Skip to content
https://unctad.org

Infrastructure

· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.
SCORE
100
GRADE
A+
FIX
0
REVIEW
2
PASS
6
INFO
1
Probed from Madrid, Spain
200 OK
Checks
9
6 PASS 2 REVIEW
B
HTTP Probe Timing
Total 1034 ms — DNS, TCP, TLS, TTFB, content transfer breakdown
REVIEW
DNS Lookup DNS Lookup — time to resolve the domain name to an IP address.
42 ms
TCP Connect TCP Connect — time to establish a TCP connection to the server.
17 ms
TLS Handshake TLS Handshake — time to complete the HTTPS encryption handshake.
25 ms
Time to First Byte Time to First Byte — how long the server takes to respond with the first byte of data.
1.03 s
Total Time Total request time from DNS lookup through full response.
1.03 s

Connection waterfall

DNS Lookup 42 ms TCP Connect 17 ms TLS Handshake 25 ms Server Processing 948 ms Content Transfer 2 ms
B
TLS Certificate Expiry & Recommendations
46 days until leaf cert expires — 3 issues to address
REVIEW

Certificate validity

46
days left
0d 30d 60d 90d+

Recommended actions

  • Add the preload directive and submit to hstspreload.org once max-age + includeSubDomains are in place
  • Enable DNSSEC on your domain for DNS spoofing protection
  • Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+
DNS Records
2 A records, 31 ms lookup
PASS
2 A records, 31 ms lookup
Info::
Resolves to 2 IPv4 address(es)
Got: 104.20.27.93, 172.66.174.241
Info::
Has 2 IPv6 (AAAA) record(s)
Got: 2606:4700:10::ac42:aef1, 2606:4700:10::6814:1b5d
Info::
2 nameserver(s) configured
Got: peter.ns.cloudflare.com, oaklyn.ns.cloudflare.com
Info::
1 mail exchanger(s) configured
Info::
CAA records not checked
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Info::
SPF record present in TXT
Info::
DNS resolution time: 31 ms
Got: 31 ms
A104.20.27.93, 172.66.174.241
AAAA2606:4700:10::ac42:aef1, 2606:4700:10::6814:1b5d
CNAME
NSpeter.ns.cloudflare.com, oaklyn.ns.cloudflare.com
MX
0 unctad-org.mail.protection.outlook.com
TXT
google-site-verification=dqV3vXVweeRTAHGXMc_QprCkzk3NarTR0hjbPlgk3pg
SPF v=spf1 include:un.org include:sendgrid.net ip4:193.239.220.10 ip4:193.239.220.11...
ul678dkbflsisot400o17lg7vv
t8jm5cind1qbbh01el4edd1b4h
g2moppgk1putdah7ebigist1a1
CAALookup not available with standard resolver
Resolved in 31 ms

CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.

Why this matters

Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.

A+
Redirect Chain
No redirects — direct access
PASS
No redirects — direct access
Info::
No redirects — direct access
Got: https://unctad.org

https://unctad.org

973 ms · HTTP/1.1 FINAL

#URLStatusTimeProtocolServer
1https://unctad.org200973 msHTTP/1.1cloudflare
A+
IPv6 Readiness
IPv6 reachable (17 ms)
PASS
IPv6 reachable (17 ms)
Info::
IPv6 is configured and reachable at 2606:4700:10::ac42:aef1, 2606:4700:10::6814:1b5d
Got: 17 ms connect
IPv6 Ready
AAAA Records 2606:4700:10::ac42:aef1, 2606:4700:10::6814:1b5d Connection Reachable (17 ms)
A+
Crawlability
robots.txt present, sitemap with 11 URLs
PASS
robots.txt present, sitemap with 11 URLs
Info::
robots.txt is present
Got: 4165 bytes
Info::
sitemap.xml is present
Info::
sitemap.xml is valid XML
Info::
sitemap.xml contains 11 entries
Info::
Sitemap index with 11 child sitemaps
Info::
robots.txt references sitemap
robots.txt 200 OK
Size 4165 B Sitemaps referenced 1 User-agents Amazonbot, Applebot-Extended, Bytespider, ClaudeBot, CloudflareBrowserRenderingCrawler, Google-Extended, GPTBot, meta-externalagent, *, CCBot Blocking No — crawling allowed
# As a condition of accessing this website, you agree to abide by the following
# content signals:

# (a)  If a Content-Signal = yes, you may collect content for the corresponding
#      use.
# (b)  If a Content-Signal = no, you may not collect content for the
#      corresponding use.
# (c)  If the website operator does not include a Content-Signal for a
#      corresponding use, the website operator neither grants nor restricts
#      permission via Content-Signal with respect to the corresponding use.

