Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
BRedirect Chain1 redirect(s), 1167 ms totalREVIEW
https://getty.edu
676 ms · HTTP/1.0
https://www.getty.edu/
491 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://getty.edu | 302 | 676 ms | HTTP/1.0 | BigIP |
| 2 | https://www.getty.edu/ | 200 | 491 ms | HTTP/1.1 |
See the visual redirect chain in the HTTP Probe tab →
If permanent, use 301 instead.
302 (Found) is for genuinely temporary redirects — if this redirect is permanent, switch to 301 to preserve SEO equity.
Learn more ▾ ▴
Search engines treat 302 as temporary, keeping the original URL indexed and not transferring full link equity to the destination. Use 301 (Moved Permanently) for permanent redirects (HTTP→HTTPS, www-vs-non-www, URL restructures).
Source: Google Search Central
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BCrawlabilityrobots.txt present, no sitemapREVIEW
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
# /robots.txt
User-agent: SortSite
Allow: /
User-agent: *
Disallow: /cgi-bin
User-agent: AhrefsBot
Disallow: /
User-agent: *
Disallow: /slampoets
User-agent: *
Disallow: /research/collections/mirador/
User-agent: Yeti
Disallow: /art/collection/
No sitemap found
Adding a sitemap helps search engines discover your pages.
CURL VariantsActionwww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Use 301 (permanent) instead of 302 (temporary)
BTLS Certificate Expiry & Recommendations129 days until leaf cert expires — 4 issues to addressREVIEW
Certificate validity
Recommended actions
- Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records1 A records, 38 ms lookupPASS
| A | 153.10.241.9 |
| AAAA | — |
| CNAME | — |
| NS | ns-1831.awsdns-36.co.uk, ns-1423.awsdns-49.org, ns-776.awsdns-33.net, ns-217.awsdns-27.com |
| MX | 0 getty-edu.mail.protection.outlook.com |
| TXT | airtable-verification=f7df56a062fffa9c8f260a1201709ac9 docusign=9c5948e3-b525-41b1-b637-25a9251599a0 SPF v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all docusign=e3a421d8-0885-4a4c-9ef8-24e16884db80 KGIDZFCHW4HWXFY5D42AN2H67CVYKHJRH6GMVIKQR ZOOM_verify_bwNutJMbTWqJYD3JQEb0pg MS=ms61943381 klaviyo-site-verification=U3W8N9 jamf-site-verification=HAHX5wcc7-mpRLBA_77uJg apple-domain-verification=Az89cFMGmZ1lgYYY facebook-domain-verification=1xdfvph90fchv9lno1xckdgmzt5xub google-site-verification=5ZXxmdOKXxQaia4fFm2VBvsBZE54tlYBL0SB7Sz1RQ0 @=proxy-ssl.webflow.com shopify-verification-code=wZ5qJD1z7ftulSNeprotAWMHDcd66M ccisso=7dbbe59e-d867-4dcc-85e3-f5cc52283155 |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
A+Domain Intelligencegetty.edu — 34 years, 5 months old, hosted on JPGT-22063 - J. Paul Getty Trust, USPASS
744 days
July 31, 2028
129 days
Issued by Internet2
34 years, 5 months
Registered April 29, 1992
Status unknown
Protects against DNS spoofing
JPGT-22063 - J. Paul Getty Trust, US
ASN AS22063
153.10.241.9
Registrar unknown