Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DURL VariantsActionwww/non-www, trailing slash, HTTP→HTTPSFIX
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
HTTP version does not redirect to HTTPS
DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
BRedirect Chain1 redirect(s), 1305 ms totalREVIEW
https://punahou.edu
299 ms · HTTP/1.1
https://www.punahou.edu/
1007 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://punahou.edu | 301 | 299 ms | HTTP/1.1 | nginx |
| 2 | https://www.punahou.edu/ | 200 | 1007 ms | HTTP/1.1 | nginx |
See the visual redirect chain in the HTTP Probe tab →
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BCrawlabilityrobots.txt present, no sitemapREVIEW
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
User-agent: *
Disallow: /podium
Allow: /podium/default.aspx*
Disallow: /api
Disallow: /app$
Disallow: /app/
Disallow: /ftpimages
No sitemap found
Adding a sitemap helps search engines discover your pages.
BTLS Certificate Expiry & Recommendations30 days until leaf cert expires — 4 issues to addressREVIEW
Certificate validity
Recommended actions
- Renew certificate — 30 days remaining
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records1 A records, 56 ms lookupPASS
| A | 54.209.77.18 |
| AAAA | — |
| CNAME | — |
| NS | pdns03.domaincontrol.com, pdns04.domaincontrol.com |
| MX | 1 aspmx.l.google.com 5 alt2.aspmx.l.google.com 5 alt1.aspmx.l.google.com 10 alt4.aspmx.l.google.com 10 alt3.aspmx.l.google.com |
| TXT | workplace-domain-verification=I2n4yKiVJRZZ9bYzNfEAlXrKF3VooI SPF v=spf1 ip4:204.107.82.0/24 include:_spf.google.com include:_spf.paubox.com inclu... MS=ms53100650 ciscocidomainverification=398145002e55ca864cfcb1a74d217dc463ae5fd1631d57aa1f5d3f... google-site-verification=DiYkGuc0YwxWrppOEE2MfkQ4lMtJte2dGOZp4a5QLm0 include:_spf.atlassian.net google-site-verification=NTqGemT5jARx9WraQiej-mwB8-2w8Aj2UPKL8n44OGs adobe-idp-site-verification=3bad3f4fc9d4d94294298ec399e39e7945c46b02299fc66fd7f9... fhghrsdg7lrm4oh20i4gipt6q7 efl3cuojq1nu1cu10qm3mgt7lh openai-domain-verification=dv-orxJ4p1ywUtO03eeicoS8kHs ecostruxure-it-verification=96f5f6a6-5e42-420a-be89-13d79855af56 intersight=dd58eb059829a92556deef6e542244015f228e6af3ada47a8a64fd6d7c851908 ar4i50v329f32dv799ev7b4a65 IMYWJT6P7GOEZHGU5KFRXTRUQ24GL6UCXZSHZG13C atlassian-sending-domain-verification=de3ff897-8387-4520-a303-aae1912c92cd apple-domain-verification=c2nYAfm5umut4vpm cikhg8uoeftfq91sm99ibrmu5v jamf-site-verification=RCq_Nhjy46IAVzE1xzY4PA 624cjgk0gp1vt770bj2ssmo7p9 |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
A+Domain Intelligencepunahou.edu — 31 years, 5 months old, hosted on AWSPASS
19 days
July 31, 2026
30 days
Issued by Let's Encrypt
31 years, 5 months
Registered April 30, 1995
Status unknown
Protects against DNS spoofing
AWS
ASN AS16509
54.209.77.18
Registrar unknown
Expiry timeline
Recommended actions
- Renew the domain or enable auto-renewal to prevent accidental expiry
- Renew the TLS certificate or verify auto-renewal is working