Skip to content
https://nd.edu

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
77
GRADE
C
FIX
2
REVIEW
4
PASS
3
INFO
0
Probed from Singapore, Singapore
301 Moved Permanently
Checks
9
3 PASS 4 REVIEW 2 FIX
D
URL Variants
Action
www/non-www, trailing slash, HTTP→HTTPS
FIX
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Critical::
HTTP version does not redirect to HTTPS
Got: HTTP 301 Expected: 301 redirect to HTTPS

www / non-www

200https://www.nd.edu/
200https://nd.edu/

Inconsistent — duplicate content risk

HTTP → HTTPS

301http://nd.edu/ → http://www.nd.edu/

HTTP version does not redirect to HTTPS

D
CDN & Delivery
Action
No CDN detected
FIX
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

B
Redirect Chain
1 redirect(s), 2542 ms total
REVIEW
1 redirect(s), 2542 ms total
Info::
Single redirect
Got: https://nd.edu → https://www.nd.edu/ (301)
Info::
WWW normalization redirect
Warning::
Redirect overhead: 2542 ms total
Got: 2542 ms

https://nd.edu

1245 ms · HTTP/1.1

301

https://www.nd.edu/

1297 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://nd.edu3011245 msHTTP/1.1nginx/1.28.0
2https://www.nd.edu/2001297 msHTTP/1.1Apache

See the visual redirect chain in the HTTP Probe tab →

C
IPv6 Readiness
Action
No IPv6 support
REVIEW
No IPv6 support
Info::
No IPv6 (AAAA) records found
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No IPv6 Support
About 40% of internet users have IPv6. Consider adding AAAA records.

IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.

Why this matters

No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.

Source: Google IPv6 stats

B
HTTP Probe Timing
Total 1266 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
REVIEW
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
226 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
259 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
522 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
1.27 s
Total Time Total request time from DNS lookup through full response.
1.27 s

Connection waterfall

DNS Lookup 226 ms TCP Connect 259 ms TLS Handshake 522 ms Server Processing 260 ms Content Transfer 0 ms
B
TLS Certificate Expiry & Recommendations
241 days until leaf cert expires — 4 issues to address
REVIEW

