Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BTLS Certificate Expiry & Recommendations75 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Submit your domain to hstspreload.org to be added to the Chrome preload list
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
ADNS Records1 A records, 474 ms lookupPASS
| A | 13.91.95.74 |
| AAAA | — |
| CNAME | — |
| NS | ns2.intel.com, ns1.intel.com, ns4.intel.com, ns3.intel.com |
| MX | 100 mgamail.eglb.intel.com |
| TXT | e94b687f1bd60e6d49bee301361913c22b1aaf63beb963f10826f8472fced7f1 Dynatrace-site-verification=e1eb3fe5-f14a-4a0c-b8b6-1c5f380cb804__dfadqbk4o2ngu8... qqmail-site-verification=de1a8d707315b7e0442efe7a2812e10457a771ccdeb google-site-verification=_BVjdlNMi517YkaWfQ8SOCUxjGyrK4X4tkMeCqieedQ 00D4B0000009zrY=1TBdh00000007JF 00D2i0000000pFZ=1TBdh000000079Z MS=B03F616C5688CE657CC2FA94EF4E72109431092B 00DKQ0000000ni0=1TBKQ000000KykT perplexity-ai-domain-verification-r24pxy=rliweb0yORQ8UxAD7URTfKgdu google-site-verification=33gwj8vJs6_J5adGCJ3IWWAm5C4MeM-ZUy5uzNIEX4s apple-domain-verification=OAQrNBk5trF8X7H3 atlassian-domain-verification=ZOexs0awZv94sBIlIBoxjhW8lXHZ24atEWqaXZtHXJyUNyrJRF... 00Dgy0000000YzN=1TBgy00000000WH google-site-verification=tCdhchtzK9L-sDZA5OazdRCeK5HrqgOJ9kZkzdbtmd8 fastly-domain-delegation-RIA8ruNVQ8qqxgwlPyD3-485843-2022-27-04 00Dj0000001tZRR=1TBa6000000012X 00D7j0000004Xkw=1TBdh00000006VF 08428d8e-d6dd-4d4f-acca-42955adb18cf 09/10/2024 00D6w0000004eS8=1TBdh0000000EKj f076027a-8022-4cd7-9c52-373ef56f9848 atlassian-domain-verification=dfPURS8tP5ncA5xHnEv8nyfRQZzwLH6RRKWNXRHLwny6EBpmC7... teamviewer-sso-verification=c0fca594575d4ae58cb4d02d7ede2b3e 00DDS000001gRdW=1TBOu0000000A2b autodesk-domain-verification=EKQ8nv86UxiJDM9bI18R Dynatrace-site-verification=03bc0e9d-4899-45bc-8fb6-963829cd5cf1__m1rmdc12bet67g... slack-domain-verification=1Cz4MCZJuypQf1rh9T3qlqJDFCRYuqZkrOUh5kL4 google-site-verification=pv06NhezCJEfqLpFMO8YKqC6Ye1q85TiFq_S5qUUdxE 00DDD000001fKur=1TBdh000000091h google-site-verification=HZCQBwMXW2bQcmIUCMcxovy1yMxkEcu1mGA2spyLARo google-site-verification=xQ71LIpBIRMAhe6YyAjaNEeqOHF6VOCCLJD-xBsnwtU cloudhealth=1659ead7-5c47-4817-a0d3-94b456169734 docusign=ff4d259b-5b2b-4dc7-84e5-34dc2c13e83e docker-verification=6e64c5c8-0cb8-4284-9f6e-dc63262b0d93 canva-site-verification=Udnsc-EibCkG6QIOjQ53WQ anthropic-domain-verification-ygt3tf=Q9RHyPSxi5ES3lSyMrb5aJ3WV bluebeam-verification=ocvjzp7gd8fvt0qv85zgh1og5o3nl9 onetrust-domain-verification=da03b7174c53436587dd407887778160 adobe-idp-site-verification=12d5bea8-aab4-4b2e-9c77-8f69ad4734f0 