Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.FRedirect ChainAction3 redirect(s), 6477 ms totalFIX
https://cervantes.es
813 ms · HTTP/1.1
http://www.cervantes.es/
518 ms · HTTP/1.1
https://www.cervantes.es/
1063 ms · HTTP/1.1
https://cervantes.org
4083 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://cervantes.es | 301 | 813 ms | HTTP/1.1 | |
| 2 | http://www.cervantes.es/ | 301 | 518 ms | HTTP/1.1 | |
| 3 | https://www.cervantes.es/ | 301 | 1063 ms | HTTP/1.1 | |
| 4 | https://cervantes.org | 200 | 4083 ms | HTTP/1.1 | Apache |
See the visual redirect chain in the HTTP Probe tab →
Each redirect adds latency. Try to minimize the chain to 1 hop.
Redirect chain — each hop adds latency; combine into one redirect where possible.
Source: Google Search Central / web.dev
Redirect directly from https://cervantes.es to https://cervantes.org
Redirect chain could be flattened to one hop — server config tweak removes intermediate latency.
Source: web.dev
DCrawlabilityActionrobots.txt present, sitemap with 0 URLsFIX
Disallow: / for all user-agents prevents search engines from indexing any page. This will remove the site from search results.
Disallow: / in robots.txt blocks every search crawler — the site becomes invisible in organic search.
Learn more ▾ ▴
Common deployment mistake: a staging robots.txt with `User-agent: * / Disallow: /` ships to prod. The site falls out of search results within days. Verify your robots.txt is the production-intended version. If this is intentional (private site), no action needed.
Source: Google Search Central
An empty sitemap provides no value. Add <url> entries for your pages.
An empty sitemap signals 'no content to index' to Google — actively harmful versus having no sitemap at all.
Learn more ▾ ▴
Google compares URLs in the sitemap against URLs it has crawled. An empty sitemap on a site with thousands of pages signals abandonment. Either populate it correctly (most CMSes auto-generate) or delete the file and let Google crawl normally.
Source: Google Search Central / sitemaps.org
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
User-agent: Googlebot
User-agent: Bingbot
User-agent: Slurp
User-agent: Yandex
User-agent: AskJeeves
User-agent: Baiduspider
User-agent: ia_archiver
Disallow: /Vtemp/
Disallow: /seg_nivel/
Disallow: /boletin/
Disallow: /lengua_y_ensenanza/espacio_lenguas_ibericas/
Disallow: /sobre_instituto_cervantes/espacios_profesionales/
Disallow: /lengua_y_ensenanza/comprofes/inscripcion/
Disallow: /default_pruebas.htm
Disallow: /cultura_espanola/informacion_noindex.htm
Disallow: /bibliotecas_documentacion_espanol/default-noindex.htm
Disallow: /france/cours_espagnol_paris_bordeaux/
Disallow: /france/cours_espagnol_paris_lyon/
Disallow: /lengua_y_ensenanza/csf/
Disallow: /memoria_ic_web_2011-2012/
Crawl-delay: 20
User-agent: *
Disallow: /
DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Preferred variant: non-www
HTTP → HTTPS
HTTP version does not redirect to HTTPS
CHTTP Probe TimingActionTotal 1661 ms — DNS, TCP, TLS, TTFB, content transfer breakdownREVIEW
Connection waterfall
BTLS Certificate Expiry & Recommendations348 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records1 A records, 189 ms lookupPASS
| A | 193.146.5.10 |
| AAAA | — |
| CNAME | — |
| NS | dns.cervantes.es, machuca.cervantes.es |
| MX | 10 vela1.cervantes.es 10 vela2.cervantes.es 20 cervantes-mxbck.sistemaip.net |
| TXT | B140251800000877.601bedce765d30.62501949 MS=ms43241734 _5wfz80zbc3stjpoz4cq18siitm4ipbl JIH9RzA0Jzb7gQh+IJbNqqvXAsRfj/TpBIgrLQQZRkgu/+snXkn2f5M2rtrrYF9DM2ocPSD4GwgrdNnB... globalsign-domain-verification=vIvWiOCKbYBLSzj5CpRZ03BPgh9xJ5FEZxmCvjztZJ xp10m4xdcnql0fjy9tzyqwmf9n3kyn8v globalsign-domain-verification=-slX0MgqnRiACc2ng0H-ZY89alVk8Gw64Li4jPRUKM atlassian-sending-domain-verification=668e60df-a990-4b79-a003-346425451e17 globalsign-domain-verification=uCCCTVMVLudm5wk8jiqoGVD7dvrzXqR2kNMJiUP8Vf globalsign-domain-verification=Q2Qdb5M2M6rGo1-uOr4HPm4VVDL-s965kh-3FmVyvX x6djzr1lgwzg9mmw1mzl5h262cx05vm6 globalsign-domain-verification=3B5kQrNjIbVGdoKorCiRN3k2nB4JRamI3MwtkrxKC3 B140251800000878.601bebf3e9b544.55675931 atlassian-domain-verification=HZVEGTjcr4P/2Qc1lIKTViUvhxjgaCqxG8iFpbQjwYLEKwdNV3... 202006180844274o3uw44j5o4i4vgvlqpebfvb1iecq2li0at7ldplb5wjiamjwz SPF v=spf1 include:spf.protection.outlook.com ip4:193.146.3.230 ip4:193.146.3.229 ip... globalsign-domain-verification=7l3pqAmzmoQ-e-TA25j_xo2Ax3N3Zzt6Gz79T1zeHM |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
Domain IntelligenceDomain intelligence data not availableINFO
RDAP and WHOIS lookup both failed