Is usa.gov legit?
USA.gov is a highly trusted website, showing a strong commitment to security and transparency, as expected from a government portal. While it has some minor gaps in social media presence and legal page completeness, these don't undermine its overall trustworthiness.
Government average: 80/100 · based on 33 sites
Checked: April 18, 2026 at 8:30 AM UTC · Refresh
Is usa.gov a scam? Here's what we found.
This site boasts a robust security posture, utilizing modern TLS 1.3 encryption, enforcing HTTPS, and showing no signs of threats from Google Web Risk. The SSL certificate is valid, ensuring secure communication.
With a domain age of 26 years and registration through a '.gov' registrar, usa.gov exhibits a well-established and credible identity. Though registrant details are privatized (common for government entities), the overall context affirms its legitimacy.
The site holds a high Tranco rank, indicating significant traffic and recognition. It is clean on all DNS blacklists, reinforcing its positive reputation, consistent with a major government platform.
Contact information is readily available, a positive sign of transparency. However, the absence of social media links on the homepage represents a small oversight for a site aimed at public engagement.
While the site has some legal pages, the partial completeness (missing either a privacy policy or terms of service) is a notable area for improvement to fully meet user expectations and compliance standards for a government website.
The site's infrastructure is solid, with proper DNSSEC, SPF, and DMARC records for email authentication. Its use of multiple name servers from gsa.gov indicates a well-managed and resilient setup.
Signals Detected
This is a well-known, high-traffic website
Site uses structured data identifying itself as: WebSite, Organization
This business has no Trustpilot presence — not unusual for smaller or newer companies
crt.sh returned status 429
robots.txt has 45 directives and references a sitemap
Site enforces HTTPS via HSTS
X-Frame-Options: DENY
No threats detected by Google Web Risk
Site maintains a proper sitemap with 1535 indexed pages
Site has custom branding and social media metadata
Valid certificate, expires in 62 days
Certificate issued by Let's Encrypt
Connection uses TLS 1.3
Not found on any DNS blacklists
Domain created 1999-08-18T17:36:13Z (26 years, 0 months ago)
Registered through get.gov
Expires in 122 days
DNSSEC status from WHOIS
Resolves to: 2600:1f18:f88:4313:6df7:f986:f915:78d6, 23.22.13.113
No MX records found — domain may not handle email
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: dns2.gsa.gov., dns.gsa.gov., dns3.gsa.gov., dns4.gsa.gov., dns5.gsa.gov.
Website is live and responding
Website appears to have contact information
Website is missing either privacy policy or terms of service
No social media links found on homepage
Could not query Wayback Machine
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.