Is justice.gov legit?
justice.gov is a highly trusted website, backed by its long history and strong technical infrastructure. While some minor compliance and domain expiry details could be improved, these do not detract from its overall legitimacy as a government entity.
Government average: 80/100 · based on 33 sites
Checked: April 18, 2026 at 8:12 AM UTC · Refresh
Is justice.gov a scam? Here's what we found.
The site boasts robust security measures, leveraging current TLS 1.3 encryption and enforcing HTTPS. No threats were detected by Google Web Risk, indicating a clean and safe browsing environment.
With over 27 years of operation, justice.gov has a well-established and verifiable origin. While the domain expiry is a bit close, it's registered through get.gov, affirming its official government status.
As a government portal, its global traffic rank is exceptionally high, and its extensive web archive history further solidifies its long-standing and credible presence online. It is entirely clean on DNS blacklists.
The website provides clear contact information and maintains an active presence across multiple social media platforms, facilitating public engagement and communication.
While the site generally appears compliant, the noted absence of either a comprehensive privacy policy or terms of service is a minor but important missing piece for a government website handling public information.
The technical setup is solid, featuring multiple IP addresses for redundancy, strong email authentication (SPF/DMARC), and full DNSSEC implementation for enhanced domain security.
Signals Detected
This is one of the most visited websites globally
No structured data markup found
This business has no Trustpilot presence — not unusual for smaller or newer companies
Resolves to: 2606:4700:78::90:0:180, 2606:4700:78::90:0:183, 2606:4700:78::90:0:181, 2606:4700:78::90:0:182, 172.65.90.25, 172.65.90.27, 172.65.90.24, 172.65.90.26
Mail servers: mx-da6.usdoj.gov., mx-dc2.usdoj.gov.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: novalee.ns.cloudflare.com., jonah.ns.cloudflare.com.
Site enforces HTTPS via HSTS
X-Frame-Options: SAMEORIGIN
Web server: nginx
No threats detected by Google Web Risk
robots.txt has 78 directives and references a sitemap
Site has custom branding and social media metadata
Valid certificate, expires in 74 days
Certificate issued by CLOUDFLARE, INC.
Connection uses TLS 1.3
Not found on any DNS blacklists
Domain created 1998-05-14T14:24:37Z (27 years, 4 months ago)
Registered through get.gov
Expires in 87 days
DNSSEC status from WHOIS
Site maintains a proper sitemap with 167 indexed pages
Earliest archive snapshot from 20010926
Website is live and responding
Website appears to have contact information
Website is missing either privacy policy or terms of service
Website links to multiple social media platforms
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.