HOW.IS
?

How is justice.gov?

Looks fine risk 0/100

Registered 28 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 131 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How justice.gov looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
131 ms · ends at www.justice.gov
HTTPS
12 d
left on a SSL Corporation certificate
Age
28 years
registered 1998-05-14
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A172.65.90.26
172.65.90.25
172.65.90.27
172.65.90.24
AAAA2606:4700:78::90:0:181
2606:4700:78::90:0:180
2606:4700:78::90:0:183
2606:4700:78::90:0:182
MX10 mxb-00a6fb01.gslb.gpphosted.com
10 mxa-00a6fb01.gslb.gpphosted.com
NSnovalee.ns.cloudflare.com
jonah.ns.cloudflare.com
TXTB734-550A-1BD7-7C42-B66F-E877-4CF0-CE99
_517hgyjxhylc3zgpe0xa4hpg7see3yo
v=spf1 -all
_mqmle1ng0i99yzzo9028msu2fiwiiu2
MS=ms62800098
_uy4jadoqn9rm16z4st0lh7u5edop50g
_u1sc07z2xx5o3564s4p03x1jtg3ebnr
CS0032424
_bmrl4sjrork4cr3kle1ytunf6rhpqar
apple-domain-verification=lUuk1ykAzZ1fRvKp
_ywuncct7c5gwddiim20gthvm913scgu
google-site-verification=bjOagWl_w1P-AJBpVZlolSj8ohy8cTKhkS-u5xWVYyU
3crckvjmrlf9f91dlcdwnfpnrg0g3kdn
Registrationget.gov
registrarget.gov
registered1998-05-14
expires2027-07-14
last changed2026-08-14
ownerDepartment of Justice
countryUnited States
nameserversjonah.ns.cloudflare.com
novalee.ns.cloudflare.com
statusserver transfer prohibited
registered 1998-05-14expires 2027-07-14
HTTPS certificate12 days left
validyes
issuerSSL Corporation
coversjustice.gov, *.justice.gov, *.civ.justice.gov, *.csa.justice.gov, *.fixnics.csa.justice.gov, *.grantsnet.justice.gov, *.idms.justice.gov, *.oig.justice.gov
protocolTLSv1.3
issued 2026-10-14expires 2026-11-13
DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → gov → justice.gov
Email authenticationgood
SPFpass v=spf1 -all
DMARCpass policy reject
DKIMnone of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 160/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
25/25
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop172.65.90.25Barracuda172.65.90.25UCEPROTECT Level 1172.65.90.25SpamCop172.65.90.26Barracuda172.65.90.26UCEPROTECT Level 1172.65.90.26SpamCop172.65.90.27Barracuda172.65.90.27UCEPROTECT Level 1172.65.90.27SpamCop172.65.90.24Barracuda172.65.90.24UCEPROTECT Level 1172.65.90.24

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=justice.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=justice.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on justice.gov. Reference: /llms.txt.

IPv6. IPv6 readiness grade for justice.gov Does justice.gov work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch justice.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days