How is bls.gov?

Looks fine risk 0/100

Registered 29 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 186 ms.

Why

02050100

finecarefulhigh risk

·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.

Site

403

186 ms

HTTPS

141 d

left on a Entrust Limited certificate

Age

29 years

registered 1997-10-02

Blocklists

listings across 5 lists

Everything we looked at

DNS records4 record types

A	146.142.252.23
MX	10 bls-gov.mail.protection.outlook.com
NS	auth120.ns.uu.net auth111.ns.uu.net
TXT	v=spf1 ip4:146.142.251.47 ip4:152.180.49.16 ip4:146.142.251.70 ip4:174.129.192.189 ip4:146.142.1.10 include:spf.protection.outlook.com ~all cisco-ci-domain-verification=36e6e64142db18e366ff0d250eb59bfb1f6d20b409eaf8c9169863de6d047cba apple-domain-verification=xywWlbaOZg79jwex _2v7gobu8ro1tyrnhum286vdyqj2cj96 knowbe4-site-verification=a3074718d4151d6cd315aa3d5ea8292e 55LJ9dttLloCYItnkk3mn8aE+Q2m6D77rDDtckeINi9tn3FeXNrJ6qdCjzqAfS4dJCnDroBMAd+ypKEGl3YgiA==

Registrationget.gov

registrar	get.gov
registered	1997-10-02
expires	2027-09-07
last changed	2026-08-26
owner	Department of Labor
country	United States
nameservers	auth111.ns.uu.net auth120.ns.uu.net
status	server transfer prohibited

registered 1997-10-02expires 2027-09-07

HTTPS certificate141 days left

valid	yes
issuer	Entrust Limited
covers	*.bls.gov, api.bls.gov, bls.gov, blscompdata.bls.gov, cesdata.bls.gov, data.bls.gov, download.bls.gov, idcf.bls.gov, idcfars.bls.gov, idcfbbs.bls.gov, idcfoews.bls.gov, joltsdata.bls.gov
protocol	TLSv1.2

issued 2026-02-19expires 2027-03-22

DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → gov → bls.gov

Email authenticationexcellent

SPF	pass `v=spf1 ip4:146.142.251.47 ip4:152.180.49.16 ip4:146.142.251.70 ip4:174.129.192.189 ip4:146.142.1.10 include:spf.protection.outlook.com ~all`
DMARC	pass policy reject
DKIM	found: selector1, selector2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 145/205

Basic Security

10/40missing: DNSSEC Enabled, Nameserver Diversity

Record Security

30/45missing: CAA Records, DKIM Presence

Advanced Security

10/25missing: Mail Server Configuration, SOA Record Configuration, IPv6 Support

Domain Reputation

50/50

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 5 lookups

SURBL MultidomainURIBL MultidomainSpamCop146.142.252.23Barracuda146.142.252.23UCEPROTECT Level 1146.142.252.23

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=bls.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=bls.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on bls.gov. Reference: /llms.txt.

IPv6. Does bls.gov work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch bls.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days