Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BCrawlabilityrobots.txt present, no sitemapREVIEW
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
# As a condition of accessing this website, you agree to abide by the following
# content signals:
# (a) If a Content-Signal = yes, you may collect content for the corresponding
# use.
# (b) If a Content-Signal = no, you may not collect content for the
# corresponding use.
# (c) If the website operator does not include a Content-Signal for a
# corresponding use, the website operator neither grants nor restricts
# permission via Content-Signal with respect to the corresponding use.
# The content signals and their meanings are:
# search: building a search index and providing search results (e.g., returning
# hyperlinks and short excerpts from your website's contents). Search does not
# include providing AI-generated search summaries.
# ai-input: inputting content into one or more AI models (e.g., retrieval
# augmented generation, grounding, or other real-time taking of content for
# generative AI search answers).
# ai-train: training or fine-tuning AI models.
# ANY RESTRICTIONS EXPRESSED VIA CONTENT SIGNALS ARE EXPRESS RESERVATIONS OF
# RIGHTS UNDER ARTICLE 4 OF THE EUROPEAN UNION DIRECTIVE 2019/790 ON COPYRIGHT
# AND RELATED RIGHTS IN THE DIGITAL SINGLE MARKET.
# BEGIN Cloudflare Managed content
User-agent: *
Content-Signal: search=yes,ai-train=no
Allow: /
User-agent: Amazonbot
Disallow: /
User-agent: Applebot-Extended
Disallow: /
User-agent: Bytespider
Disallow: /
User-agent: CCBot
Disallow: /
User-agent: ClaudeBot
Disallow: /
User-agent: CloudflareBrowserRenderingCrawler
Disallow: /
User-agent: Google-Extended
Disallow: /
User-agent: GPTBot
Disallow: /
User-agent: meta-externalagent
Disallow: /
# END Cloudflare Managed Content
#
# robots.txt
#
# This file is to prevent the crawling and indexing of certain parts
# of your site by web crawlers and spiders run by sites like Yahoo!
# and Google. By telling these "robots" where not to go on your site,
# you save bandwidth and server resources.
#
# This file will be ignored unless it is at the root of your host:
# Used: http://example.com/robots.txt
# Ignored: http://example.com/site/robots.txt
#
# For more information about the robots.txt standard, see:
# http://www.robotstxt.org/robotstxt.html
User-agent: *
# CSS, JS, Images
Allow: /core/*.css$
Allow: /core/*.css?
Allow: /core/*.js$
Allow: /core/*.js?
Allow: /core/*.gif
Allow: /core/*.jpg
Allow: /core/*.jpeg
Allow: /core/*.png
Allow: /core/*.svg
Allow: /profiles/*.css$
Allow: /profiles/*.css?
Allow: /profiles/*.js$
Allow: /profiles/*.js?
Allow: /profiles/*.gif
Allow: /profiles/*.jpg
Allow: /profiles/*.jpeg
Allow: /profiles/*.png
Allow: /profiles/*.svg
# Directories
Disallow: /core/
Disallow: /profiles/
# Files
Disallow: /README.md
Disallow: /composer/Metapackage/README.txt
Disallow: /composer/Plugin/ProjectMessage/README.md
Disallow: /composer/Plugin/Scaffold/README.md
Disallow: /composer/Plugin/VendorHardening/README.txt
Disallow: /composer/Template/README.txt
Disallow: /modules/README.txt
Disallow: /sites/README.txt
Disallow: /themes/README.txt
Disallow: /web.config
# Paths (clean URLs)
Disallow: /admin/
Disallow: /comment/reply/
Disallow: /filter/tips
Disallow: /node/add/
Disallow: /search/
Disallow: /user/register
Disallow: /user/password
Disallow: /user/login
Disallow: /user/logout
Disallow: /media/oembed
Disallow: /*/media/oembed
# Paths (no clean URLs)
Disallow: /index.php/admin/
Disallow: /index.php/comment/reply/
Disallow: /index.php/filter/tips
Disallow: /index.php/node/add/
Disallow: /index.php/search/
Disallow: /index.php/user/password
Disallow: /index.php/user/register
Disallow: /index.php/user/login
Disallow: /index.php/user/logout
Disallow: /index.php/media/oembed
Disallow: /index.php/*/media/oembed
# Disallow security/CDN challenge paths
Disallow: /TSPD/
No sitemap found
Adding a sitemap helps search engines discover your pages.
