Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
BRedirect Chain1 redirect(s), 2685 ms totalREVIEW
https://rochester.edu
1203 ms · HTTP/1.1
https://www.rochester.edu/
1482 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://rochester.edu | 301 | 1203 ms | HTTP/1.1 | Apache |
| 2 | https://www.rochester.edu/ | 200 | 1482 ms | HTTP/1.1 | Apache |
See the visual redirect chain in the HTTP Probe tab →
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BCrawlabilityrobots.txt present, no sitemapREVIEW
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
User-agent: atraxbot/0.2
Disallow: /
User-agent: *
Disallow: /adv/advancement/
Disallow: /report/
Disallow: /ITS/reports/
Disallow: /cgi-bin/
Disallow: /tmp/
Disallow: /ITS/web/group/dev/
Disallow: /calendar/
Disallow: /calendar/upload.php
Disallow: /calendar/epicker.php
Disallow: /beta/
Disallow: /ur-cgi-bin/
Disallow: /its/dcs/forms/
Disallow: /ITS/dcs/forms/
Disallow: /college/CCAS/clusters/cluster_search7.html
Disallow: /college/ccas/clusters/cluster_search7.html
Disallow: /its/acs/oge_verifies_form.html
Disallow: /college/alumni/reunion2011/classes/
Disallow: /giving/gec/roll
Disallow: /giving/gec/roll2
Disallow: /college/alumni/reunion/classes/
Disallow: /2013/donors
Disallow: /@rochester/archive/issue.php?iss=2701
Disallow: /currents/V41/N02/Sloan.html
Disallow: /college/ugresearch/ur-upp/
Disallow: /poc-tech/
Disallow: /working/hr/jobs/feeds/
Disallow: /wp-admin/
Disallow: /policies/all/
User-agent: ReadableBot
Disallow:
No sitemap found
Adding a sitemap helps search engines discover your pages.
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BHTTP Probe TimingTotal 1188 ms — DNS, TCP, TLS, TTFB, content transfer breakdownREVIEW
Connection waterfall
BTLS Certificate Expiry & Recommendations171 days until leaf cert expires — 5 issues to addressREVIEW
Certificate validity
Recommended actions
- Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
- Add includeSubDomains to the HSTS directive
- Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
ADNS Records1 A records, 244 ms lookupPASS
| A | 128.151.77.39 |
| AAAA | — |
| CNAME | — |
| NS | ns-external2.rochester.edu, ns-external1.rochester.edu |
| MX | 10 ppmx6.its.rochester.edu 10 ppmx3.its.rochester.edu 10 ppmx7.its.rochester.edu 10 ppmx4.its.rochester.edu 10 ppmx2.its.rochester.edu 10 ppmx8.its.rochester.edu 10 ppmx1.its.rochester.edu 10 ppmx5.its.rochester.edu |
| TXT | SFMC-t2dm_vrUidQ2icKpiVcl48icr4KiGits1SNoo3vf apple-domain-verification=jMTUzYx2TaYoVoZu smartsheet-site-validation=rcyF_qkX9gbG19E-200lJDSNEfI4NhLn smartsheet-site-validation=QkMve04pGZHYZe1miacfthXdrq9t2kSA google-site-verification=N3432SBzvUMr21bWQ--r3Jm6F9Xr-6V3HlyjZMV0VlI ZOOM_verify_tVjaxJBzyzpZ3yJx7bi29I wiz-domain-verification=6230f0d481f85f809ec811cd3d965cdf324f8c2307fccd796aa1eb5b... google-site-verification=8djAyNsFylbBii26ILup3c3y0EDSgj7xKR7JP86_6F8 SPF v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all canva-site-verification=qsSID_a7_mmERenifH8oHg sitecore-domain-verification=ed8276b52b8b4b9291db54e862912229 MS=ms89335153 amazonses:t0h51N4KcnLsmv0GCxTldTulccNcoipzJc6eAi5plW4= BI33PP2GQL56UKH5AR4O9MCN36 |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
Slow DNS adds latency to every page load. Consider a faster DNS provider.
DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.
Source: DNS performance benchmarks
A+Domain Intelligencerochester.edu — 40 years, 1 months old, hosted on UR - University of Rochester, USPASS
380 days
July 31, 2027
171 days
Issued by Internet2
40 years, 1 months
Registered October 10, 1986
Status unknown
Protects against DNS spoofing
UR - University of Rochester, US
ASN AS20
128.151.77.39
Registrar unknown