HOW.IS
?

How is ct.gov?

Looks fine risk 0/100

Registered 25 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 405 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How ct.gov looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
405 ms · ends at portal.ct.gov
HTTPS
166 d
left on a Sectigo Limited certificate
Age
25 years
registered 2001-07-25
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records4 record types
A159.247.0.240
MX10 mxa-005c2f01.gslb.pphosted.com
10 mxb-005c2f01.gslb.pphosted.com
NSns2.cen.ct.gov
ns1.cen.ct.gov
TXTtwilio-domain-verification=1aff3068aff1ec93abf8242773399ebf
yahoo-verification-key=X7SubEDOTRJzlhlYGYT/k/Uf0oqjOy8WJ68XyRaO/rI=
anthropic-domain-verification-9mzcv2=9oSI8v4gy3ekCo7NbTocwupQb
_7g01tnrd4a9gnlnibli626qbxhi6cls
flexera-domain-verification-ywdimfuisicbknsg
google-site-verification=h43ZnoS4XQOaXeiamwZXX1LPMCHWwXpafm32q7c-D80
in0h4kmdrti6r7lrp61rfmto7o
MS=ms883543743600
dtm-domain-verification=vzF2vklGBZtiYc77WxUcCdX_MeJqSYI5rSlIiWHaDjU
nbglpqkwlv6qfsh9m6h3xbw1zs44glmz
google-site-verification=Z_ikq_dyrSor6GMc9f87n6IihZHej_lZN9iAPPBB9gY
onx=208a6c22-ba29-4fed-a369-3502605d0e31
6515da28-e3b2-4956-b655-9ced73845bcf
openai-domain-verification=dv-gFI5WixVrIS0s3UPbAtUsM2r
7hv3er340v84rcvs4o2ahhb8fa
7g5sPZ28I75H+B/ZVxx4t25nY+JU2smsjtlrc0Vc0TOpqtMg1xMIF/6r6HeOse8VfRYakXpfhzxKqoTx/vBA+Q==
onx=3d60921c-660a-4d55-856e-e3bc213addb9
cisco-ci-domain-verification=6dae9307abcadbf2f104396e6aaefbefa546a056ad131e2aad01006d5b7db764
rgk69s96rzxk2v7r4w31cnt76t85jjn5
apple-domain-verification=nZNBrAgF80pdqTRR
z40f3klt6my4x9xq153st3tzxtxkrt0n
ms-domain-verification=40325171-c7c7-4c24-9ffd-7220b3b2ae7f
hy1qjnhlwcfz2mlzsln1zqstrn92mg7q
google-gws-recovery-domain-verification=59718382
7501E673B77D8777FFF12142F8ECC249026529CF9E7F778C6ED093B33D610688
openai-domain-verification=dv-cRYQmrbowCWjNss92cfCMy1Q
google-site-verification=CgHOAQV1tTMl1HlrIoxEvC8TV1Vce7pX70NUnUcC5DU
google-site-verification=3gihAs_bQ9H47M2LkdX4thrJeVSoM19DAX1e9hqkr5U
logmein-verification-code=Cik22PhYbROkHlIAzem4PNiRU
google-site-verification=dqPi8vi1HccsOl63B6PkXFUuRCp6KaRuF9rNhVvLuNo
_9ns7feuq63xrhser15fa64glvrtqg9a
ms-domain-verification=cfe42a4f-6006-4fcc-a13d-940cede592cf
Y29ubmVjdA==
atlassian-domain-verification=Sd7SuLqdxLLpCBZ7rT6yhL7I6HDbNnDDDAiSasRL5F5RAIXDsnJS7jEQ7U8Rd5Pk
v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.valigov.email ~all
Registrationget.gov
registrarget.gov
registered2001-07-25
expires2027-08-28
last changed2026-08-14
ownerState of CT/Department of Administrative Services
countryUnited States
nameserversns1.cen.ct.gov
ns2.cen.ct.gov
statusserver transfer prohibited
registered 2001-07-25expires 2027-08-28
HTTPS certificate166 days left
validyes
issuerSectigo Limited
coverswww.ct.gov, access.state.ct.us, analytics.ct.gov, babybonds.ct.gov, beapollworker.ct.gov, catalog.state.ct.us, cidverifylicense.ct.gov, civicsforlife.ct.gov, core-ct.state.ct.us, covid19-contact.ct.gov, covidvaccinefinder.ct.gov, cspsandyhookreport.ct.gov
protocolTLSv1.2
issued 2026-10-01expires 2027-04-17
DNSSECinsecure

Domain is not signed with DNSSEC

. → gov → ct.gov
Email authenticationexcellent
SPFpass v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.valigov.email ~all
DMARCpass policy quarantine
DKIMfound: selector1, k1, s1, s2, dkim, smtp, mx

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 155/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop159.247.0.240Barracuda159.247.0.240UCEPROTECT Level 1159.247.0.240

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=ct.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=ct.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on ct.gov. Reference: /llms.txt.

IPv6. IPv6 readiness grade for ct.gov Does ct.gov work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch ct.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days