HOW.IS
?

How is state.gov?

Looks fine risk 0/100

Registered 29 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 115 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How state.gov looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
115 ms
HTTPS
137 d
left on a Amazon certificate
Age
29 years
registered 1997-10-02
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A100.28.244.61
107.22.78.153
34.233.146.45
AAAA2600:1f18:7400:4a95:de75:7fa3:6311:a663
2600:1f10:4617:d340:6535:2eb1:e4db:244d
2600:1f18:3a6e:b641:e65a:ee0e:a6dc:89f4
MX10 usdos.mail.protection.outlook.com
NSa9-64.akam.net
a8-67.akam.net
a14-64.akam.net
a26-65.akam.net
a3-66.akam.net
a1-63.akam.net
TXTdocusign=1b1e93a2-2269-4fb6-bc74-d18191e068c8
7jlo1bedb9nhjlqfkicji0otp3
smartsheet-gov-site-validation=C_4pt-6bNmPpjrmKmO5c9p1qupAMBcnO
google-site-verification=qppF5HANsa4Le2yz36etSS0JzYXgrmlVCT0B3WvvJs0
adobe-idp-site-verification=85b7dc1b57ae06180cf14f199ddb60b6a689670d131931659bae91bee3003b0c
sb85m8m5b6mnl9chhhhac7qg01
wiz-domain-verification=a02ea9025bbc0aa14606367133a8cef093b7c991110c85f7fe80c44581365008
ms-domain-verification=60eeb958-7b4d-428c-8355-8c2aa8e41563
facebook-domain-verification=e2plk83i6q38ym069k2y3fizpzk3rm
00Dcn0000087jtR=1TBcn0000000GKv
apple-domain-verification=B9cNW7DYEe4D1XLt
smartsheet-gov-site-validation=Balwzo_O9A2uB3EXVmu6-H1ZimvN79gt
b+VwNE1mX7ltBSA4ZbrFmDCu7muDaRyJIPWDKJeQz1NDNusR1j3sYpBKBXQ1W86IJ1uI1bUA4m0dIet1p3CMjA==
296google-site-verification=qppF5HANsa4Le2yz36etSS0JzYXgrmlVCT0B3WvvJs0
3s7a9eg7p962inkbc8m2trfqm1
bluebeam-verification=c9n30urwkz0tbug2x1ex350pwyhorz
docusign=2417507a-10ef-4376-aa1f-297ed6024477
fd8jjikpt2lfo2afsth4c970l0
google-site-verification=k8qmb6x58WZ4T-clIWhXYNSTZaLGvvKoRhxL4MwzM3s
atlassian-domain-verification=6MQrPZcNa/8rXtiDDL08pAXJ9dUrKSSpNXZ/1IqfDyl2XYF/7e3EnjfBV92cg2fE
amazonses:4O2xpkJi4Svaztkj0jpYpU82Oqsq7zkswuN2gAf5iEY=
h1-domain-verification=PywJ6ZKiZtwB5E4RqLrr2QrokcfSUJ4yMBPboLQhNd8TAbes
google-site-verification=9bWszKscPW3HZH2zqvYiL_MT4hyJzpPTfHMEO5WGMIw
adobe-sign-verification=7ef4a560cf4caa63d9e706ddafc56fa704f01da63632a29363fcd9762038bdb7
v=spf1 mx a:_msiplista.state.gov include:_iplist.state.gov include:_iplist2.state.gov include:spf.protection.outlook.com -all
docusign=1f1a0eb6-3b40-421f-a277-a8ccb58c3f76
docusign=8e75125d-b668-4668-8577-7ebc98204220
Registrationget.gov
registrarget.gov
registered1997-10-02
expires2027-08-29
last changed2026-08-14
ownerDepartment of State
countryUnited States
nameserversa1-63.akam.net
a14-64.akam.net
a26-65.akam.net
a3-66.akam.net
a8-67.akam.net
a9-64.akam.net
statusserver transfer prohibited
registered 1997-10-02expires 2027-08-29
HTTPS certificate137 days left
validyes
issuerAmazon
coversstate.gov, *.state.gov
protocolTLSv1.3
issued 2026-08-29expires 2027-03-14
DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → gov → state.gov
Email authenticationexcellent
SPFpass v=spf1 mx a:_msiplista.state.gov include:_iplist.state.gov include:_iplist2.state.gov include:spf.protection.outlook.com -all
DMARCpass policy reject
DKIMfound: selector1, selector2, s1, s2, mail

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 155/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: Mail Server Configuration
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 11 lookups
SURBL MultidomainURIBL MultidomainSpamCop100.28.244.61Barracuda100.28.244.61UCEPROTECT Level 1100.28.244.61SpamCop107.22.78.153Barracuda107.22.78.153UCEPROTECT Level 1107.22.78.153SpamCop34.233.146.45Barracuda34.233.146.45UCEPROTECT Level 134.233.146.45

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=state.gov" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=state.gov"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on state.gov. Reference: /llms.txt.

Watch state.gov. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days