00DVB0000075KEz=1TBVB00000009Un onetrust-domain-verification=09f55ff1baba439b9174d37afefcaf2d 00DcV000002z2LV=1TBcV00000005XZ I+FotdhF45rEb5bSOZyqcRNYMIuqDOEcWLtvZ8cb5RKf4p2v+6laazMU1bT8dq88ia98W9aUKYirlD7+... meltwater_sso_20240930 bcd9860a-1369-4d5c-ae5e-e9320d79f083 00D6w0000004cRG=1TBVA0000000QTx cursor-domain-verification-5h3fn5=uPEBnPX0FRt8elKd8xtpotTsg mongodb-site-verification=p6n0w6nnOPjCeuCnsW0Xc4UgAh4jfMHo atlassian-domain-verification=ApWZ5iliIwA1g0Ka7JhMa7BP0qBkz/WIaMoGiJqvekBz2LJlc2... ibmid=b4542555-fac2-4d7d-a8ad-f4d3ee20ba22 SPF v=spf1 include:_spf.intel.com -all docusign=46a68707-4a57-4782-bf77-1373777e73e8 google-site-verification=pIbeNdxnfMeMUhiz7Ad6UlkU08jIlagr9h55GoQSw6I openai-domain-verification=dv-2wMjOw2i8o6W1d2QxgxAvV8k ms-domain-verification=63e408c2-11b8-4d5f-939c-d71b7d7e3d91 chariot=chariot+intel@praetorian.com atlassian-domain-verification=qHOhH89J6Mh62tAEcDaX6swdU8wX1iJZUUlaDWdfkcma0KJ1qV... onetrust-domain-verification=ee0aec8e25a047c185d8fff907e052c2 00DU0000000YT3c=1TBVz00000001CD uber-domain-verification=233c950b-1660-447a-a8bc-a0bb20559c05 |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
Slow DNS adds latency to every page load. Consider a faster DNS provider.
DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.
Source: DNS performance benchmarks
ARedirect Chain1 redirect(s), 546 ms totalPASS
https://intel.com
502 ms · HTTP/1.1
https://www.intel.com/
44 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://intel.com | 301 | 502 ms | HTTP/1.1 | |
| 2 | https://www.intel.com/ | 200 | 44 ms | HTTP/1.1 | AmazonS3 |
See the visual redirect chain in the HTTP Probe tab →
A+Crawlabilityrobots.txt present, sitemap with 8 URLsPASS
# robots.txt exclusion for www.intel.com/ - US
User-agent: OmtrBot/1.0
Allow: /content/www/us/en/products/devices-systems/
Allow: /content/dam/products/
Allow: /libs/apps/intel/services/productseedlist
Disallow: /cgi
Disallow: /iaweb/
Disallow: /cpc/vision/
Disallow: /intel/june297/
Disallow: /cpc/eps/
Disallow: /design/june297/
Disallow: /cpc/archive/
Disallow: /cpc/dia/
Disallow: /cpc/ecs/
Disallow: /cpc/fcs/
Disallow: /cpc/gif/
Disallow: /cpc/OptContent/
Disallow: /cpc/pix/
Disallow: /cpc/sound/
Disallow: /cpc/feature/
Disallow: /emergency/
Disallow: /content/www/*/*/buy/intelinside/
Disallow: /content/www/*/*/buy/inteltechnologyprovider/
Disallow: /content/www/*/*/buy/intelproducts/
Disallow: /content/www/*/*/homepage/_jcr_content/
Disallow: /content/www/*/*/test/
Disallow: /content/data/disclaimers/
Disallow: /content/www/*/*/contentlibrary.html?
