domain-verification=JDxBb5EbsPH3EVNizQTCO58lFuZ0UPBsm7t1vmM3MuW/CL73hH... cisco-ci-domain-verification=1add387b964c7b722d1546a82d38823dff244ac342a3cdbf3ab... |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
Slow DNS adds latency to every page load. Consider a faster DNS provider.
DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.
Source: DNS performance benchmarks
AURL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Use 301 (permanent) instead of 302 (temporary)
AHTTP Probe TimingTotal 653 ms — DNS, TCP, TLS, TTFB, content transfer breakdownPASS
Connection waterfall
Domain IntelligenceDomain intelligence data not availableINFO
RDAP and WHOIS lookup both failed