How is colorado.gov?

Looks fine risk 0/100

Registered 26 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 526 ms.

Why

02050100

finecarefulhigh risk

·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.

Site

403

526 ms

HTTPS

101 d

left on a Amazon certificate

Age

26 years

registered 2000-12-15

Blocklists

listings across 5 lists

Everything we looked at

DNS records3 record types

A	99.83.143.241 75.2.28.46
NS	ns-1708.awsdns-21.co.uk ns-1120.awsdns-12.org ns-9.awsdns-01.com ns-626.awsdns-14.net
TXT	d3k78kys0yh48mly0yzdhf4w4lvjp48f v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all bp95wjxpw9sn5150kss59pvm8gq2xxrn _erbldfdedupialx7psr0k2a76rfqm81 google-site-verification=PXshDPnJWsaEqK6GcdJzUJsFdT5CJWuMboy6vf_qK4Y _o6yq4fqvv108o1c7dk82tnk1erdgcfg google-site-verification=wE70NvAEeQ0dUv8T9GlxSLQsvq_JC-lkBP5pvfYZ-9o google-site-verification=6qIxMBu2EC4va9KdscpnvaW6RlbAU7n-qDl5Ihe6iEY _e95wxr9cpjfldzymko02slnktf07ss8 firebase=oit-cbe-2-0-dev r7g1w1tdb1z29nh5vw0mvqfmwkvy2wb2

Registrationget.gov

registrar	get.gov
registered	2000-12-15
expires	2027-08-04
last changed	2026-08-14
owner	Colorado, Governor's Office of Information Technology
country	United States
nameservers	ns-1120.awsdns-12.org ns-1708.awsdns-21.co.uk ns-626.awsdns-14.net ns-9.awsdns-01.com
status	server transfer prohibited

registered 2000-12-15expires 2027-08-04

HTTPS certificate101 days left

valid	yes
issuer	Amazon
covers	*.colorado.gov, colorado.gov
protocol	TLSv1.2

issued 2026-07-29expires 2027-02-11

DNSSECinsecure

Domain is not signed with DNSSEC

. → gov → colorado.gov

Email authenticationpoor

SPF	pass `v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all`
DMARC	warning policy none
DKIM	none of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 148/205

Basic Security

20/40missing: DNSSEC Enabled

Record Security

23/45missing: CAA Records, DMARC Record, DKIM Presence

Advanced Security

10/25missing: Mail Server Configuration, IPv6 Support

Domain Reputation

50/50

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 8 lookups

SURBL MultidomainURIBL MultidomainSpamCop75.2.28.46Barracuda75.2.28.46UCEPROTECT Level 175.2.28.46SpamCop99.83.143.241Barracuda99.83.143.241UCEPROTECT Level 199.83.143.241

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=colorado.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=colorado.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on colorado.gov. Reference: /llms.txt.

IPv6. Does colorado.gov work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch colorado.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days