Is usa.gov legit?
This site appears trustworthy overall, demonstrating strong technical infrastructure and a long-standing, reputable online presence. However, it could improve transparency by including a full set of legal pages and social media links.
Government average: 82/100 · based on 33 sites
Checked: April 27, 2026 at 4:29 PM UTC
Is usa.gov a scam? Here's what we found.
Security is robust with a valid, secure certificate, modern TLS 1.3 encryption, and no threats detected by Google Web Risk. While Let's Encrypt is a free issuer, it's widely used and trusted.
The domain has excellent identity signals, being over 26 years old and registered through get.gov, indicating a legitimate and well-established entity. While WHOIS is redacted, this is expected for government domains.
The website has a strong reputation, evidenced by its high Tranco rank, significant domain age, and clean DNS blacklist status, reflecting a well-known and respected online presence.
While contact information is present and the site has custom branding, the absence of social media links on the homepage represents a missed opportunity for enhanced user engagement and openness.
The site's compliance score is slightly reduced due to the reported partial legal pages, which may indicate a missing privacy policy or terms of service, essential for user trust and regulatory adherence.
The site's infrastructure is solid, with proper DNSSEC, SPF, and DMARC records for email authentication, and a fast page load time. The multiple name servers add redundancy.
Signals Detected
This is a well-known, high-traffic website
Site uses structured data identifying itself as: WebSite, Organization
This business has no Trustpilot presence — not unusual for smaller or newer companies
crt.sh returned status 429
Valid certificate, expires in 53 days
Certificate issued by Let's Encrypt
Connection uses TLS 1.3
Resolves to: 2600:1f18:f88:4313:6df7:f986:f915:78d6, 23.22.13.113
No MX records found — domain may not handle email
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: dns.gsa.gov., dns2.gsa.gov., dns3.gsa.gov., dns4.gsa.gov., dns5.gsa.gov.
Domain created 1999-08-18T17:36:13Z (26 years, 0 months ago)
Registered through get.gov
Expires in 112 days
DNSSEC status from WHOIS
Site has custom branding and social media metadata
robots.txt has 45 directives and references a sitemap
Site enforces HTTPS via HSTS
X-Frame-Options: DENY
No threats detected by Google Web Risk
Site maintains a proper sitemap with 1535 indexed pages
Website is live and responding
Website appears to have contact information
Website is missing either privacy policy or terms of service
No social media links found on homepage
Could not query Wayback Machine
Not found on any DNS blacklists
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.