Disallow: /content/iip/
Disallow: /content/dam/altera-www/global/*/pdfs/assets/
Disallow: /content/dam/www/programmable/*/*/pdfs/assets/
Disallow: /content/dam/www/public/*/forms/
Disallow: /*.swf$
Disallow: /*/swf/
Disallow: /*/secure/
Disallow: /*/wp-expand-server-memory-with-optane*.pdf$
Disallow: /*/wp-01288-intel-fpgas-accelerate-intel-xeon-scalable*.pdf$
Disallow: /content/dam/www/secure/
User-agent: *
Allow: /content/dam/products/catalog/
Allow: /content/dam/products/hero/
Disallow: /cgi
Disallow: /iaweb/
Disallow: /cpc/vision/
Disallow: /intel/june297/
Disallow: /cpc/eps/
Disallow: /design/june297/
Disallow: /cpc/archive/
Disallow: /cpc/dia/
Disallow: /cpc/ecs/
Disallow: /cpc/fcs/
Disallow: /cpc/gif/
Disallow: /cpc/OptContent/
Disallow: /cpc/pix/
Disallow: /cpc/sound/
Disallow: /cpc/feature/
Disallow: /emergency/
Disallow: /content/www/*/*/buy/intelinside/
Disallow: /content/www/*/*/buy/inteltechnologyprovider/
Disallow: /content/www/*/*/buy/intelproducts/
Disallow: /content/www/*/*/homepage/_jcr_content/
Disallow: /content/www/*/*/test/
Disallow: /content/data/disclaimers/
Disallow: /content/www/*/*/contentlibrary.html?
Disallow: /content/iip/
Disallow: /content/dam/altera-www/global/*/pdfs/assets/
Disallow: /content/dam/www/programmable/*/*/pdfs/assets/
Disallow: /content/dam/www/public/*/forms/
Disallow: /content/dam/products/
Disallow: /libs/apps/intel/services/productseedlist
Disallow: /now/
Disallow: /*countrylabel=*&countrylabel=*
Disallow: /*&_escaped_fragment_=*
Disallow: /*.swf$
Disallow: /*/swf/
Disallow: /*/secure/
Disallow: /*/wp-expand-server-memory-with-optane*.pdf$
Disallow: /*/wp-01288-intel-fpgas-accelerate-intel-xeon-scalable*.pdf$
Disallow: /content/dam/www/secure/
Disallow: /content/www/br/pt/
Disallow: /content/www/xl/es/
Disallow: /content/www/de/de/
Disallow: /content/www/es/es/
Disallow: /content/www/fr/fr/
Disallow: /content/www/jp/ja/
Disallow: /content/www/id/id/
Disallow: /content/www/kr/ko/
Disallow: /content/www/th/th/
Disallow: /content/www/tw/zh/
Disallow: /content/www/vn/vi/
User-agent: SEOkicks
Crawl-Delay: 4
User-agent: coccocbot
Crawl-Delay: 4
User-agent: AhrefsBot
Crawl-Delay: 4
User-agent: SemrushBot
Crawl-Delay: 4
User-agent: trendictionbot
Crawl-Delay: 4
User-agent: serpstatbot
Crawl-Delay: 4
User-agent: startmebot
Crawl-Delay: 4
User-agent: HatenaBlog-bot
Crawl-Delay: 4
User-agent: Cincraw
Crawl-Delay: 4
User-agent: InfoTigerBot
Crawl-Delay: 4
User-agent: snapchat
Crawl-Delay: 4
User-agent: Superfeedr
Crawl-Delay: 4
User-agent: YaK
Crawl-Delay: 4
User-agent: digitalshadowsbot
Crawl-Delay: 4
User-agent: Magus
Crawl-Delay: 4
User-agent: Quora-Bot
Crawl-Delay: 4
User-agent: INETDEX-BOT
Crawl-Delay: 4
User-agent: DataForSeoBot
Crawl-Delay: 4
User-agent: SerendeputyBot
Crawl-Delay: 4
User-agent: Deskyobot
Crawl-Delay: 4
User-agent: MJ12bot
Crawl-Delay: 4
User-agent: BrightEdge
Crawl-Delay: 4
User-agent: ICC-Crawler
Disallow: /
Sitemap: https://www.intel.com/sitemap.xml
AURL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
HTTP → HTTPS
Use 301 (permanent) instead of 302 (temporary)
A+Domain Intelligenceintel.com — via MarkMonitor Inc., 40 years, 7 months old, hosted on Microsoft AzurePASS
255 days
March 26, 2027
75 days
Issued by Sectigo Limited
40 years, 7 months
Registered March 25, 1986
Not enabled
Protects against DNS spoofing
Microsoft Azure
ASN AS8075
13.91.95.74
MarkMonitor Inc.
Expiry timeline
Recommended actions
- Enable DNSSEC to protect visitors from DNS spoofing
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.
Learn more ▾ ▴
DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.
Source: ICANN / RFC 4033
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice