Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
CCrawlabilityActionrobots.txt present, sitemap with 0 URLsREVIEW
Search engines may not be able to parse the sitemap. Fix XML validation errors.
An unparseable sitemap is silently ignored by Google — the URLs it advertises are never queued for crawl.
Learn more ▾ ▴
Google's sitemap parser is strict about XML validity. A single unescaped `&` or unclosed tag invalidates the whole file. Run your sitemap through a validator (Search Console's Sitemaps report flags it) and fix the offending entry. Most generators escape correctly; mistakes usually come from manually-written entries.
Source: sitemaps.org / Google Search Central
An empty sitemap provides no value. Add <url> entries for your pages.
An empty sitemap signals 'no content to index' to Google — actively harmful versus having no sitemap at all.
Learn more ▾ ▴
Google compares URLs in the sitemap against URLs it has crawled. An empty sitemap on a site with thousands of pages signals abandonment. Either populate it correctly (most CMSes auto-generate) or delete the file and let Google crawl normally.
Source: Google Search Central / sitemaps.org
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
User-agent: SiteCheck-sitecrawl by Siteimprove.com
Allow: /
User-agent: *
Allow: /
Disallow: /terminalfour
Disallow: /util
Disallow: /site-assets
Disallow: /apps/rooms/room_kiosk
Disallow: /media/ethics-center/social-sector-ethics/
Disallow: /testing/
Disallow: /t4-training/
Disallow: /apps/dev/
Disallow: /law-new/
Disallow: /phonebook/search/Arguelles
Disallow: /phonebook/30832/Ana-Arguelles
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations54 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
BCDN & DeliveryGoogle Cloud CDNREVIEW
A+DNS Records1 A records, 27 ms lookupPASS
| A | 34.107.151.86 |
| AAAA | — |
| CNAME | — |
| NS | ans01.scu.edu, ans02.scu.edu, ans03.scu.edu, ans04.scu.edu |
| MX | 1 aspmx.l.google.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com 10 aspmx3.googlemail.com 10 aspmx2.googlemail.com |
| TXT | MS=A05170883B318DA4F718A6FB74AECD21E76D9FA5 adobe-idp-site-verification=8127b5290fb2ca5f57bc58c78d0f3a6f8faa33d0bd39e9a35bd2... amazonses:M5MmgSuwFN9lyUPByD2ryR3ajYeYADZMPOfa5qYf0hw= anthropic-domain-verification-9pm04e=Qhi7weDcBiltBuvNa7GniHp00 apple-domain-verification=Ei_l7Xyb0XaC9g-qCfWF8gEj_OR-5OgIQZugKurNlFQ apple-domain-verification=aVpWGQmnazFRVzrF d365mktkey=40qPZ1Q6WnM0vntzmlB9O2UcmgFhzXeQsEB5h2UUzkIx d365mktkey=Vwpx7IQ9fonjbYtGKB9NjWMJJh4enVyHv3nsE82NGqcx duo_sso_verification=epuzjVLqMITOraytPgwtmhD9ixgHqNW9c6ARmJWE7ZgLW8twI4Ftj1gfe34... google-site-verification=ODImPVlunyaPfIPCLw3NWwUyaq0Qv5N-fS4hHbB0vfY google-site-verification=SbtEivdCuVBwx7s4m7bY6msZas9PZPHZALHVNfEBvkA google-site-verification=tp3GF9fARUkdfgOIb8W2j3efErwtv4y9cOEfREsLFl8 iContact1906791 intersight=622263424788f748ca27af2b8ff876746c8d2c4e94485efa51f736c5885a2681 paloaltonetworks-site-verification=3bfa0339a01afd848323e3643cb4dbe3c0a7993b034db... SPF v=spf1 include:_spf.google.com include:cust.wombatsecurity.com include:servers.m... |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 164 ms totalPASS
https://scu.edu
81 ms · HTTP/1.1
https://www.scu.edu/
83 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://scu.edu | 301 | 81 ms | HTTP/1.1 | Google Frontend |
| 2 | https://www.scu.edu/ | 200 | 83 ms | HTTP/1.1 | Google Frontend |
See the visual redirect chain in the HTTP Probe tab →
A+Domain Intelligencescu.edu — 37 years, 8 months old, hosted on Google CloudPASS
47 days
July 31, 2026
54 days
Issued by Google Trust Services
37 years, 8 months
Registered February 19, 1989
Status unknown
Protects against DNS spoofing
Google Cloud
ASN AS396982
34.107.151.86
Registrar unknown
Expiry timeline
Recommended actions
- Renew the domain or enable auto-renewal to prevent accidental expiry