Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.FIPv6 ReadinessActionIPv6 records exist but unreachableFIX
Having AAAA records but an unreachable server is worse than no AAAA — clients may experience delays before falling back to IPv4.
Advertising IPv6 (AAAA records) without a reachable server means IPv6-preferring clients silently fail every connection.
Learn more ▾ ▴
Modern browsers prefer IPv6 if AAAA exists (Happy Eyeballs algorithm). If the IPv6 server isn't reachable, browsers fall back to IPv4 — but with seconds of added latency per request. Either fix IPv6 reachability or remove the AAAA records.
Source: RFC 8305 (Happy Eyeballs)
DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
BURL Variantswww/non-www, trailing slash, HTTP→HTTPSREVIEW
www / non-www
Inconsistent — duplicate content risk
HTTP → HTTPS
Consistent
BTLS Certificate Expiry & Recommendations174 days until leaf cert expires — 2 issues to addressREVIEW
Certificate validity
Recommended actions
- Submit your domain to hstspreload.org to be added to the Chrome preload list
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records3 A records, 12 ms lookupPASS
| A | 34.233.146.45, 100.28.244.61, 107.22.78.153 |
| AAAA | 2600:1f18:3a6e:b641:e65a:ee0e:a6dc:89f4, 2600:1f10:4617:d340:6535:2eb1:e4db:244d, 2600:1f18:7400:4a95:de75:7fa3:6311:a663 |
| CNAME | — |
| NS | a1-63.akam.net, a3-66.akam.net, a8-67.akam.net, a9-64.akam.net, a14-64.akam.net, a26-65.akam.net |
| MX | 20 christopher-ew.state.gov 20 stimson.state.gov |
| TXT | 296google-site-verification=qppF5HANsa4Le2yz36etSS0JzYXgrmlVCT0B3WvvJs0 3s7a9eg7p962inkbc8m2trfqm1 7jlo1bedb9nhjlqfkicji0otp3 fd8jjikpt2lfo2afsth4c970l0 sb85m8m5b6mnl9chhhhac7qg01 apple-domain-verification=B9cNW7DYEe4D1XLt docusign=1b1e93a2-2269-4fb6-bc74-d18191e068c8 docusign=1f1a0eb6-3b40-421f-a277-a8ccb58c3f76 docusign=2417507a-10ef-4376-aa1f-297ed6024477 docusign=8e75125d-b668-4668-8577-7ebc98204220 amazonses:4O2xpkJi4Svaztkj0jpYpU82Oqsq7zkswuN2gAf5iEY= facebook-domain-verification=e2plk83i6q38ym069k2y3fizpzk3rm ms-domain-verification=60eeb958-7b4d-428c-8355-8c2aa8e41563 smartsheet-gov-site-validation=Balwzo_O9A2uB3EXVmu6-H1ZimvN79gt smartsheet-gov-site-validation=C_4pt-6bNmPpjrmKmO5c9p1qupAMBcnO google-site-verification=9bWszKscPW3HZH2zqvYiL_MT4hyJzpPTfHMEO5WGMIw google-site-verification=k8qmb6x58WZ4T-clIWhXYNSTZaLGvvKoRhxL4MwzM3s google-site-verification=qppF5HANsa4Le2yz36etSS0JzYXgrmlVCT0B3WvvJs0 h1-domain-verification=PywJ6ZKiZtwB5E4RqLrr2QrokcfSUJ4yMBPboLQhNd8TAbes adobe-sign-verification=7ef4a560cf4caa63d9e706ddafc56fa704f01da63632a29363fcd976... b+VwNE1mX7ltBSA4ZbrFmDCu7muDaRyJIPWDKJeQz1NDNusR1j3sYpBKBXQ1W86IJ1uI1bUA4m0dIet1... wiz-domain-verification=a02ea9025bbc0aa14606367133a8cef093b7c991110c85f7fe80c445... adobe-idp-site-verification=85b7dc1b57ae06180cf14f199ddb60b6a689670d131931659bae... SPF v=spf1 mx a:_msiplista.state.gov include:_iplist.state.gov include:_iplist2.stat... |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
ARedirect Chain1 redirect(s), 813 ms totalPASS
https://state.gov
786 ms · HTTP/1.1
https://www.state.gov/
27 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://state.gov | 302 | 786 ms | HTTP/1.1 | awselb/2.0 |
| 2 | https://www.state.gov/ | 200 | 27 ms | HTTP/1.1 | Apache |
See the visual redirect chain in the HTTP Probe tab →
If permanent, use 301 instead.
302 (Found) is for genuinely temporary redirects — if this redirect is permanent, switch to 301 to preserve SEO equity.
Learn more ▾ ▴
Search engines treat 302 as temporary, keeping the original URL indexed and not transferring full link equity to the destination. Use 301 (Moved Permanently) for permanent redirects (HTTP→HTTPS, www-vs-non-www, URL restructures).
Source: Google Search Central
ACrawlabilityrobots.txt present, no sitemapPASS
A sitemap helps search engines discover and index your pages more efficiently.
No sitemap.xml — Google relies on crawl-graph discovery alone, slowing indexing of deep or fresh URLs.
Learn more ▾ ▴
A sitemap accelerates Google's discovery of new and updated content. Most CMSes auto-generate one; static-site frameworks need a build-step plugin. Reference it from robots.txt and submit in Search Console to confirm Google can fetch it.
Source: sitemaps.org / Google Search Central
crawl-delay: 5
# START YOAST BLOCK
# ---------------------------
User-agent: *
Disallow:
Sitemap: https://www.state.gov/sitemap_index.xml
# ---------------------------
# END YOAST BLOCK
No sitemap found
Adding a sitemap helps search engines discover your pages.
A+Domain Intelligencestate.gov — via get.gov, 28 years, 11 months oldPASS
46 days
August 29, 2026
174 days
Issued by Amazon
28 years, 11 months
Registered October 2, 1997
Enabled
Protects against DNS spoofing
Unknown
2600:1f10:4617:d340:6535:2eb1:e4db:244d
get.gov
Expiry timeline
Recommended actions
- Renew the domain or enable auto-renewal to prevent accidental expiry
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice