HOW.IS
?

How is att.com?

Be careful risk 20/100

Registered 41 years ago, on no blocklists we checked, no valid HTTPS certificate, the site answered 200 in 1194 ms.

Why

02050100
finecarefulhigh risk
  • +20No valid HTTPS certificate.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How att.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
1194 ms · ends at www.att.com
HTTPS
invalid
Could not resolve host (EREFUSED)
Age
41 years
registered 1986-04-25
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records4 record types
A144.160.36.42
144.160.155.43
MX20 mx0b-00191d01.pphosted.com
10 mxb-00191d01.gslb.pphosted.com
10 mxa-00191d01.gslb.pphosted.com
20 mx0a-00191d01.pphosted.com
NSa4-64.akam.net
a22-67.akam.net
a1-187.akam.net
a2-64.akam.net
a11-65.akam.net
a5-66.akam.net
TXT_nf8m5hisjvxnliy43grrkcxt4775nre
safebreach-domain-verification=87a47aa8-9dcf-4fc6-a0dc-645f6d8f16b7
mongodb-site-verification=aksKamJjSOb7wjKkmOBL0yBoCcDkTD5w
atlassian-domain-verification=sKDPLDFqqK6UKBe8hXqLj7n47sRNeN4C0TLWOyJI9jhbsY0Lz0lagoRG9756r6y2
2a35e1cb-656a-4618-b343-cb814065d867
jamf-site-verification=Kzw-u7InjZzANk8Hd_p1Bw
google-site-verification=aEiNNWvbfCYfvmE1MB5FDlfTOXscCUfCQSBf5BsZnFQ
docusign=96684378-d4b4-426b-aa46-f484dcce317e
jamf-site-verification=UPRluCUJKO0tlsh28talrg
BeJQ5GrhdR+RKZkfNVneBsIUT2NVqTZB01Y2FXf2+THpvzgedgBjuxOsk3Ub41a8xwwOOxLu+mJTFDrYINC2nw==
google-site-verification=y2jV9rmyQx1kZNZuEhu5QqjLPGACb_JSzClilwj4Dr0
twilio-domain-verification=b527bfa6770ac367fc9912a1caa06323
windsurf-verification=lqhQVISbUb5fsOn2Yc0xZyf6v1RamtpB4_erNYSM4fU=
google-site-verification=TDlxuIuUQhu-wSUgoz8Tuvpeevqqo4Kge7S-EJFFzrA
docusign=7c207f4f-1463-48ab-8a42-401d5a790153
mixpanel-domain-verify=29364abe-5921-4f15-b1f9-92c168b99888
censys-domain-verification=78kpf_YXBG6iZmORvVAIMSeoT9qA_Abl2TQ1NQ5BmvI2
_o7unzg1f3flq9gplgrxiex76xucouzs
4879c66f-d011-43dc-873c-ce5803b4d5a7
7af66ea0-faa0-4d61-a1ff-7624b9d97465
_lf5ez32jnsfjm9iqdgwqkvmtxmni1bv
bv-domain-verification=38433e129a5a4d49af430708b3d204a9ccdc03e981b1773fb2ad2b897fe2e2eb
ff43041c-55f9-42c5-8263-b168f015ec68
apple-domain-verification=B3sYImneRJaRig6Z?
jamf-site-verification=g-kOVDxo7U0trPWTXbALxg
docusign=edf26ba5-075c-448c-a7b4-fd68e78606b3
mongodb-site-verification=XfGZRasxOg2vmMw4Bq0fmxB5i8mxHP57
Dynatrace-site-verification=2ef8347e-785b-4bcc-ba67-7adafc0ca244__fv03es9iej68csj426k1spsl9p
google-site-verification=_tbHFE4ZquVgPnU4yn9c8mM4AwjDcnyvHYpUyY9W9A0
google-site-verification=GfKQDZJmtFjAfLwMo0CpJSgUgQ14s6EGeH8btHERCzY
openai-domain-verification=dv-8mZDN6uQdVFZqUS1INx46eTX
_pvc1rwav561hkrmdq14aycsq5pps8xi
google-site-verification=61mMnbAFkug5Ga66TxJwJnHrccqsdXgjaYX4Dzh4fg4
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
anthropic-domain-verification-gwxhjr=xYTl1LLbzEOKWZYjmzjMKm9zm
docusign=cd78ab12-bff3-4e95-9d5e-40b4a6c64e28
RegistrationCSC Corporate Domains, Inc.
registrarCSC Corporate Domains, Inc.
registered1986-04-25
expires2027-04-26
last changed2026-04-22
ownerAT&T SERVICES, INC.
nameserversa1-187.akam.net
a11-65.akam.net
a2-64.akam.net
a22-67.akam.net
a4-64.akam.net
a5-66.akam.net
statusclient transfer prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 1986-04-25expires 2027-04-26
HTTPS certificatenot valid
validno
problemCould not resolve host (EREFUSED)
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → att.com
Email authenticationexcellent
SPFpass v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
DMARCpass policy reject
DKIMfound: s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 155/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop144.160.36.42Barracuda144.160.36.42UCEPROTECT Level 1144.160.36.42SpamCop144.160.155.43Barracuda144.160.155.43UCEPROTECT Level 1144.160.155.43

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=att.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=att.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on att.com. Reference: /llms.txt.

Watch att.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days