Certificate validity

241
days left
0d 30d 60d 90d+

Recommended actions

  • Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A
DNS Records
1 A records, 1330 ms lookup
PASS
1 A records, 1330 ms lookup
Info::
Resolves to 1 IPv4 address(es)
Got: 34.193.237.201
Info::
Single A record — no DNS redundancy
Multiple A records provide failover if one server goes down.
Info::
No IPv6 (AAAA) records
Info::
2 nameserver(s) configured
Got: ns2.nd.edu, ns1.nd.edu
Info::
5 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Warning::
DNS resolution is slow (1330 ms)
Slow DNS adds latency to every page load. Consider a faster DNS provider.
Got: 1330 ms
A34.193.237.201
AAAA—
CNAME—
NSns2.nd.edu, ns1.nd.edu
MX
10 aspmx.l.google.com
50 alt2.aspmx.l.google.com
50 alt1.aspmx.l.google.com
100 alt3.aspmx.l.google.com
100 alt4.aspmx.l.google.com
TXT
google-site-verification=E0Ai-zLdeN4kaVMLOAc3Hu8YxFfFwgkF-aqT137FID4
adobe-idp-site-verification=e9756968-501f-480d-8792-c63fdd9f80b1
google-site-verification=VFb81m0OmJ-cARBgKvmos2DsQWjrDVfR2YHlgeSm6Ug
pardot_219862_*=7348adfdbfbbbc2208e360e007f11cc488ecadad55ac777bb7637bc1b722ecfa
heroku-domain-verification=5bpsmgqd0irdsecvtkii8e9d0zwp33uszd4byfb6o
_globalsign-domain-verification=LfgPuNnZOviHJVkLDsAnTjpDsFtY_T0pkBgmNG2dZs
SPF v=spf1 include:_u.nd.edu._spf.smart.ondmarc.com ~all
apple-domain-verification=bxq6rLIsclw0WUwj
google-site-verification=JXLaLTpEQJNaOc47L5FCQMVzJswWy6oya8UgaRQWVE0
docusign=4909212b-a9ae-414a-8ac1-14ba8514c57a
google-site-verification=emH8XyxZNPm54EgNuh42J5Kyer3hHpX4JkI_jGz021w
docusign=13014d02-9888-4d97-ab61-75927ac9c354
atlassian-domain-verification=mcMH5cJpZFK46YS3U01Da6PVucaF3qS2ZMJa8/su7W8Xzl8omW...
e2ma-verification=mancb
cisco-ci-domain-verification=3b0cf87da3d06f5c131277db55b48ff9297a55db1ee0bcfc31a...
d365mktkey=Y0fJCCYFQq9W2xqRIZO0D6DZUHtXPhcbITS81wsagm8x
d365mktkey=W2RPNDEQGAox3gYW5Mr5AurRGPHiWglb63Cpbg43rogx
e2ma-verification=q8fcb
sendinblue-code:1a6818adbe852c76491242a60b3d2fe0
amazonses:TZOspN3D6KpXYYEvedb9ijMRaZZv9wIk2lVa2XS1zm4=
wpe-verification=godandgoodlife
_bikl4z8rqnwnpe44rum3006dh12popr
brevo-code:f9880e3ab3b7e746b2db0ecf9f209a34
google-site-verification=jn_-65L7qcWLZmEo5JD4cyl6_w0YAOOdxzysOqHUtjo
airtable-verification=1b0cc7a6fea2adca0106d9dc83226b8a
openai-domain-verification=dv-1yKm9SGYfvIyOeIuWZH9XWie
asv=e22f8141a541b5d2b0c634b621241be0
jamf-site-verification=ZezyIaoN2uwt0pCuh-8Saw
CAALookup not available with standard resolver
Resolved in 1330 ms

Multiple A records provide failover if one server goes down.

Why this matters

Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.

Learn more ▾

Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.

Source: SRE practice / DNS architecture

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Why this matters

DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.

Source: DNS performance benchmarks

A+
Crawlability
robots.txt present, sitemap with 43 URLs
PASS
robots.txt present, sitemap with 43 URLs
Info::
robots.txt is present
Got: 183 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 43 entries
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 183 B Sitemaps referenced 1 User-agents * Blocking No — crawling allowed
Sitemap: https://www.nd.edu/sitemap.xml

User-agent: *
Disallow: /assets/css/
Disallow: /assets/features/
Disallow: /assets/js/
Disallow: /cache/
Disallow: /error/
Disallow: /offline/
sitemap.xml 200 OK
Type URL Set URLs 43 entries Valid XML Yes
Sample URLs:
A+
Domain Intelligence
nd.edu — 38 years, 4 months old, hosted on AWS
PASS
nd.edu — 38 years, 4 months old, hosted on AWS
Info::
Domain registered until Jul 31, 2026 (3 months remaining)
Info::
Hosting: AWS
Got: AS14618
Domain expiry

15 days

July 31, 2026

SSL certificate

241 days

Issued by Internet2

Domain age

38 years, 4 months

Registered July 7, 1988

DNSSEC

Status unknown

Protects against DNS spoofing

Hosting

AWS

ASN AS14618

34.193.237.201

Registrar

Registrar unknown

Lock status unknown 2 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Renew the domain or enable auto-renewal to prevent accidental expiry
Registrar
Created July 7, 1988 (38 years, 4 months ago)
Expires July 31, 2026 (3 months)
Last Updated June 12, 2025
Name Servers ns2.nd.edu, ns1.nd.edu
Registrant University of Notre Dame
Hosting
IP Address 34.193.237.201
ASN AS14618 (AMAZON-AES - Amazon.com, Inc., US)
Provider AWS
Data source: whois (1.8s)
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback