HOW.IS
?

How is sec.gov?

Looks fine risk 0/100

Registered 29 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 151 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How sec.gov looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
151 ms
HTTPS
179 d
left on a DigiCert Inc certificate
Age
29 years
registered 1997-10-02
Blocklists
0
listings across 4 lists; 1 did not answer

Everything we looked at

DNS records6 record types
A173.222.168.92
AAAA2600:1408:ec00:108a::17b2
2600:1408:ec00:108c::17b2
MX10 sec-gov.mail.protection.outlook.com
NSa3-67.akam.net
a23-55-237-107.deploy.static.akamaitechnologies.com
a23-55-237-108.deploy.static.akamaitechnologies.com
a1-32.akam.net
a23-39-221-132.deploy.static.akamaitechnologies.com
a23-39-170-136.deploy.static.akamaitechnologies.com
a23-39-171-82.deploy.static.akamaitechnologies.com
a7-65.akam.net
a23-223-23-70.deploy.static.akamaitechnologies.com
a18-65.akam.net
a23-223-23-69.deploy.static.akamaitechnologies.com
a23-55-237-109.deploy.static.akamaitechnologies.com
a23-32-14-42.deploy.static.akamaitechnologies.com
a2-16-52-199.deploy.static.akamaitechnologies.com
a23-215-50-6.deploy.static.akamaitechnologies.com
a6-64.akam.net
a23-207-197-183.deploy.static.akamaitechnologies.com
a23-54-119-69.deploy.static.akamaitechnologies.com
a23-205-121-154.deploy.static.akamaitechnologies.com
a23-55-237-106.deploy.static.akamaitechnologies.com
a20-66.akam.net
TXT00DSL0000021HKD=1TBSL000000020D
apple-domain-verification=S8k2enqunoaJUuJA
_2haihd08iwp4vmrvs9mrm1dsncy86py
atlassian-domain-verification=awDgAKnU26QrwpZblzNS4OGF8kEEJPtUij0S0WKf13T9qRfcH0wHAGU9DK/Mbwoy
y2tqkx3t30c3sr5smhvn1d0rvcy647qq
dtm-domain-verification=BcAH-g0ZVzOswh5LL4axbbHI3sWosnxP15V8LAgmmPw
00D3S0000008aM0=1TBSL0000000IjJ
_cz0i16g8zz5maeoxkaxts6mosrsg7n6
00Dt0000000PMu3=1TBSJ00000006wf
00D30000000JxQy=1TBSJ00000006VF
spf2.0/pra
cisco-ci-domain-verification=6916e9cd0609e361edcbea866535f0538c7de04c019c5d4669caf5eeefd6ca58
apple-domain-verification=jlno4yB7g7OgHZk5
MS=ms60731568
X4U/iY9l80yKA4myted6fgTySSIGMnzLSdq/xloixnLrcdKk/Vv/iv0ilF4VuFx0pmVEMwe5HvDilwYRg72RGA==
google-site-verification=9GMDw2_WQPOazSHPiWGVPuC5PKpwfADDisMN7sEhMM0
00DSL000003azhZ=1TBSL0000000Ikv
atlassian-sending-domain-verification=d6d9ab25-6778-4cdb-9855-4d166a5c71af
webexdomainverification.7GA36=c6ae2a26-765a-4237-b87d-f6bddc7a9cd8
ms-domain-verification=ba4248b5-acc8-41ea-8703-abebfda1a96a
v=spf1 include:_mail.sec.gov include:_sas.sec.gov include:_sas1.sec.gov include:_sas2.sec.gov ip4:162.138.52.160 ip4:162.138.52.161 ip4:162.138.53.160 ip4:162.138.53.161 include:spf.protection.outlook.com -all
_ovutjguasir5ck46dhg5lqtjmccbl2d
00Dt0000000Gz3A=1TBSJ00000006v3
openai-domain-verification=dv-vQCHB0t4h6MIWtW5OcoUtq5A
adobe-idp-site-verification=97319342-419d-4786-87b7-130e1e301d13
CAA{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'issue': 'entrust.net', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'iodef': 'mailto:CAIssues@sec.gov', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': ';'}
Registrationget.gov
registrarget.gov
registered1997-10-02
expires2027-08-13
last changed2026-08-14
ownerSecurities and Exchange Commission
countryUnited States
nameserversa1-32.akam.net
a18-65.akam.net
a20-66.akam.net
a3-67.akam.net
a6-64.akam.net
a7-65.akam.net
statusserver transfer prohibited
registered 1997-10-02expires 2027-08-13
HTTPS certificate179 days left
validyes
issuerDigiCert Inc
coverswww.sec.gov, acadia.sec.gov, acadiastg.sec.gov, adfs.sec.gov, akamai-ds.sec.gov, api-bravo.edgarfiling.sec.gov, api.edgarfiling.sec.gov, auth-bravo.edgarfiling.sec.gov, auth.edgarfiling.sec.gov, catalog.sec.gov, data-test.sec.gov, data.sec.gov
protocolTLSv1.3
issued 2026-10-13expires 2027-04-29
DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → gov → sec.gov
Email authenticationexcellent
SPFpass v=spf1 include:_mail.sec.gov include:_sas.sec.gov include:_sas1.sec.gov include:_sas2.sec.gov ip4:162.138.52.160 ip4:162.138.52.161 ip4:162.138.53.160 ip4:162.138.53.161 include:spf.protection.outlook.com -all
DMARCpass policy reject
DKIMfound: selector1, selector2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 180/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
20/25missing: Mail Server Configuration
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop173.222.168.92Barracuda173.222.168.92UCEPROTECT Level 1173.222.168.92

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=sec.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=sec.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on sec.gov. Reference: /llms.txt.

IPv6. IPv6 readiness grade for sec.gov Does sec.gov work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch sec.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days