HOW.IS
?

How is hhs.gov?

Looks fine risk 0/100

Registered 29 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 81 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How hhs.gov looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
81 ms
HTTPS
50 d
left on a DigiCert Inc certificate
Age
29 years
registered 1997-10-02
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A52.7.111.176
MX10 hhs-gov.mail.protection.outlook.com
NSns4-08.azure-dns.info
ns3-08.azure-dns.org
ns2-08.azure-dns.net
ns1-08.azure-dns.com
TXTMS=ms64846770
_ucuylh289p2s5b1ayawtltyh92ri8hj
trp8mnslnd5f4qfl3d4y163c586f6tw8
google-site-verification=KLEt4BTsTqluQcp1A32_3nT1blhKaPGll5rhFvNjC5k
google-site-verification=qvxIzivOAKg-85yku4SCDh_yaNUFDeepf37yBYccim0
asv=3b51201285febd9e73acc1c45ac3d860
webexdomainverification.6NPKN=e802456e-1a37-4768-a1fe-c373f37da215
amazonses:dbAg9/zw+CGJulsEfo3LTw5CPeos0EPF5MTsGy27rAE=
adobe-sign-verification=cf65728d6e6215c1c3a5f7dbf0618dd781583133bf27d560a84cb29eb3911e78
eeF86nEAnEy1pCNHr280d3YTjws:4B79-6E84-1B1F-128A-033C-EAA2-7F77-CC2E
identrust_validate=flNLTI9QnmNOidBGMCkNxq6zv8R3Zii3vEicJz7EQmhF
adobe-idp-site-verification=6c635562-097e-4cc2-951c-5b1075850ccd
00Dcp00000AtO5Z=1TBcp0000000MGf
X9G1TmgB48q57rXrdg5KBDnoWK8:1492-1506-51EC-1832-58D2-9861-C6F7-EFA3
amazonses:JDqzXiXlKv2Hvj9Q2k806vbbw8kFyawBULRmQ9Gr5NE=
atlassian-domain-verification=aYxhu5Uzd3KmKdIr/oZxVRHqY9BjfmuKC5CebTiTd/LRykPUdVonNACcDglj3aY9
00Dt0000000Xl9w=1TBSJ00000006NB
v=spf1 ip4:158.74.17.50 ip4:20.12.18.210 ip4:172.172.15.1 ip4:52.2.163.127 ip4:128.121.42.218 ip4:158.70.152.0/24 ip4:69.31.168.128/29 ip4:158.72.152.0/24 ip4:149.96.3.26 ip4:149.96.4.26 ip4:149.96.192.2 ip4:63.88.93.251 ip4:158.70.181.107 ip4:96.43.152.64/28 ip4:96.43.152.80 ip4:149.96.193.2 ip4:128.231.90.97 ip4:128.231.90.122 ip4:165.112.13.52 ip4:65.196.93.7 ip4:165.112.13.57 ip4:96.9.124.128/29 ip4:158.72.139.19 ip4:158.70.144.146 ip4:54.175.167.74 ip4:158.70.144.118 ip6:2606:3000:e000:6b::/64 include:dnsus1.accellion.com include:rp.email.oci.oraclegovcloud.com include:spf.mandrillapp.com include:spf.protection.outlook.com exists:%{i}._spf.mta.salesforce.com include:_spf1.mailgun.org include:_spf2.mailgun.org -all
apple-domain-verification=72XseDBHesRrQfTY
openai-domain-verification=dv-blf0EAB2mJKrhWyhAQ9up5VX
odCuL+S87L9S82Vtp7lmVdYUCrkVhYzbKgS7JHm4Z8yKwFO35YIQBpcLX4emahZsvBc6G+zmi8ksZAKBFy7+jg==
CAA{'type': 'CAA', 'issue': 'amazon.com', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'issue': 'e5.com', 'critical': 0}
{'type': 'CAA', 'issue': 'entrust.net', 'critical': 0}
{'type': 'CAA', 'issue': 'globalsign.com', 'critical': 0}
{'type': 'CAA', 'issue': 'identrust.com', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'issue': 'networksolutions.com', 'critical': 0}
{'type': 'CAA', 'issue': 'pki.goog', 'critical': 0}
{'type': 'CAA', 'issue': 'sectigo.com', 'critical': 0}
Registrationget.gov
registrarget.gov
registered1997-10-02
expires2027-07-24
last changed2026-08-14
ownerDepartment of Health and Human Services
countryUnited States
nameserversns1-08.azure-dns.com
ns2-08.azure-dns.net
ns3-08.azure-dns.org
ns4-08.azure-dns.info
statusserver transfer prohibited
registered 1997-10-02expires 2027-07-24
HTTPS certificate50 days left
validyes
issuerDigiCert Inc
covershhs.gov, dhhs.gov, www.dhhs.gov, pandemicflu.gov, stopbullying.gov, aging.gov, foodsafety.gov, betobaccofree.gov, therealcost.gov, fitness.gov, www.fitness.gov, globalhealth.gov
protocolTLSv1.3
issued 2025-12-01expires 2026-12-21
DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → gov → hhs.gov
Email authenticationexcellent
SPFpass v=spf1 ip4:158.74.17.50 ip4:20.12.18.210 ip4:172.172.15.1 ip4:52.2.163.127 ip4:128.121.42.218 ip4:158.70.152.0/24 ip4:69.31.168.128/29 ip4:158.72.152.0/24 ip4:149.96.3.26 ip4:149.96.4.26 ip4:149.96.192.2 ip4:63.88.93.251 ip4:158.70.181.107 ip4:96.43.152.64/28 ip4:96.43.152.80 ip4:149.96.193.2 ip4:128.231.90.97 ip4:128.231.90.122 ip4:165.112.13.52 ip4:65.196.93.7 ip4:165.112.13.57 ip4:96.9.124.128/29 ip4:158.72.139.19 ip4:158.70.144.146 ip4:54.175.167.74 ip4:158.70.144.118 ip6:2606:3000:e000:6b::/64 include:dnsus1.accellion.com include:rp.email.oci.oraclegovcloud.com include:spf.mandrillapp.com include:spf.protection.outlook.com exists:%{i}._spf.mta.salesforce.com include:_spf1.mailgun.org include:_spf2.mailgun.org -all
DMARCpass policy reject
DKIMfound: selector1, selector2, k1

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 175/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
15/25missing: Mail Server Configuration, IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop52.7.111.176Barracuda52.7.111.176UCEPROTECT Level 152.7.111.176

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=hhs.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=hhs.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on hhs.gov. Reference: /llms.txt.

IPv6. IPv6 readiness grade for hhs.gov Does hhs.gov work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch hhs.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days