Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
BCrawlabilityrobots.txt present, no sitemapREVIEW
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
User-agent: *
Allow: /
No sitemap found
Adding a sitemap helps search engines discover your pages.
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations38 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
ADNS Records1 A records, 340 ms lookupPASS
| A | 144.92.9.70 |
| AAAA | — |
| CNAME | — |
| NS | adns2.doit.wisc.edu, adns4.doit.wisc.edu, adns3.doit.wisc.edu, adns1.doit.wisc.edu |
| MX | 10 mxa-007b0c01.gslb.pphosted.com 10 mxb-007b0c01.gslb.pphosted.com |
| TXT | google-site-verification=eeNB2eTtYXezQH14f8Ugnx8AdZf5OxBKo4VG1uc4hEU google-site-verification=mXxeq0tbLbPOvRqaUd1iWuG50pD6NdNc6_W-1rmF8QY google-site-verification=7k2kKl8AIqOYpWTRG01Eh_uGtpRlCRAr2QCkcnKXoYI MS=ms73471359 adobe-idp-site-verification=522ccfe1-897f-4b0b-877e-d2628e2f6153 google-site-verification=NEyn-YZpHoB9VM-Lck9t9NqXGFnXrTIXqsCGDUwhyPI atlassian-domain-verification=PrHpnmgrBgHdilLtJWwjJv7zK233bvwigP9gKE9savzE7jOQ/4... docusign=eaef99ef-533a-4bbf-b2c9-2ca9cf48fe5d atlassian-domain-verification=KV2mAjd8Bz9s//3RKm9RtqVGFusE80kK0XbLmEVhYaSew2MYJM... smartsheet-site-validation=KysGL3IvYdXE0wecgsNmAEFJqFAH9jgM atlassian-domain-verification=6iiuF12j3WiokyCZrA6kg/SkZOPEtakMfrsACpSq9EQuC3NpGZ... atlassian-domain-verification=ytA3k//Ojg7IrqdEZpn57c/bHdPO/whwLrOiKh5SpdED2O9XdX... onetrust-domain-verification=09dec2392aeb4de1839dd5c66c44b1be 1password-site-verification=FNJK4BQYWZDAPB75ZKG5BJSH64 atlassian-domain-verification=gebAaRNn0sDQa1Cv6xaIQ0csoPLkxK6PAc7wWRxIRf4w3cfT/j... SPF v=spf1 include:spf.protection.outlook.com include:_spf.wiscmail.wisc.edu include... smartsheet-site-validation=1N5odaIr7WAnmtiy7NSf-1WsimV1ZRSB ZOOM_verify_E78OLta6TIKRJNMD0Wgw5w |
| CAA | Lookup not available with standard resolver |
Multiple A records provide failover if one server goes down.
Single A record means a single point of failure — if that IP goes down, your site is unreachable until DNS TTL expires.
Learn more ▾ ▴
Add multiple A records for round-robin failover, or use a managed DNS provider with health-checked failover (Route 53, Cloudflare, NS1). Short TTL (60-300s) lets clients recover faster on outages.
Source: SRE practice / DNS architecture
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
Slow DNS adds latency to every page load. Consider a faster DNS provider.
DNS resolution is slow — anycast DNS providers (Cloudflare, Route 53) typically resolve <50ms globally.
Source: DNS performance benchmarks
ARedirect Chain1 redirect(s), 909 ms totalPASS
https://wisc.edu
372 ms · HTTP/1.1
https://www.wisc.edu/
536 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://wisc.edu | 301 | 372 ms | HTTP/1.1 | Apache |
| 2 | https://www.wisc.edu/ | 200 | 536 ms | HTTP/1.1 | AmazonS3 |
See the visual redirect chain in the HTTP Probe tab →
A+Domain Intelligencewisc.edu — 41 years, 1 months old, hosted on WISC-MADISON-AS - University of Wisconsin Madison, USPASS
381 days
July 31, 2027
38 days
Issued by Let's Encrypt
41 years, 1 months
Registered September 30, 1985
Status unknown
Protects against DNS spoofing
WISC-MADISON-AS - University of Wisconsin Madison, US
ASN AS59
144.92.9.70
Registrar unknown