Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.BRedirect Chain1 redirect(s), 1163 ms totalREVIEW
https://vanderbilt.edu
829 ms · HTTP/1.1
https://www.vanderbilt.edu/
334 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://vanderbilt.edu | 302 | 829 ms | HTTP/1.1 | CloudFront |
| 2 | https://www.vanderbilt.edu/ | 200 | 334 ms | HTTP/1.1 | AmazonS3 |
See the visual redirect chain in the HTTP Probe tab →
If permanent, use 301 instead.
302 (Found) is for genuinely temporary redirects — if this redirect is permanent, switch to 301 to preserve SEO equity.
Learn more ▾ ▴
Search engines treat 302 as temporary, keeping the original URL indexed and not transferring full link equity to the destination. Use 301 (Moved Permanently) for permanent redirects (HTTP→HTTPS, www-vs-non-www, URL restructures).
Source: Google Search Central
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BHTTP Probe TimingTotal 1378 ms — DNS, TCP, TLS, TTFB, content transfer breakdownREVIEW
Connection waterfall
BTLS Certificate Expiry & Recommendations185 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
BCDN & DeliveryAWS CloudFront (FunctionGeneratedResponse from cloudfront)REVIEW
ADNS Records4 A records, 324 ms lookupPASS
| A | 18.67.65.116, 18.67.65.60, 18.67.65.38, 18.67.65.119 |
| AAAA | — |
| CNAME | — |
| NS | ns3.vanderbilt.edu, ns2.vanderbilt.edu, ns4.vanderbilt.edu, ns1.vanderbilt.edu |
| MX | 0 vanderbilt-edu.mail.protection.outlook.com |
| TXT | SPF v=spf1 mx ip4:129.59.16.3 ip4:129.59.16.4 ip4:129.59.16.5 ip4:129.59.15.240 ip4:... MS=ms22528399 atlassian-domain-verification=KIrgf7/apONq/bRnIYdJbtFpatSYKDRI9zXQMa5facg4/7C7aQ... google-site-verification=ZPkskV3bBDvSNlfQT4v7iQztoJzSniLVsXVRNUysWTs infoblox-domain-mastery=f0b5ed4094e6987428819256812c9b4e577e8947244eaa8ac44dfa20... docusign=3041bd88-1c88-49c0-8576-3d2885cb672b docusign=529f0db5-6560-4a5a-bd99-efb58047d240 ZOOM_verify_dr4sLjF8sxm6AcjtNNiMB2 _v8vb83d1o4uah31sa6cwz1ahxj5v68w notion-domain-verification=97dE1bHc7XC2FHSsR7KrzXMFu0GSMKquWBIciXaOXMx |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
Slow DNS adds latency to every page load. Consider a faster DNS provider.
DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.
Source: DNS performance benchmarks
ACrawlabilityno robots.txt, sitemap with 1 URLsPASS
robots.txt is optional but recommended. It tells search engine crawlers which pages to index.
No robots.txt — crawlers fetch /robots.txt and get 404; not breaking but means default crawl behavior with no directives or sitemap reference.
Learn more ▾ ▴
A minimal robots.txt with `User-agent: * / Allow: / / Sitemap: https://example.com/sitemap.xml` covers the basics. Without it, crawlers behave fine but lose the sitemap signal and can't be selectively blocked from crawl-traps.
Source: robotstxt.org
No robots.txt found
This is fine for most sites — a missing robots.txt allows all crawling by default.
A+Domain Intelligencevanderbilt.edu — 39 years, 3 months old, hosted on AWSPASS
380 days
July 31, 2027
185 days
Issued by Amazon
39 years, 3 months
Registered July 27, 1987
Status unknown
Protects against DNS spoofing
AWS
ASN AS16509
18.67.65.119
Registrar unknown