Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.BRedirect Chain2 redirect(s), 532 ms totalREVIEW
https://clevelandclinic.org
66 ms · HTTP/1.1
https://www.clevelandclinic.org/
113 ms · HTTP/1.1
https://my.clevelandclinic.org/
353 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://clevelandclinic.org | 302 | 66 ms | HTTP/1.1 | cloudflare |
| 2 | https://www.clevelandclinic.org/ | 302 | 113 ms | HTTP/1.1 | cloudflare |
| 3 | https://my.clevelandclinic.org/ | 200 | 353 ms | HTTP/1.1 | cloudflare |
See the visual redirect chain in the HTTP Probe tab →
Each redirect adds latency. Try to minimize the chain to 1 hop.
Redirect chain — each hop adds latency; combine into one redirect where possible.
Source: Google Search Central / web.dev
If permanent, use 301 instead.
302 (Found) is for genuinely temporary redirects — if this redirect is permanent, switch to 301 to preserve SEO equity.
Learn more ▾ ▴
Search engines treat 302 as temporary, keeping the original URL indexed and not transferring full link equity to the destination. Use 301 (Moved Permanently) for permanent redirects (HTTP→HTTPS, www-vs-non-www, URL restructures).
Source: Google Search Central
BTLS Certificate Expiry & Recommendations88 days until leaf cert expires — 2 issues to addressREVIEW
Certificate validity
Recommended actions
- Extend HSTS max-age to at least 31536000 (1 year) to meet the preload list criteria
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
BCDN & DeliveryCloudflareREVIEW
A+DNS Records2 A records, 61 ms lookupPASS
| A | 104.18.32.216, 172.64.155.40 |
| AAAA | 2606:4700:4402::6812:20d8, 2a06:98c1:3103::ac40:9b28 |
| CNAME | — |
| NS | bob.ns.cloudflare.com, etta.ns.cloudflare.com |
| MX | 10 us-smtp-inbound-2.mimecast.com 10 us-smtp-inbound-1.mimecast.com |
| TXT | d365mktkey=3gwph51api0dfr21luukz4df7 google-site-verification=01A3wN51E8DU33ZpZlgHePSdKCPTXnwsLMFMkPzRg_I d365mktkey=bdnrgug1lm2owwuuv3wofe3j google-site-verification=jiByQXocollPQ2zxJrg_u2ViUjRcBsaxy8bc0-M8EWQ google-site-verification=JbmfgQrxaJNkFtbuyBrETJRlUeAE8CB-XOn9L7N9Zig google-site-verification=YAkTaotFYE_Y8NGl0OVXrzJtVwgIy83UPdnPvLDSupI 7f576db0-d122-4e47-8a99-2393581c66e5 MS=ms25572796 facebook-domain-verification=3lrbkbzm0s2x1t20o5zbm9e8tlaqd5 d365mktkey=69fhnrl1ynapps6shvxrngv3m d365mktkey=6vnv94i0t2irkvtbnd7t9qlg5 vZDYsw8mvEaAKUOOQV0AiSUAKcumtLY8gnaetoVvFfDatRSItRpXDv8Tpnr7Zk9WAKdfMNfvvcMRUWA6... Cyber Security. google-site-verification=JbmfgQrxaJNkFtbuyBrETJRlUeAE8CB-XOn9L7N... SPF v=spf1 include:us._netblocks.mimecast.com include:spf.protection.outlook.com inc... d365mktkey=28sa7bafpe2de8vpiioj7eyhf |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
A+IPv6 ReadinessIPv6 reachable (17 ms)PASS
A+Crawlabilityrobots.txt present, sitemap with 2 URLsPASS
# Robots.txt file CCF
# Updated 11/11/2025
User-agent: AmazonAdBot
# Only allow crawling of areas where we show advertisements
Allow: /health/
Allow: /watch/
Disallow: /
# --- Default directives for all other crawlers ---
User-agent: *
Disallow:
Crawl-delay: 10
Disallow: /Search
Disallow: /search
Disallow: /*/Search
Disallow: /*/search
Disallow: /*?date=*
Disallow: /*?q=*
Disallow: /*?view=*
Disallow: /ccf/media/files/*guide.pdf
Disallow: /cache/clearcache/
Disallow: /atoz/healthinformationletterstatus/
Disallow: /atoz/healthinformationpages/
Disallow: /atoz/healthinformationribbonlinkvisibility/
Disallow: /atoz/institutesdepartmentsletterstatus/
Disallow: /atoz/institutesdepartmentspages/
Disallow: /ribbon/locationspecialtylists/
Disallow: /provider/physicianratings/
Disallow: /provider/image/
Disallow: /video/panel/
Disallow: /clinicaltrial/jsonresults/
Disallow: /patientstory/jsonresults/
Disallow: /patientstory/forsearchindex/
Disallow: /location/waittimes/
Disallow: /treatment-guides/
Sitemap: https://my.clevelandclinic.org/sitemap.xml
AURL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Use 301 (permanent) instead of 302 (temporary)
A+Domain Intelligenceclevelandclinic.org — via GoDaddy Corporate Domains, LLC, 28 years, 8 months oldPASS
205 days
January 7, 2027
88 days
Issued by Google Trust Services
28 years, 8 months
Registered January 8, 1998
Enabled
Protects against DNS spoofing
Unknown
2606:4700:4402::6812:20d8
GoDaddy Corporate Domains, LLC
Expiry timeline
Recommended actions
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice