How is incometax.gov.in?

Be careful risk 20/100

Registered 23 years ago, no valid HTTPS certificate, the site did not answer (OSError).

Why

02050100

finecarefulhigh risk

+20No valid HTTPS certificate.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

Site

down

OSError

HTTPS

invalid

Could not resolve host (ENODATA)

Age

23 years

registered 2003-07-31

Blocklists

listings across 2 lists

Everything we looked at

DNS records3 record types

MX	10 pdcsmtp12.incometax.gov.in 20 pdcsmtp13.incometax.gov.in 30 pdcsmtp14.incometax.gov.in 40 pdcsmtp15.incometax.gov.in 50 pdcsmtp16.incometax.gov.in 60 pdcsmtp17.incometax.gov.in 70 bcpsmtp01.incometax.gov.in 80 bcpsmtp02.incometax.gov.in 90 bcpsmtp03.incometax.gov.in 100 bcpsmtp04.incometax.gov.in 110 bcpsmtp05.incometax.gov.in 120 bcpsmtp06.incometax.gov.in
NS	ns01.incometax.gov.in ns02.incometax.gov.in
TXT	58590171412CFD990EEF6DE40675393F v=spf1 ip4:61.246.137.81 ip4:61.246.137.82 ip4:61.246.137.83 ip4:61.246.137.84 ip4:61.246.137.85 ip4:61.246.137.86 ip4:61.95.155.49 ip4:61.95.155.50 ip4:61.95.155.51 ip4:61.95.155.52 ip4:61.95.155.53 ip4:61.95.155.54 -all

RegistrationNational Informatics Centre

registrar	National Informatics Centre
registered	2003-07-31
expires	2027-07-31
last changed	2026-09-14
owner	Directorate of Income Tax (Systems)
nameservers	ns01.incometax.gov.in ns02.incometax.gov.in
status	active

registered 2003-07-31expires 2027-07-31

HTTPS certificatenot valid

valid	no
problem	Could not resolve host (ENODATA)

DNSSECinsecure

Domain has DNSKEY but no DS record in parent zone

. → in → gov.in → incometax.gov.in

Email authenticationgood

SPF	pass `v=spf1 ip4:61.246.137.81 ip4:61.246.137.82 ip4:61.246.137.83 ip4:61.246.137.84 ip4:61.246.137.85 ip4:61.246.137.86 ip4:61.95.155.49 ip4:61.95.155.50 ip4:61.95.155.51 ip4:61.95.155.52 ip4:61.95.155.53 ip4:61.95.155.54 -all`
DMARC	pass policy quarantine
DKIM	none of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 140/190

Basic Security

10/40missing: DNSSEC Enabled, Nameserver Diversity

Record Security

30/45missing: CAA Records, DKIM Presence

Advanced Security

20/25missing: IPv6 Support

Domain Reputation

35/35

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 2 lookups

SURBL MultidomainURIBL Multidomain

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=incometax.gov.in" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=incometax.gov.in"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on incometax.gov.in. Reference: /llms.txt.

IPv6. Does incometax.gov.in work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch incometax.gov.in. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days