Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BTLS Certificate Expiry & Recommendations55 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records1 A records, 36 ms lookupPASS
| A | 130.60.184.132 |
| AAAA | — |
| CNAME | — |
| NS | ns3.uzh.ch, ns2.uzh.ch, ns1.uzh.ch |
| MX | 10 uzh-ch.mail.protection.outlook.com |
| TXT | google-site-verification=EWRa2h69RPpieZESLmZZO93FUq7lunH9vMu2_2qaS28 atlassian-domain-verification=6iHTrnkqTUQQIDdPY1SKYhUu47uakJGm5eny4rTIFMncSd3ZSl... SPF v=spf1 ip4:40.95.0.0/16 ip4:130.60.207.240/28 ip4:130.60.206.24/31 include:spf.p... google-site-verification=ZqW-6jV5MwoVU_1cW50AKiuqUT1tlML5ErjWOqXbW5w |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 342 ms totalPASS
https://uzh.ch
140 ms · HTTP/1.1
https://www.uzh.ch/de.html
202 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://uzh.ch | 302 | 140 ms | HTTP/1.1 | Apache |
| 2 | https://www.uzh.ch/de.html | 200 | 202 ms | HTTP/1.1 | Apache |
See the visual redirect chain in the HTTP Probe tab →
If permanent, use 301 instead.
302 (Found) is for genuinely temporary redirects — if this redirect is permanent, switch to 301 to preserve SEO equity.
Learn more ▾ ▴
Search engines treat 302 as temporary, keeping the original URL indexed and not transferring full link equity to the destination. Use 301 (Moved Permanently) for permanent redirects (HTTP→HTTPS, www-vs-non-www, URL restructures).
Source: Google Search Central
ACrawlabilityrobots.txt present, sitemap with 0 URLsPASS
An empty sitemap provides no value. Add <url> entries for your pages.
An empty sitemap signals 'no content to index' to Google — actively harmful versus having no sitemap at all.
Learn more ▾ ▴
Google compares URLs in the sitemap against URLs it has crawled. An empty sitemap on a site with thousands of pages signals abandonment. Either populate it correctly (most CMSes auto-generate) or delete the file and let Google crawl normally.
Source: Google Search Central / sitemaps.org
User-agent: *
Disallow: /old-files/
Disallow: /images/
Disallow: /gif/
Disallow: /tiff/
Disallow: /cgi-bin/
Disallow: /search/
Disallow: /oci/counter
Disallow: /oci/intra
Disallow: /oci/pics
Disallow: /VV/
Disallow: /VV-all/
Disallow: /id/cl/dl/mobil/vpn/ssl-dir/
Disallow: /de/studies/programs/pupils/coordinators
Disallow: /studies/programs/pupils/coordinators
Allow: /cgi-bin/ssl-dir/kurse
User-agent: msnbot
Disallow: /
Sitemap: https://www.uzh.ch/sitemap.txt
AURL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Use 301 (permanent) instead of 302 (temporary)
A+HTTP Probe TimingTotal 170 ms — DNS, TCP, TLS, TTFB, content transfer breakdownPASS
Connection waterfall
Domain IntelligenceDomain intelligence data not availableINFO
RDAP and WHOIS lookup both failed