Skip to content
https://deakin.edu.au

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
83
GRADE
B
FIX
1
REVIEW
5
PASS
3
INFO
0
Probed from Madrid, Spain
302 Found
Checks
9
3 PASS 5 REVIEW 1 FIX
D
CDN & Delivery
Action
No CDN detected
FIX
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

B
Redirect Chain
1 redirect(s), 1243 ms total
REVIEW
1 redirect(s), 1243 ms total
Info::
Single redirect
Got: https://deakin.edu.au → https://www.deakin.edu.au/ (302)
Info::
WWW normalization redirect
Info::
Uses 302 (temporary) redirect
If permanent, use 301 instead.
Got: https://deakin.edu.au
Warning::
Redirect overhead: 1243 ms total
Got: 1243 ms

https://deakin.edu.au

831 ms · HTTP/1.0

302

https://www.deakin.edu.au/

411 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://deakin.edu.au302831 msHTTP/1.0BigIP
2https://www.deakin.edu.au/403411 msHTTP/1.1cloudflare

See the visual redirect chain in the HTTP Probe tab →

If permanent, use 301 instead.

Why this matters

302 (Found) is for genuinely temporary redirects — if this redirect is permanent, switch to 301 to preserve SEO equity.

Learn more ▾

Search engines treat 302 as temporary, keeping the original URL indexed and not transferring full link equity to the destination. Use 301 (Moved Permanently) for permanent redirects (HTTP→HTTPS, www-vs-non-www, URL restructures).

Source: Google Search Central

B
Crawlability
no robots.txt, no sitemap
REVIEW
no robots.txt, no sitemap
Info::
No robots.txt found
robots.txt is optional but recommended. It tells search engine crawlers which pages to index.
Info::
No sitemap.xml found
A sitemap helps search engines discover and index your pages more efficiently.

robots.txt is optional but recommended. It tells search engine crawlers which pages to index.

Why this matters

No robots.txt — crawlers fetch /robots.txt and get 404; not breaking but means default crawl behavior with no directives or sitemap reference.

Learn more ▾

A minimal robots.txt with `User-agent: * / Allow: / / Sitemap: https://example.com/sitemap.xml` covers the basics. Without it, crawlers behave fine but lose the sitemap signal and can't be selectively blocked from crawl-traps.

Source: robotstxt.org

A sitemap helps search engines discover and index your pages more efficiently.

Why this matters

No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.

Learn more ▾

A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.

Source: sitemaps.org / Google Search Central

robots.txt No robots.txt found

No robots.txt found

This is fine for most sites — a missing robots.txt allows all crawling by default.

sitemap.xml No sitemap found

No sitemap found

Adding a sitemap helps search engines discover your pages.

C
URL Variants
Action
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Warning::
HTTP→HTTPS redirect uses 302 instead of 301
Got: 302 temporary redirect Expected: 301 permanent redirect

www / non-www

200https://www.deakin.edu.au/
200https://deakin.edu.au/

Inconsistent — duplicate content risk

HTTP → HTTPS

302http://deakin.edu.au/ → https://www.deakin.edu.au/

Use 301 (permanent) instead of 302 (temporary)

B
HTTP Probe Timing
Total 1153 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
REVIEW
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
323 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
274 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
282 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
1.15 s
Total Time Total request time from DNS lookup through full response.
1.15 s

Connection waterfall

DNS Lookup 323 ms TCP Connect 274 ms TLS Handshake 282 ms Server Processing 275 ms Content Transfer 0 ms
B
TLS Certificate Expiry & Recommendations
333 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

