Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DURL VariantsActionwww/non-www, trailing slash, HTTP→HTTPSFIX
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
HTTP version does not redirect to HTTPS
FHTTP Probe TimingActionTotal 10714 ms — DNS, TCP, TLS, TTFB, content transfer breakdownFIX
Connection waterfall
DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
BRedirect Chain1 redirect(s), 1313 ms totalREVIEW
https://usf.edu
590 ms · HTTP/1.1
https://www.usf.edu/
723 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://usf.edu | 302 | 590 ms | HTTP/1.1 | Apache/2.2.15 (CentOS) |
| 2 | https://www.usf.edu/ | 200 | 723 ms | HTTP/1.1 | Microsoft-IIS/10.0 |
See the visual redirect chain in the HTTP Probe tab →
If permanent, use 301 instead.
302 (Found) is for genuinely temporary redirects — if this redirect is permanent, switch to 301 to preserve SEO equity.
Learn more ▾ ▴
Search engines treat 302 as temporary, keeping the original URL indexed and not transferring full link equity to the destination. Use 301 (Moved Permanently) for permanent redirects (HTTP→HTTPS, www-vs-non-www, URL restructures).
Source: Google Search Central
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BCrawlabilityrobots.txt present, no sitemapREVIEW
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
###############################
# robots.txt for USF.edu
###############################
User-agent: *
# list folders robots are not allowed to index
Disallow: /images
Disallow: /css
Disallow: /aspnet_client
Disallow: /javascripts
Disallow: /snapshots
Disallow: /web-templates
Disallow: /inc
Disallow: /utilities
Disallow: /calendar
Disallow: /it/archive
Disallow: /test/bob
Disallow: /student-affairs/tedx
Disallow: /*.pdf$
Disallow: /*.doc$
Disallow: /*.docx$
Disallow: /*.ppt$
Disallow: /*.pptx$
Disallow: /*.xls$
Disallow: /*.xlsx$
Disallow: /*.rtf$
Disallow: /*.txt$
#
# list specific files robots are not allowed to index
#
Disallow: /Atest.html
Disallow: /jstest.asp
Disallow: /About-USF/contact-send.asp
Disallow: /About-USF/page-not-found.asp
#
# Ahrefs for Admissions
User-agent: AhrefsBot
User-agent: AhrefsSiteAudit
Allow: /admissions
#
#
User-agent: Twitterbot
# allow twitter to fetch images for news
Allow: /images
#
#
# End of robots.txt file
#
###############################
No sitemap found
Adding a sitemap helps search engines discover your pages.
BTLS Certificate Expiry & Recommendations47 days until leaf cert expires — 4 issues to addressREVIEW
Certificate validity
Recommended actions
- Prefer TLS 1.3 — TLS 1.2 is acceptable but TLS 1.3 removes RSA key exchange and improves latency
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
ADNS Records3 A records, 807 ms lookupPASS
| A | 52.141.216.229, 131.247.100.1, 131.247.1.40 |
| AAAA | — |
| CNAME | — |
| NS | mother.usf.edu, ziggy.usf.edu, azure-dr-bns1.usf.edu |
| MX | 1 usf-edu.mail.protection.outlook.com |
| TXT | MS=ms23753316 d365mktkey=7ip105aztsfd70m9n8eo3ejf9 d365mktkey=601tv5trrvreyj6bzyslcnzax d365mktkey=5nosf1qedtbdafq82xqtn27dv d365mktkey=2m5ABYUCfNSwaoNPV9jzF1F6t0pOB9TnEOsGgm4Avdcx d365mktkey=MrTGq7txTfKTkLhL0nf0OiEC5SrRxxKqKF2aNjiuU8Ex d365mktkey=xa8jurUDwFEz74ZnQ7WlGilxH0tPdLvxa8TSlD5xx0Ux d365mktkey=iNji8EDhmRpPXrRiA5z7ezInCA0vZluGDLLd4YRB80Ux d365mktkey=BGPRxE8WTqSVTE1F5vDJxwjVA1OxgouvxAj3aoOXVVQx d365mktkey=F7uOB9wbJmFEQSALiHvgFuugwPhfs5IqAcUYt9TRIhgx MS=42739637732355332AF820E28477F500065B9A72 status-page-domain-verification=gy36rnszmxbq docusign=0dada4e5-1189-4e69-8de2-977a9553c398 docusign=aa2efdf7-c1aa-4262-800b-3d2b94bbb6cc adobe-idp-site-verification=d879fe48fced7913c6d147a34ab70d2ff94d56f1d92c646fce75... google-site-verification=SpqYEXgDGiR3zr2qA_jvNRKD4l9zfNzQwgsqRSjRmM0 google-site-verification=aWIbQ2KduYLv2g15bKXksgtjMchwc6KZzJNzJNK2_30 NYV0AYHBAGCHRKN8I4WWX4AH4H0OY2TTMAIB5RDDN cisco-ci-domain-verification=65f65a56c7bb4653556a72d060506f8605f9998184dc004d40e... SFMC-j-cNwBW8CQysevUymKy6se0n8iBbrhUq7W-CSmW7 apple-domain-verification=f4cisO9UYFrZ6KlT twilio-domain-verification=441d54f282e7bef5f1c32d639bea0cd4 e2ma-verification=loubb atlassian-sending-domain-verification=18e168c7-b1cc-4cdd-aa3b-8572e7c3544f canva-site-verification=NRk7_nO8gJ7uOY-4wmV24A google-site-verification=wrSVEyGKWhHeh1JWDAKxXvrPvoPPP6eXzSX8sKIA-dU d365mktkey=UEbGLz5xI1Tx8nbciuYKn2e0B6iLhx5A5XryOtLCWOMx d365mktkey=gzNvQ60b67c6fmofrMNGloYMOatQPeJ9xJOokxMFJe8x d365mktkey=DxFf3WuF0IGB61YnH34L9kDh07tGIeNOkfRouXlIfIUx asv=d224a0547fb92e2496202b68f195b1b6 atlassian-domain-verification=xB3/NkAuVnlN9v3May92Kx68o7N3FTau6mxXUaONHM3VHRHbc5... SPF v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all yxU9UxBuQ/bkByoGU8S3012Fyu7esoAS102X+LFYacXm4opMH3Nr6c6A3o96SekSehT+xt5f22rmzu74... IVTBbFkoe6isnHlO7BuuigyKnPTbb2Q8p7AtTL3wxLxXJA5yKjp0tW/PlWqnvpCcK2DXy65unYUxqmf9... |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
Slow DNS adds latency to every page load. Consider a faster DNS provider.
DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.
Source: DNS performance benchmarks
A+Domain Intelligenceusf.edu — 40 years, 1 months old, hosted on Microsoft AzurePASS
410 days
July 31, 2027
47 days
Issued by Internet2
40 years, 1 months
Registered September 29, 1986
Status unknown
Protects against DNS spoofing
Microsoft Azure
ASN AS8075
52.141.216.229
Registrar unknown