HOW.IS
?

How is nist.gov?

Looks fine risk 0/100

Registered 29 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 115 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How nist.gov looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
115 ms · ends at www.nist.gov
HTTPS
88 d
left on a Google Trust Services certificate
Age
29 years
registered 1997-10-02
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A172.65.90.27
172.65.90.24
172.65.90.26
172.65.90.25
AAAA2606:4700:78::90:0:182
2606:4700:78::90:0:180
2606:4700:78::90:0:183
2606:4700:78::90:0:181
MX0 nist-gov.mail.protection.outlook.com
NSgold.foundationdns.net
gold.foundationdns.org
gold.foundationdns.com
TXTgoogle-site-verification=oJSFVUoM3RN44bzuiI9F3qWzWxTqmrawzMycAD_NUcY
openai-domain-verification=dv-LH2I25vAcFPzjYDPYCU2t6Uy
domain-verification=J6aCmM09zEcfzyPp57W7AtDczKeyPHwj_WRoqnt0g0Q
v=spf1 include:_spf1.nist.gov include:_spf2.nist.gov -all
box-domain-verification=4d49553685eee3edbcf58b736eb4c42febff4e1741da8db3098f2bb3d161d90f
cisco-ci-domain-verification=1b1e68d4cf0e84478115596723f00e17a848c659bb11f53b58f8f2cd84b7e111
atlassian-domain-verification=xVa84aCbqa1pJZZdpB0gGm0ZNukDUU4TBzccNbFkyozIg3QXHaufaQaczvEDG3Jp
jamf-site-verification=Sr15KQEdTRZZXqaxbFaFQw
MS=ms22398849
kiro-site-verification=0ba31cdf-c72a-4432-8e69-d1212e34f49c
_hie8b7uqvafayfkdb47ag5t5up1nxbb
Registrationget.gov
registrarget.gov
registered1997-10-02
expires2027-08-24
last changed2026-08-14
ownerDepartment of Commerce
countryUnited States
nameserversgold.foundationdns.com
gold.foundationdns.net
gold.foundationdns.org
statusserver transfer prohibited
registered 1997-10-02expires 2027-08-24
HTTPS certificate88 days left
validyes
issuerGoogle Trust Services
coversnist.gov, oak.nist.gov, *.oak.nist.gov
protocolTLSv1.3
issued 2026-10-25expires 2027-01-23
DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → gov → nist.gov
Email authenticationexcellent
SPFpass v=spf1 include:_spf1.nist.gov include:_spf2.nist.gov -all
DMARCpass policy reject
DKIMfound: selector1, selector2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 165/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: Mail Server Configuration
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop172.65.90.27Barracuda172.65.90.27UCEPROTECT Level 1172.65.90.27SpamCop172.65.90.25Barracuda172.65.90.25UCEPROTECT Level 1172.65.90.25SpamCop172.65.90.26Barracuda172.65.90.26UCEPROTECT Level 1172.65.90.26SpamCop172.65.90.24Barracuda172.65.90.24UCEPROTECT Level 1172.65.90.24

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=nist.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=nist.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on nist.gov. Reference: /llms.txt.

Watch nist.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days