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations143 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records1 A records, 91 ms lookupPASS
| A | 160.111.244.22 |
| AAAA | — |
| CNAME | — |
| NS | a26-66.akam.net, a28-65.akam.net, a24-67.akam.net, a11-67.akam.net, a1-88.akam.net, a9-64.akam.net |
| MX | 0 si-edu.mail.protection.outlook.com |
| TXT | 18aa19c7c343e9bdc9c2a6bb9cda5dabb4355c68d8e5932ccd6381651e126505 pardot1004652=926ad95006c2c225fb35c6cf36285e8b112f6756b832538f471e4cbf886f11c0 google-site-verification=9-OyClmReEWU6t3ri7R65zaHcE5ONk80xgeIHMjgg08 9d9f681dca718bea2c480bb46cd0c1ecca4329b3f9e21616bc836d45916defc9 99150e590fc6c7a503eddbc238c57319e437e396766bafb797c36d78f4fc3fe1 canva-site-verification=_s6Cq2oLPbhyDq31iu-b-A docusign=1c9206b6-fcd1-4754-8bb5-dc9f864d2d2e 1209cfa51bcf735615577b69ddaddc125e40063092c69453ef8b2c90e9db5aa1 atlassian-domain-verification=WsqpJRrIShm2l9mzMRIOQjdSiHChgFqqfOMIUH4B3EDLiaodZL... 494983b036c42cf817dacb5fc919f629c3786991041ddc257fc4014ce1c7886b jamf-site-verification=_2xGbG2MJiUanzZxmwyiBA faeacb31d37c71bd733abb60f275e2b68b82f977fa17f48f377fd0824dfea1d1 520551a893da3ebec689738534dcc320a2265c162236dbde97b39a026cd87fb6 085b91e4eb1a7a8572dcf79376104572dd8caf625df8797c2459f62dbd6f8757 7ad39b33bb809dff48ffc936a730927bc47c1b0ce9ef0e5956ffcd3707c7207e google-site-verification=kanYvoMvgHV_OzXszl4r6hoaRhJ-RSmcKHmMNYbJLM0 asv=84f6dfbd71d6cbaaa0ed4810076c50f6 MS=ms11507808 SPF v=spf1 ip4:160.111.0.0/16 ip4:67.231.156.100 ip4:67.231.148.101 include:spf1.si.... 82bfa18d46385ec9599afca5ae30e6f718c8383c062699c76e894b62e9df8e79 14cdba3c0c616a8ce86008cf5436804e406cdff63a73d44cdb943331fe716c5d 103981a55790ab5e79fa42a3be5ec1f1af9688531c1d7201da7b423e1a9afe98 082b9cc317ff878149172c86c461af33b77e375cf70a4eea971a25418ef906d5 D9Pafp4mPMV7Vt+wH+GSYi35FnsBm9zZQA6TLxStwyHV3JFiCPPQGVSJM7UzuvWz/KrphLEsXbc/bs5v... d2c638e312f5d2bf17a1c5295c39c1b51200c5caff4fafe25ac4f7345d4825aa 0aaea9bca148850c1b6f223e7f57a777232e5a319343f6d8989514c236f298fa docusign=13c4cb8d-4a47-4283-811e-e667bdd84098 6dee22b4868a2c91e999fd11037713c59d89df90570f080386c6719737c39527 2fa42e7886b78a66bd2e4010268ee32d674f9966c27c327bece432e50daa5ef4 v=spf2.0/pra ?all b3885056fb9ee4649ca08b2d7f5aee42ad8524f090e1d4bc1ebf388f41695af4 39433829e8c04de67882088be1ceb6eb7300dd8d405217affb631c652d2c92bd f27120e7e7d9fde4b8b1d550a8676808f32423c68f65bf080257153124065865 adobe-idp-site-verification=ebf44aa1f4d5c71b36a262511b68415832b6f2ad1b7411c52880... 