333
days left
0d 30d 60d 90d+

Recommended actions

  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A
DNS Records
2 A records, 1827 ms lookup
PASS
2 A records, 1827 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 128.184.204.21, 128.184.20.21
Info::
Has 4 IPv6 (AAAA) record(s)
Got: 2402:6940:1201:2023:128:184:235:77, 2402:6940:1201:2022:128:184:233:77, 2402:6940:1401:2024:128:184:237:77, 2402:6940:1401:2025:128:184:239:77
Info::
2 nameserver(s) configured
Got: ns1.deakin.edu.au, ns2.deakin.edu.au
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Warning::
DNS resolution is slow (1827 ms)
Slow DNS adds latency to every page load. Consider a faster DNS provider.
Got: 1827 ms
A128.184.204.21, 128.184.20.21
AAAA2402:6940:1201:2023:128:184:235:77, 2402:6940:1201:2022:128:184:233:77, 2402:6940:1401:2024:128:184:237:77, 2402:6940:1401:2025:128:184:239:77
CNAME—
NSns1.deakin.edu.au, ns2.deakin.edu.au
MX
50 deakin-edu-au.mail.protection.outlook.com
TXT
_e4ysl7ttmdh5gpgrp07jlncsf4zb6fx
adobe-idp-site-verification=5bd71650e88952fe6fd8edf8cbef968b7273cde7644c399439a9...
ms-domain-verification=df6d34a3-7539-44ac-9903-70ff3efe7620
QuoVadis=00e7e429-c31c-4cd5-85a2-8db77d6ae716
google-site-verification=wFjfTGftq9Ocvk1kY-_CW18TKNiIASS0SUOobKAD7Es
Deakin University, Victoria, Australia
4UC5GiBHR2YCmqrmpM0E5Q8JfjxIW0xTBA56XVfyXk3kMA7TSStHX649ZqFYrKNHS1F55ZQSwGkXtGuL...
nearmap-domain-verification=de87b858cc6fed6032649d9a42b208563b9452cda970bbfc32d5...
jamf-site-verification=_4k3wUiayvWMCFGKdtXHJw
atlassian-domain-verification=G2b1oQ6hrQGZEXaldy1GMSbrOTWih7cBZUEDAQs5dHJzYFkzfQ...
24xnffmfz3n5g59rm3ygsg2w5d7pvz7g
docusign=e44b508c-75ec-457a-ba19-8f6dbb0ff1ef
mentimeter-a936d05b-2d23-4656-9082-7fe391e98674
92ee1c1d-0cf5-4059-b88c-20ff7b76cfb1
$QaN*h4zF3#jPM095Zmj0kFMs0fZpsbEHTcRBUFlZssFb2HEp7*bZWMghc9D#pFFYeg48Z!npKGHFaG4...
pexip-ms-tenant-domain-verification=bb11a159-9bb6-42f7-814d-247c7a5b191e
smartsheet-site-validation=ZJaO5SE819NlwSqD1DKPW6H0K8q24nWo
apple-domain-verification=uNSjCsOa6BuBY3bH
ZOOM_verify_aZ7l1UPYTo2jKic6ZvWGqQ
amazonses:qBrQNiH9qqmGG4zbjDG5ZhFOVX6lUqhL6DPAgETWzBs=
stripe-verification=F695DBED5221C81CB31F3EF5FA67FBB11DD0FA18F16897E2BBB3EA1841F8...
onetrust-domain-verification=6619b750e31f49428d6c3ec6b3ff3e60
SPF v=spf1 include:_spf.deakin.edu.au include:spf.protection.outlook.com ~all
google-site-verification=q79DvfqAHDuoq_J00HF9VjsF-CE1IJ3FzpOL18Gk2E0
autodesk-domain-verification=QQXrvvGbr51WaspbKsXM
_dbz5k4z8d6g21fyfktb2q5inakay2uw
twilio-domain-verification=2210d9c6dcb83d4416405328cfd34dda
have-i-been-pwned-verification=dweb_ru33z00yj6k4gawxtjwzrong
docusign=83f53ae8-d5d5-46dd-ac7f-3d8cfd8e8cc0
google-site-verification=gvu9F9UUIV2qmpjvn3SbZcv5dPnZoR32B1-2vh8dqQk
dropbox-domain-verification=uuz53ny9rz1h
miro-verification=7e4cee1ac6d8058a0e0ea9000b157010b84fcf7a
mnm8g2srts6vp7n4hwcfv5y0qkl2tfth
CAALookup not available with standard resolver
Resolved in 1827 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Why this matters

DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.

Source: DNS performance benchmarks

A+
IPv6 Readiness
IPv6 reachable (274 ms)
PASS
IPv6 reachable (274 ms)
Info::
IPv6 is configured and reachable at 2402:6940:1201:2023:128:184:235:77, 2402:6940:1201:2022:128:184:233:77, 2402:6940:1401:2024:128:184:237:77, 2402:6940:1401:2025:128:184:239:77
Got: 274 ms connect
IPv6 Ready
AAAA Records 2402:6940:1201:2023:128:184:235:77, 2402:6940:1201:2022:128:184:233:77, 2402:6940:1401:2024:128:184:237:77, 2402:6940:1401:2025:128:184:239:77 Connection Reachable (274 ms)
A+
Domain Intelligence
deakin.edu.au — via Education Services Australia Limited
PASS
deakin.edu.au — via Education Services Australia Limited
Info::
DNSSEC is not enabled
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Info::
Registrar: Education Services Australia Limited
Warning::
Registrar lock is NOT enabled
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Domain expiry

Unknown

SSL certificate

333 days

Issued by DigiCert Inc

Domain age

Unknown

DNSSEC

Not enabled

Protects against DNS spoofing

Hosting

Unknown

2402:6940:1201:2023:128:184:235:77

Registrar

Education Services Australia Limited

Unlocked 2 NS records
Expiry timeline
Today
+1 year
SSL expiry Danger zone (≤30 days)
Recommended actions
  • Enable DNSSEC to protect visitors from DNS spoofing
  • Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
Registrar Education Services Australia Limited
Last Updated June 9, 2024
Name Servers ns1.deakin.edu.au, ns2.deakin.edu.au
DNSSEC Not enabled
Hosting
IP Address 2402:6940:1201:2023:128:184:235:77
Data source: rdap (1.0s)

DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.

Why this matters

Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.

Learn more ▾

DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.

Source: ICANN / RFC 4033

The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.

Why this matters

Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.

Learn more ▾

Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.

Source: ICANN / domain-security best practice

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback