HOW.IS
?

How is cdc.gov?

Looks fine risk 0/100

Registered 29 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 65 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How cdc.gov looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
65 ms
HTTPS
144 d
left on a DigiCert Inc certificate
Age
29 years
registered 1997-10-02
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A23.212.249.82
23.212.249.85
AAAA2600:1408:c400:16::17d4:f80b
2600:1408:c400:16::17d4:f80d
MX20 alt1.us.etp.fireeyegov.com
10 primary.us.etp.fireeyegov.com
40 alt3.us.etp.fireeyegov.com
30 alt2.us.etp.fireeyegov.com
NSa5-66.akam.net
a1-43.akam.net
a2-64.akam.net
a8-67.akam.net
a9-64.akam.net
a28-65.akam.net
TXTZOOM_verify_yEK5MgTwT72nP5URz-eoaA
MS=ms84056562
_v0e31vq52ru6qgumyh95pylxoe5kmby
v=spf1 ip4:51.5.72.0/24 ip4:172.81.81.38 ip4:51.4.72.0/24 ip4:51.5.80.0/27 ip4:51.4.80.0/27 ip4:172.81.81.50 ip4:172.81.82.50 ip4:63.123.152.4 ip4:40.92.0.0/15 ip4:172.81.82.79 ip4:172.81.80.64 ip4:172.81.81.39 ip4:172.81.82.87 ip4:172.81.82.88 ip4:155.95.96.50 ip4:155.95.86.50 ip4:23.90.98.102 ip4:124.17.27.36 ip4:149.72.0.0/16 ip4:198.21.0.0/21 ip4:50.31.32.0/19 ip4:167.89.0.0/17 ip4:68.232.140.57 ip4:68.232.140.79 include:_s0.cdc.gov -all
_ddb344bjip99et71u5cidtx1t53ezdl
identrust_validate=B/Pm/IvNx8tLDDFRsJXBs+oweQGmx08QZ6xK0IvBQn3R
atlassian-sending-domain-verification=f2ef9649-6a78-47f6-9990-44a295ae5b5a
google-site-verification=GkbnFA_aF3RXaZOC3deEsrGqs0fmTXyys2hbIn1nVcM
268BC041572123F15C5566E5F3D88675FABCC028427B501AE228CA9BB31630D5
atlassian-domain-verification=i5oCgfh8OkdKw7Yv2CCKvAdKMW8kYpNVO1A7fcUkBdAy7IzdP/M8D9NoirnaVqZC
atlassian-domain-verification=qjHCJ33pyZHmggxdcFDtGiegrc/iLSyVUIG0LAu1g7XW1JnMdaY8G8pbMUY1Z4hm
adobe-idp-site-verification=4089552e88740d878b0400d184ab01c0b7391e6dc85796732000450e3476fc93
_mhpeli9n9zj3rasw6wfiuch30t2sjlw
atlassian-sending-domain-verification=977cbfcd-c314-42dc-9d86-32e2abca00ac
dtm-domain-verification=KQ1rIgUP8GpiV9mSmysS40YKtHjVrI0VF938cuCAWXQ
amazonses:OhxI8Nxovqf1xBmhK5S9kNk7vo9XV4GmGe6LVc+ji80=
atlassian-sending-domain-verification=a39e7003-10de-46b1-8afb-86ef7509f246
apple-domain-verification=VOKePKhT9MhX9zmq
geneious.com:domain-verification=DP8tae0qCr-FH6KGRvMwWA
google-site-verification=nZIK8Rc0sw4MxlgnsYseSBTdcyDXeLFR6P5FIAbgSEM
4FF7-1931-E8C2-912B-94CF-BCB0-806A-7442
google-site-verification=qZbBdujV5kZQv_pCqV2wpfSU25odH35HQukm5ACyLNs
google-gws-recovery-domain-verification=42225222
openai-domain-verification=dv-hbgCCuVm9CpZSVXjvFPfivD5
_bthbaxy8p6mr5c0o5r7pit3d25lgztb
v4ixju/hXVFXszYswwinkbStpHoDb361lQekI6rkjQ2DV4HHKdN/FJPvMAO88x1rTaRwf29UYwPAq6LqldNWZQ==
Registrationget.gov
registrarget.gov
registered1997-10-02
expires2027-08-21
last changed2026-09-10
ownerDepartment of Health and Human Services
countryUnited States
nameserversa1-43.akam.net
a2-64.akam.net
a28-65.akam.net
a5-66.akam.net
a8-67.akam.net
a9-64.akam.net
statusserver transfer prohibited
registered 1997-10-02expires 2027-08-21
HTTPS certificate144 days left
validyes
issuerDigiCert Inc
covers*.cdc.gov, cdc.gov
protocolTLSv1.3
issued 2026-09-02expires 2027-03-19
DNSSECinsecure

Domain is not signed with DNSSEC

. → gov → cdc.gov
Email authenticationexcellent
SPFpass v=spf1 ip4:51.5.72.0/24 ip4:172.81.81.38 ip4:51.4.72.0/24 ip4:51.5.80.0/27 ip4:51.4.80.0/27 ip4:172.81.81.50 ip4:172.81.82.50 ip4:63.123.152.4 ip4:40.92.0.0/15 ip4:172.81.82.79 ip4:172.81.80.64 ip4:172.81.81.39 ip4:172.81.82.87 ip4:172.81.82.88 ip4:155.95.96.50 ip4:155.95.86.50 ip4:23.90.98.102 ip4:124.17.27.36 ip4:149.72.0.0/16 ip4:198.21.0.0/21 ip4:50.31.32.0/19 ip4:167.89.0.0/17 ip4:68.232.140.57 ip4:68.232.140.79 include:_s0.cdc.gov -all
DMARCpass policy reject
DKIMfound: selector1, selector2, k1, s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 160/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
25/25
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop23.205.106.84Barracuda23.205.106.84UCEPROTECT Level 123.205.106.84SpamCop23.205.106.76Barracuda23.205.106.76UCEPROTECT Level 123.205.106.76

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=cdc.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=cdc.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on cdc.gov. Reference: /llms.txt.

Watch cdc.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days