How is fda.gov?

Looks fine risk 0/100

Registered 26 years ago, on no blocklists we checked, valid HTTPS, the site answered HTTP 404.

Why

02050100

finecarefulhigh risk

·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

Site

404

154 ms

HTTPS

137 d

left on a IdenTrust certificate

Age

26 years

registered 2000-07-26

Blocklists

listings across 5 lists

Everything we looked at

DNS records5 record types

A	23.48.203.8 23.48.203.18
AAAA	2600:1408:ec00:9::1730:cbec 2600:1408:ec00:9::1730:cbf4
MX	10 smtp8.fda.gov 10 smtp7.fda.gov 10 smtp9.fda.gov 10 smtp6.fda.gov
NS	a20-65.akam.net a24-66.akam.net a13-64.akam.net a1-242.akam.net a2-65.akam.net a7-67.akam.net
TXT	cisco-ci-domain-verification=74f9a92409e8b5db0b46652e631823388bcc0461ced801a6b1aa64912b1ec91a identrust_validate=edYeF9sSko4LmSwlnBgRTrB7pThhnIjpbiOiWHvgvkxl MS=ms48783525 openai-domain-verification=dv-AxQqxffHhvOZOt4t4C17dZSm identrust_validate=4JTBEWb4UcAjNl/lyEYdU+hWXoNWrn9TdDN8Z3OvGSBG identrust_validate=o4/9QHV5pc4hVjOw4+Ebgwt4DdfKspg017PqghCYCY01 jamf-site-verification=PGVYWecttOGQ2AWnehEHWQ v=spf1 include:_spf.fda.gov -all RkQjM5mARE3LHFCQ454owCcYmNyZVV3lM3ziXSPPWtCW2/xeFfwDOYtSzHx1bO5BxQTV9hcMjMr/00cLSfQ/GA== FMICzGkJO5j02YNdmENBs5kgzkmhZC/fMYTvO5fowMXe identrust_validate=c7KW+Ztf7fiYpL/1dimy5BACS/7wAWQAM+0vrb32x8qs identrust_validate=S0MNbkM5L+oiB5jyFKX0Hu8G0oony8eebRYByXxdxA9o smartsheet-gov-site-validation=HsHsNQ2BWzqEo3REvnA4aHm-csXa-eHu dZbV+0DRySs9wEKyoyX85nwTMJN6TX7SJ4Imh+uTXak5Ps5JnMhZFfKFe8efScPW04tj7oErmE4HUwRkQiUHSw== identrust_validate=zXXOEi6CQ2E8NN+fqgQ0q+KVdRi7KOa6XTwefj9zhOe6 ZOOM_verify_vTEkbQm_QTOaBDWdXKwrAw amazonses:jdV8OLJfTXw9mxS1imtjFUwKFRGSek+dBX1mXWxE2Es= webexdomainverification.11G31=8411e648-086b-4727-aca0-c784ecb9827e

Registrationget.gov

registrar	get.gov
registered	2000-07-26
expires	2027-08-16
last changed	2026-08-14
owner	Department of Health and Human Services
country	United States
nameservers	a1-242.akam.net a13-64.akam.net a2-65.akam.net a20-65.akam.net a24-66.akam.net a7-67.akam.net
status	server transfer prohibited

registered 2000-07-26expires 2027-08-16

HTTPS certificate137 days left

valid	yes
issuer	IdenTrust
covers	fda.gov, dps.fda.gov, www.fda.gov, labels.fda.gov, ceportal.fda.gov, labels-mig.fda.gov, www.access.fda.gov, dps.preprod.fda.gov, www.preprod.fda.gov, govdashboard.fda.gov, labels.preprod.fda.gov, www.accessdata.fda.gov
protocol	TLSv1.3

issued 2026-02-11expires 2027-03-13

DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → gov → fda.gov

Email authenticationgood

SPF	pass `v=spf1 include:_spf.fda.gov -all`
DMARC	pass policy reject
DKIM	none of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 160/205

Basic Security

10/40missing: DNSSEC Enabled, Nameserver Diversity

Record Security

30/45missing: CAA Records, DKIM Presence

Advanced Security

25/25

Domain Reputation

50/50

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 8 lookups

SURBL MultidomainURIBL MultidomainSpamCop23.48.203.236Barracuda23.48.203.236UCEPROTECT Level 123.48.203.236SpamCop23.48.203.244Barracuda23.48.203.244UCEPROTECT Level 123.48.203.244

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=fda.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=fda.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on fda.gov. Reference: /llms.txt.

Watch fda.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days