# The content signals and their meanings are:

# search:   building a search index and providing search results (e.g., returning
#           hyperlinks and short excerpts from your website's contents). Search does not
#           include providing AI-generated search summaries.
# ai-input: inputting content into one or more AI models (e.g., retrieval
#           augmented generation, grounding, or other real-time taking of content for
#           generative AI search answers).
# ai-train: training or fine-tuning AI models.

# ANY RESTRICTIONS EXPRESSED VIA CONTENT SIGNALS ARE EXPRESS RESERVATIONS OF
# RIGHTS UNDER ARTICLE 4 OF THE EUROPEAN UNION DIRECTIVE 2019/790 ON COPYRIGHT
# AND RELATED RIGHTS IN THE DIGITAL SINGLE MARKET.

# BEGIN Cloudflare Managed content

User-agent: *
Content-Signal: search=yes,ai-train=no
Allow: /

User-agent: Amazonbot
Disallow: /

User-agent: Applebot-Extended
Disallow: /

User-agent: Bytespider
Disallow: /

User-agent: CCBot
Disallow: /

User-agent: ClaudeBot
Disallow: /

User-agent: CloudflareBrowserRenderingCrawler
Disallow: /

User-agent: Google-Extended
Disallow: /

User-agent: GPTBot
Disallow: /

User-agent: meta-externalagent
Disallow: /

# END Cloudflare Managed Content

# Targets all user agents
User-agent: *
# ================================
# Directories
# ================================
# Prevent indexing of core Drupal directories that contain system files.
Disallow: /core/
Disallow: /profiles/
# ================================
# Files
# ================================
# Prevent indexing of configuration and readme files that are not relevant to search engines.
Disallow: /README.md
Disallow: /composer/
Disallow: /modules/README.txt
Disallow: /sites/README.txt
Disallow: /themes/README.txt
Disallow: /web.config
# ================================
# Paths (clean URLs)
# ================================
# Administrative, user related paths (all languages)
Disallow: /admin/
Disallow: /comment/reply/
Disallow: /filter/tips
Disallow: /media/oembed
Disallow: /node/add/
Disallow: /user/
Disallow: /*/admin/
Disallow: /*/comment/reply/
Disallow: /*/filter/tips
Disallow: /*/media/oembed
Disallow: /*/node/add/
Disallow: /*/user/
 
# Specific search result pages (all languages)
Disallow: /boardactions-search
Disallow: /information-documents-search
Disallow: /meetings-search
Disallow: /news-search
Disallow: /official-documents-search
Disallow: /osgstatements-search
Disallow: /podcast-search
Disallow: /pressmaterial-search
Disallow: /project-search
Disallow: /publications-search
Disallow: /search
Disallow: /upcoming-meetings-search
Disallow: /*/boardactions-search
Disallow: /*/information-documents-search
Disallow: /*/meetings-search
Disallow: /*/news-search
Disallow: /*/official-documents-search
Disallow: /*/osgstatements-search
Disallow: /*/podcast-search
Disallow: /*/pressmaterial-search
Disallow: /*/project-search
Disallow: /*/publications-search
Disallow: /*/search
Disallow: /*/upcoming-meetings-search
 
# ================================
# Paths (no clean URLs)
# ================================
# Block duplicate or legacy URLs using index.php.
Disallow: /index.php/
 
# ================================
# Allowed assets
# ================================
# Explicitly allow crawlers to access CSS, JS, and image files 
# so they can render pages correctly and understand visual layout.
Allow: /*.css
Allow: /*.js
Allow: /*.gif
Allow: /*.jpg
Allow: /*.jpeg
Allow: /*.png
Allow: /*.svg
 
# ================================
# Sitemap
# ================================
# Provides the sitemap location for efficient crawling.
Sitemap: https://unctad.org/sitemap.xml

A+
URL Variants
www/non-www, trailing slash, HTTP→HTTPS
PASS
www/non-www, trailing slash, HTTP→HTTPS
Info::
www/non-www redirect configured correctly (preferred: non-www)
Info::
HTTP correctly 301-redirects to HTTPS

www / non-www

301https://www.unctad.org/
200https://unctad.org/

Preferred variant: non-www

HTTP → HTTPS

301http://unctad.org/ https://unctad.org/

Consistent

A
CDN & Delivery
Cloudflare (DYNAMIC)
PASS
Cloudflare (DYNAMIC)
Info::
Site is served via Cloudflare CDN (edge: CDG)
Got: cf-ray: 9eff61c7da35c395-CDG
Info::
CDN cache status: DYNAMIC
CDN Detected: Cloudflare
Provider Cloudflare Cache Status DYNAMIC Evidence cf-ray: 9eff61c7da35c395-CDG
Domain Intelligence
Domain intelligence data not available
INFO
Domain intelligence data not available

RDAP and WHOIS lookup both failed

All checks on this page are automated. Results are estimates - run targeted manual reviews when the score affects a release decision.

Send Feedback