Skip to content
https://stanford.edu

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
88
GRADE
B
FIX
2
REVIEW
2
PASS
5
INFO
0
Probed from New York, United Stated
301 Moved Permanently
Checks
9
5 PASS 2 REVIEW 2 FIX
D
TLS Certificate Expiry & Recommendations
Action
8 days until leaf cert expires — 5 issues to address
FIX

Certificate validity

8
days left
0d 30d 60d 90d+
Renew urgently — under 14 days remaining

Recommended actions

  • Renew certificate — 8 days remaining
  • Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
  • Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
D
CDN & Delivery
Action
No CDN detected
FIX
No CDN detected
Warning::
No CDN detected
A CDN can significantly improve load times for users around the world by caching content at edge nodes closer to them.
No CDN detected

Consider using a CDN to improve global delivery speed and reduce origin load.

B
Crawlability
robots.txt present, no sitemap
REVIEW
robots.txt present, no sitemap
Info::
robots.txt is present
Got: 191 bytes
Info::
No sitemap.xml found
A sitemap helps search engines discover and index your pages more efficiently.
Info::
robots.txt does not reference a sitemap
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.

A sitemap helps search engines discover and index your pages more efficiently.

Why this matters

No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.

Learn more ▾

A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.

Source: sitemaps.org / Google Search Central

Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.

Why this matters

robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.

Source: sitemaps.org

robots.txt 200 OK
Size 191 B Sitemaps referenced 0 User-agents * Blocking No — crawling allowed
User-agent: *
Disallow: /~folutade/ATI/
Disallow: /~neubank/Eubank_EthnicityNetworksPaper.pdf
Disallow: /~neubank/Eubank_EthnicityNetworksPaper2016.pdf
Disallow: /dept/soc/people/rsandefur/
sitemap.xml No sitemap found

No sitemap found

Adding a sitemap helps search engines discover your pages.

B
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
REVIEW
www/non-www, trailing slash, HTTP→HTTPS
Critical::
Both www and non-www versions serve content
Got: Both variants return 200 Expected: One variant 301-redirects to the other
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

200https://www.stanford.edu/
200https://stanford.edu/

Inconsistent — duplicate content risk

HTTP → HTTPS

301http://stanford.edu/ → https://www.stanford.edu/

Consistent

A
DNS Records
1 A records, 407 ms lookup
PASS
1 A records, 407 ms lookup
Info::
Resolves to 1 IPv4 address(es)
Got: 171.67.215.200
Info::
Single A record — no DNS redundancy
Multiple A records provide failover if one server goes down.
Info::
Has 1 IPv6 (AAAA) record(s)
Got: 2607:f6d0:0:925a::ab43:d7c8
Info::
6 nameserver(s) configured
Got: ns5.dnsmadeeasy.com, ns6.dnsmadeeasy.com, ns7.dnsmadeeasy.com, argus.stanford.edu, atalante.stanford.edu, avallone.stanford.edu
Info::
2 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Warning::
DNS resolution is slow (407 ms)
Slow DNS adds latency to every page load. Consider a faster DNS provider.
Got: 407 ms
A171.67.215.200
AAAA2607:f6d0:0:925a::ab43:d7c8
CNAME—
NSns5.dnsmadeeasy.com, ns6.dnsmadeeasy.com, ns7.dnsmadeeasy.com, argus.stanford.edu, atalante.stanford.edu, avallone.stanford.edu
MX
10 mxb-00000d07.gslb.pphosted.com
10 mxa-00000d07.gslb.pphosted.com
TXT
e2ma-verification=07pfb
e2ma-verification=4x8eb
e2ma-verification=5g5eb
e2ma-verification=6uqeb
e2ma-verification=7x8eb
e2ma-verification=7z0eb
e2ma-verification=8uqeb
e2ma-verification=8z0eb
e2ma-verification=98lgb
e2ma-verification=a00eb
e2ma-verification=avqab
e2ma-verification=b00eb
e2ma-verification=c00eb
e2ma-verification=cvnbb
e2ma-verification=d1ueb
e2ma-verification=diffb
e2ma-verification=dy8eb
e2ma-verification=ey8eb
e2ma-verification=fq1fb
e2ma-verification=gu1ab
e2ma-verification=k4dgb
e2ma-verification=m0ggb
e2ma-verification=n4agb
e2ma-verification=nbxfb
e2ma-verification=nw5fb
e2ma-verification=q57fb
e2ma-verification=qmrgb
e2ma-verification=v4lgb
e2ma-verification=vaogb
e2ma-verification=vnjbb
e2ma-verification=w4lgb
e2ma-verification=zv1eb
6ce2e56c0743c0db12fbb8d03c7359
TAILSCALE-scyG2dkta4GC30jIuPOW
e2ma-verification=fq1fb-remove
e2ma-verification=nbxfb-remove
3VCR5VZOJKXDX3AFKS202RQVEDHPD1WB04T0QNAB
brevo-code:033215cd835c1e9ddc21dfb479c54b76
brevo-code:09357c2630559d902817770f34dbf0b1
brevo-code:97c04c03c676317dbc22a7ee103483a6
blitz=mu-0e24b17b-23dce65a-c0b14b75-e742cd66
SFMC-6lLIlwvbCaTM80Tq1R1zsnKi9CqM3R6ZPPvoE6sK
jamf-site-verification=YL4ixnZvLipoTrfg2RUwsg
Sendinblue-code:bde1f306529e82fd2ccf9857fc09aa98
autodesk-domain-verification=pXMpLf7JP-86kN9Zt5jI
airtable-verification=0a746053a028476f6d1671cbc9016585
airtable-verification=13ac52fb202035dbad35b0ab24e598b4
airtable-verification=22e64691170fba22a576b309bf587b87
airtable-verification=6ae90a183923b17d9f1c76e90e31b4e4
airtable-verification=6deae5f718f685ac8c8c3c37418aafcf
airtable-verification=7cdd67720483f4801fc65d998968476e
airtable-verification=866b719f2d2dab4393f0a7eb83f4d8ba
airtable-verification=94cdd68161a8e41e92cc5dd7abde8eae
airtable-verification=b8f5e3c2468d582f896b4a8f0839dd8a
airtable-verification=bf58597802ed6d32ee6bcb86a575a186
amazonses:7IodrIPH40wdjQxliaAOOqSX8rn4q7lSiSvuFZPwUnY=
detectify-verification=bc8e96f8fbf64ced057d0f44eff83381
onetrust-domain-verification=1e6b4a2989b7412499dca24f8188396b
onetrust-domain-verification=2983144927f6450ea12b5557b2080dae
anthropic-domain-verification-rrhf1p=E3SBrctYaemDvHQIrJbKWafVN
vmware-cloud-verification-2abfb849-6039-461b-aa8b-eee2629dd6e4
samsung-domain-verification=7b810e85-b3d6-4c1c-b33c-44f242e81537
remarkable-domain-verification=d359b4b2-89f8-46f3-862a-6008b632497b
google-site-verification=1HuKdQQTxv1R8v4dxihLzji-mH23d2KchIeaxsljN6Q
google-site-verification=C6QZVcR4K-mSTqLE_9uVC7twZdys_BRJLLVFwgGIG3E
google-site-verification=JM6F1JtgpITjPAatlXWl2mpzq_zobtnQEwKsbGA0DIk
google-site-verification=XBIgNMnjRT9eOchFldQx7rsHG9ROchX682SfSM0_1lE
google-site-verification=bamHrkKBqpOQ8ouXQe0uFSuvVUFTB_TLju7gSCNq_Qw
google-site-verification=hIsj3ke1PYviQQm1ig-VMAlmA07GWc5vYeh2qJT56OA
google-site-verification=kyvps-t3mjXwz5HBQa7oO40qvObbV8z_B1IoySwe-GY
google-site-verification=n-cl_O68vbC-_UmufTZMmLLQb9wKnuUo-4FPom4m3iA
google-site-verification=p4uNfSaD7rr13xbA1Q1yW6I0DckXOv1ujjc0FQGjGEM
google-site-verification=zwyVSZ2CSXXUndqTu5itEDFvp58bOFVBPAbtrIondBU
notion-domain-verification=zGjaM9fWZoGRyOnvaxST0hfeCzfxvxzJnKMTN69sYJw
h1-domain-verification=aV4vQvSRHvQxGhvdz29L2ozsKDTReL7qKDgdjhPgzA5E7UC6
pexip-ms-tenant-domain-verification=3f0ac106-a365-4d3b-9fb9-2a124f04d0b6
mgverify=c7c142ba8b95199619ad561a75f165ad285c322b3892f9621c083b0293fd0da0
pardot604641=4bbe27c356474886816017d9b5aea8f21f2d3c3b651096960379a441342c51fb
pardot884873=1b7cebffc22a290049b6710c0620e741a3f4d3a720196287a95816f9afaa7695
stripe-verification=984c5a4eb98ae34bbaf60c12403c1d8889d4ad02b2dc672232a89b21f905...
sending_domain1097582=7dcf00de01f5fc8307de59194e0a8b462cbfa2b5e32d35bfc9e5269b93...
bwZknJMLNV1XuaJAyUmKlAFrdZo+p5yDlTNACmDUWhgtyihfJc8oWMnK7hWLreN+ozU3mX91yHHzZx0a...
htBOpqv5il135Xfa09GRiVHY09Xb9qXNj6o5lAfj8gNoBvyyGu5rSb4gvSj9lCUwY1NF0+wL2BO1ZDIc...
wiz-domain-verification=2957e22f41cc73b19d44177ecf39bd1a1926a1e6362011b8f83e65aa...
adobe-idp-site-verification=4c872117a60d5c3b7d132914730b3f3e2189c67a217450a2f3bc...
atlassian-domain-verification=C9ho3V/RWWifTCqh8sF3L0PI7jVZWAL9dCxVL1gzJvr6SYJCKB...
SPF v=spf1 ip4:171.67.219.64/27 ip4:171.67.224.0/28 ip4:171.67.43.137 ip4:171.67.43....
CAALookup not available with standard resolver
Resolved in 407 ms