04a376ab7769590c9661fc0941631e28f4055d41005260b40fff3c87d8df9869 4aa7b65339612a9a90d4cebadbb570d0ea68be025de69c1f11a1a14207cfdedb ae526ed1432cc584889cd7864aeb421535f15c4446220a7fef0084779b769e72 d0979ba3450a12a765a08ae0190e39832ff0175cade82a341307a3291532e19d 7d4550321c0161253c3ea5ccec6c837f8bcf7be735038aa9f653a72d98eec4bc e85d3013c9c7b3189294607235b7649ecb79aca52fea7d56cd63f8ff0bdd3759 ae4702faaef4287671c09ea00d6ee406f27390cef064da2f1ea20268e56d92c2 f625192959685de445110b63c95ea6f12e17d96e36e9c3e9e0a938c30a4f43ba Foxit-domain-verification=90c4cab4414ce9a2004043298dd584ce f32a1ad19f5e57b68f5bba3bcac88ad61fd110d2eefe9cc12cc05c8bbecf5031 google-site-verification=h1dnhf4Bz-gK562okiF7P9C6hy5xTOc_7v-4ChAOpHo 8b581bbbb2fffb6a643e039a6eac27e87f1fb3cc77a63dbf46a1945364b84f1f 3e449f3017316ed138f1d4a6d4be9346a440a6100bb1f1e749992ae4430a7e74 f0afb2e46e0da6455ff974d8d351d6ed3a5520b5fa607284d71e8624f07608a0 atlassian-domain-verification=/lJYot74zjF1VwfCEfyelSmp2V3z5QnHGSWtBhaZzLjy3KajAZ... b81949f9493326bea1ceae862c879b1a6688f02762ade1c2211702ebb1d5af05 31802817b6579c3d802ca2f1680d394b657eb4788178951026ace15baafb5588 97bf4b9ed60aea1d02f2aeaafc4a2941a8a5c647a0792a8165ea444a7cc34ca7 pardot980712=40b77e6a8c3cb064ca443f8d3483406a462ed6e8096c597515102540924fa4ed airtable-verification=3f1db8793cf1be25596af7e99e060d41 060016681f61e250780cb31c60e8e9c59232b1a6a96c84f4e6df6241169a80d2 4f91259469ca9960db5699179cb910796852693ba7df70b60545f79373c5d0e2 apple-domain-verification=OQGHn6kF8gOnAiWs 02903de83f211f7c1c93dbbfaf24f4de1222fb631d64214c20f5aa76f0cbb2b1 270f64f6d25ce95f3dee98221993750128f27e3c77866485b5a589f4d00ec863 onetrust-domain-verification=733d52d8e41444d097693c749e597ec9 b5619ec13807b9baa5d942538745a66b67dbf3c844edbd82f227cbf539fecd83 69590cb29bef8c8cc7c9b2e65dc042877bf1f8d8ad89d454339a554f4a6657bf a37dc5ea443ef274ee1bbf4d014c312e4a36bf28c28204b033f914f932bd45dc |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 409 ms totalPASS
https://si.edu
303 ms · HTTP/1.0
https://www.si.edu/
106 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://si.edu | 301 | 303 ms | HTTP/1.0 | BigIP |
| 2 | https://www.si.edu/ | 200 | 106 ms | HTTP/1.1 | cloudflare |
See the visual redirect chain in the HTTP Probe tab →
A+Domain Intelligencesi.edu — 34 years, 3 months old, hosted on SMITHSONIAN - Smithsonian Institution, USPASS
410 days
July 31, 2027
143 days
Issued by Internet2
34 years, 3 months
Registered June 19, 1992
Status unknown
Protects against DNS spoofing
SMITHSONIAN - Smithsonian Institution, US
ASN AS25829
160.111.244.22
Registrar unknown