Domain technical report
Office of the Comptroller of the Currency (OCC)
occ.gov
Ensuring a safe and sound federal banking system for all Americans
IPv41
IPv61
MX2
NS2
Analyze any domain
Get a complete DNS, email, SSL, HTTP and network analysis in seconds.
86
Total
100
DNS
70
Email
84
Security
55
Network
100
Availability
Domainocc.gov
IPv41
IPv61
MX records2
StatusActive
DiagnosticsMain findings and recommendations
IPv4 (A)30 / 30 pts · Dns
1 IPv4 address(es) detected.
IPv6 (AAAA)10 / 10 pts · Dns
1 IPv6 address(es) detected.
Name server redundancy20 / 20 pts · Dns
2 NS record(s); 2 or more required.
SOA record10 / 10 pts · Dns
Authoritative zone record.
DNSSEC chain15 / 15 pts · Dns
DS and DNSKEY detected.
CAA policy5 / 5 pts · Dns
Certificate authority restriction.
DNS propagation10 / 10 pts · Dns
Agreement between public resolvers.
MX records20 / 20 pts · Mail
2 MX record(s).
SPF25 / 25 pts · Mail
SPF policy published.
DMARC25 / 25 pts · Mail
DMARC policy published.
DKIM0 / 20 pts · Mail
No tested DKIM selector responded.
MTA-STS0 / 5 pts · Mail
Mail transport policy.
TLS-RPT0 / 5 pts · Mail
TLS reporting policy.
Valid TLS certificate55 / 55 pts · Security
80 day(s) remaining.
Certificate lifetime10 / 10 pts · Security
Full points require at least 30 days remaining.
HTTP security headers19 / 35 pts · Security
5 of 9 evaluated headers detected.
PTR reverse DNS0 / 30 pts · Network
PTR not detected.
IPv4 diversity20 / 35 pts · Network
Two or more IPv4 addresses receive full points.
IPv6 connectivity35 / 35 pts · Network
AAAA availability.
DNS resolution40 / 40 pts · Availability
At least one address family must resolve.
HTTP response40 / 40 pts · Availability
HTTP/1.1 200 OK
HTTPS final URL20 / 20 pts · Availability
Final URL uses HTTPS.
DNS and emailPublished records and email configuration
A
1 record(s)199.83.40.54
AAAA
1 record(s)2610:108:8001:101::54
CNAME
0 record(s)—
Not configured
MX
2 record(s)10 cemailhub1in.treasury.gov. 10 cwmailhub1in.treasury.gov.
TXT
2 record(s)"xyx6ztg322k79bhlfvpqpq3j78m49r8s" "v=spf1 redirect=_spf.occ.gov"
NS
2 record(s)margot.ns.cloudflare.com. tadeo.ns.cloudflare.com.
SOA
1 record(s)margot.ns.cloudflare.com. dns.cloudflare.com. 2411388380 10000 2400 604800 1800
CAA
12 record(s)0 issue "comodoca.com" 0 issue "letsencrypt.org" 0 issuewild "ssl.com" 128 iodef "mailto:dns-admin@occ.treas.gov" 0 issue "pki.goog; cansignhttpexchanges=yes" 0 issuewild "pki.goog; cansignhttpexchanges=yes" 0 issuewild "digicert.com; cansignhttpexchanges=yes" 0 issue "digicert.com; cansignhttpexchanges=yes" 0 issuewild "comodoca.com" 0 issuewild "letsencrypt.org" 128 issue "entrust.net" 0 issue "ssl.com"
DS
1 record(s)2371 13 2 7F1D6871079122A8ADD0D2A9C741F970285AECFD0022998F1E8B24E1 93D4B8AC
DNSKEY
2 record(s)256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8 KqXXFJkqmVfRvMGPmM1x8fGAa2XhSA== 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+ KkxLbxILfDLUT0rAK9iUzy1L53eKGQ==
RRSIG
2 record(s)AAAA 13 2 300 20260812021655 20260810001655 34505 occ.gov. 4WIzXpohjioAkwoKkUSVNLM1Iyml0R+WFl6Hm/BfQcj0NdgfOYvbXSkq OTvIW6q+ydZ+8gRZi4lh97eDPAZ0jw== NS 13 2 86400 20260812010343 20260809230343 34505 occ.gov. hEDb3mqz67fkA0LtjjU8YnVyGfaMNaBGEInz7iEoXqX3g0IlPUZ3/4c2 5bt5vloXQsV+VvjNxvuitZ3nFcCEGA==
NSEC
1 record(s)\000.occ.gov. A NS SOA PTR HINFO MX TXT AAAA LOC SRV NAPTR CERT SSHFP RRSIG NSEC DNSKEY TLSA SMIMEA HIP CDS CDNSKEY OPENPGPKEY SVCB HTTPS URI CAA
NSEC3
0 record(s)—
Not configured
SRV
0 record(s)—
Not configured
NAPTR
0 record(s)—
Not configured
TLSA
0 record(s)—
Not configured
SSHFP
0 record(s)—
Not configured
SPF
Configuredv=spf1 redirect=_spf.occ.gov
DMARC
Configuredv=DMARC1; p=reject; fo=1; rua=mailto:us-treasury@rua.dmp.cisco.com,mailto:reports@dmarc.cyber.dhs.gov,mailto:DMARC_Reports@occ.treas.gov; ruf=mailto:us-treasury@ruf.dmp.cisco.com
DKIM
Not found—
Not configured
Analyzed webpageMetadata and HTTP response
Title and description
ExtractedTitle
Office of the Comptroller of the Currency (OCC)
Description
Ensuring a safe and sound federal banking system for all Americans
Final URL
https://occ.gov/
HTTP status
200
HTTP
Status
HTTP/1.1 200 OK
Final URL
https://occ.gov/
Version
2
Server
X-Powered-By
SSL and HTTP securityCertificate, protocol and security headers
SSL certificate
AvailableAvailable
Yes
Issuer
Entrust Limited
CN
OCC.GOV
Valid from
2025-09-28T19:00:00-05:00
Valid until
2026-10-30T18:59:59-05:00
Days remaining
80
Protocol
TLSv1.2
Cipher
ECDHE-RSA-AES128-GCM-SHA256
Security headers
5 activeHSTSImplemented
Content Security PolicyImplemented
X-Content-Type-OptionsImplemented
X-Frame-OptionsImplemented
Referrer PolicyImplemented
Permissions PolicyNot detected
Cross-Origin-Opener-PolicyNot detected
Cross-Origin-Embedder-PolicyNot detected
Cross-Origin-Resource-PolicyNot detected
DNS propagationComparison across public resolvers
Public resolver comparison
ConsistentConsistent propagation
5 public resolvers queried.
ResolverServerResultLatency
Google
8.8.8.8199.83.40.54
54,72 ms
Cloudflare
1.1.1.1199.83.40.54
37,86 ms
Quad9
9.9.9.9199.83.40.54
36,81 ms
OpenDNS
208.67.222.222199.83.40.54
42,60 ms
AdGuard
94.140.14.14199.83.40.54
85,63 ms
IP, geolocation and ASNAssociated network information
199.83.40.54
No datasuccess
No
country
region
city
asn
organization
isp
Visitor information
Visitorip
216.73.217.62
reverse
country
country_code
region
city
latitude
longitude
isp
organization
asn
timezone
browser
Other
os
Other
language
user_agent
Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)
is_bot
Yes
cloudflare
No
SMTPEmail port connectivity
cemailhub1in.treasury.gov
Port 25: Closed/unreachable - 3.6 ms - Port 465: Closed/unreachable - 4021 ms - Port 587: Closed/unreachable - 4023.6 ms -