Multiple A records provide failover if one server goes down.

Why this matters

Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.

Learn more ▾

Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.

Source: SRE practice / DNS architecture

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

Slow DNS adds latency to every page load. Consider a faster DNS provider.

Why this matters

DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.

Source: DNS performance benchmarks

A
Redirect Chain
1 redirect(s), 397 ms total
PASS
1 redirect(s), 397 ms total
Info::
Single redirect
Got: https://stanford.edu → https://www.stanford.edu/ (301)
Info::
WWW normalization redirect

https://stanford.edu

289 ms · HTTP/1.1

301

https://www.stanford.edu/

108 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://stanford.edu301289 msHTTP/1.1Apache
2https://www.stanford.edu/200108 msHTTP/1.1nginx

See the visual redirect chain in the HTTP Probe tab →

A+
IPv6 Readiness
IPv6 reachable (69 ms)
PASS
IPv6 reachable (69 ms)
Info::
IPv6 is configured and reachable at 2607:f6d0:0:925a::ab43:d7c8
Got: 69 ms connect
IPv6 Ready
AAAA Records 2607:f6d0:0:925a::ab43:d7c8 Connection Reachable (69 ms)
A+
Domain Intelligence
stanford.edu — 41 years, 1 months old
PASS
stanford.edu — 41 years, 1 months old
Info::
Domain registered until Jul 31, 2028 (2 years, 3 months remaining)
Domain expiry

750 days

July 31, 2028

SSL certificate

8 days

Issued by Internet2

Domain age

41 years, 1 months

Registered October 4, 1985

DNSSEC

Status unknown

Protects against DNS spoofing

Hosting

Unknown

2607:f6d0:0:925a::ab43:d7c8

Registrar

Registrar unknown

Lock status unknown 6 NS records
Expiry timeline
Today
+1 year
Domain expiry SSL expiry Danger zone (≤30 days)
Recommended actions
  • Renew the TLS certificate or verify auto-renewal is working
Registrar
Created October 4, 1985 (41 years, 1 months ago)
Expires July 31, 2028 (2 years, 3 months)
Last Updated January 5, 2026
Name Servers argus.stanford.edu, ns7.dnsmadeeasy.com, ns6.dnsmadeeasy.com, ns5.dnsmadeeasy.com, avallone.stanford.edu, atalante.stanford.edu
Registrant Stanford University
Hosting
IP Address 2607:f6d0:0:925a::ab43:d7c8
Data source: whois (0.4s)
A+
HTTP Probe Timing
Total 291 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
PASS
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
3 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
69 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
143 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
292 ms
Total Time Total request time from DNS lookup through full response.
292 ms

Connection waterfall

DNS Lookup 3 ms TCP Connect 69 ms TLS Handshake 143 ms Server Processing 77 ms Content Transfer 0 ms
All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback