Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
BCrawlabilityrobots.txt present, no sitemapREVIEW
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
# http://www.robotstxt.org/wc/exclusion.html#robotstxt
User-agent: *
Disallow: /cgi-bin/
Disallow: /search.php
Disallow: /english/search.php
Disallow: /admin/events/
Disallow: /emailform.php
Disallow: /vcard.php
# http://validator.w3.org/docs/checklink.html#bot
User-Agent: W3C-checklink
Disallow:
No sitemap found
Adding a sitemap helps search engines discover your pages.
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations40 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records1 A records, 59 ms lookupPASS
| A | 141.3.128.6 |
| AAAA | 2a00:1398:b::8d03:8006 |
| CNAME | — |
| NS | ns-p-3.kit-dns.net, ns-p-1.kit-dns.eu, ns-p-2.kit-dns.de |
| MX | 5 scc-spamtrap-no-smtp-here.scc.kit.edu 10 mx03.kit.edu 10 mx02.kit.edu 10 mx01.kit.edu 10 mx04.kit.edu 100 scc-spamtrap-always-defer.scc.kit.edu |
| TXT | SPF v=spf1 include:spf.scc.kit.edu include:_spf.dvinci-hr.com ~all google-site-verification=RiJYMytX3pCx9KAv1rNgu7x8-dAMgVAMn5qB8zYu9bc atlassian-domain-verification=qhFYbQE2bdCvjp708nAGIImh0LzZ/p5MjLLNU6wfMPtqq1ajaq... autodesk-domain-verification=4wC8GCTcMcObRgc3dXo7 google-site-verification=PBcafkoTXqYwjQ-nVJN8sGo2rvahKeD7GgFgxxm0OUM dell-technologies-domain-verification=kit.edu_f768eb0e-44f1-431c-a67f-694499efdb... google-site-verification=g2okR86CjsCt2zhOMWp_sa7oSsbh0cNZhT4QK9-UcVQ apple-domain-verification=K7JHi0GuEXUJiuJE google-site-verification=FEK-Gy3ydqDu2NIGvvBkQq_mKUw2N9LPdNoC1O_-t08 adobe-idp-site-verification=fe0c9922b6b16dd795d3fda0aab93ad83f7207d88d7467d2c0bd... _telesec-domain-validation=2025-06-20_6NkIwhThZrME45gTGFd3tCJ2yRWHbu7cjrk8IqSycK... google-site-verification=ffL3AOAKfnC9F0NVBm62Cr94_08W8bVV1e-BW0py8eg ZOOM_verify_xvV7c9aqSU2nEbHUuA9U3w MS=1DB8D1E6C4AB5F32AD0A254EDDE5058DF8EBA070 atlassian-sending-domain-verification=18f62122-a717-48b3-930a-73d7ffad820c |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 258 ms totalPASS
https://kit.edu
95 ms · HTTP/1.1
https://www.kit.edu/
163 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://kit.edu | 301 | 95 ms | HTTP/1.1 | Apache |
| 2 | https://www.kit.edu/ | 200 | 163 ms | HTTP/1.1 | Apache |
See the visual redirect chain in the HTTP Probe tab →
A+IPv6 ReadinessIPv6 reachable (28 ms)PASS
A+Domain Intelligencekit.edu — 19 years, 10 months oldPASS
744 days
July 31, 2028
40 days
Issued by Let's Encrypt
19 years, 10 months
Registered September 28, 2006
Status unknown
Protects against DNS spoofing
Unknown
2a00:1398:b::8d03:8006
Registrar unknown