How is box.com?
Looks fine
risk 0/100
Registered 28 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 158 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
158 ms · ends at www.box.com
HTTPS
164 d
left on a DigiCert Inc certificate
Age
28 years
registered 1999-02-17
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records6 record types
| A | 74.112.186.157 |
|---|---|
| AAAA | 2620:117:bff0:12d:: |
| MX | 10 mxb-00172704.gslb.pphosted.com 10 mxa-00172704.gslb.pphosted.com |
| NS | ns04.box-ns.com ns03.box-ns.com dns2.p09.nsone.net dns1.p09.nsone.net dns3.p09.nsone.net ns01.box-ns.com dns4.p09.nsone.net ns02.box-ns.com |
| TXT | apple-domain-verification=Q6ZbrwNpV5Nf6mMX openai-domain-verification=dv-3pcNwVWmbuCazHeb2Hy9j26y 00D600000007C2q=1TBUT00000000xh google-site-verification=AZmX_1q4RIqFdW_0j9dt63wGv_eehN7F555UnDfdGKk MS=ms77284419 google-site-verification=Dg1l9TgAq2lCkemvxJbiGH4wLxpkR10utcxOS9nt02o google-site-verification=OPFD055ic5Z0Twt9Oh3Vc7JEzK6W0ZdlwJ1w49KnLAQ cursor-domain-verification-8n2hsc=a4pjEJLogybVKLzoKGqqNjMv2 v=spf1 ip4:74.112.184.0/22 ip4:107.152.16.0/20 ip4:204.14.232.0/22 ip4:202.129.242.0/25 ip4:34.211.27.153 ip4:54.70.65.68 include:_spf.google.com include:sendgrid.net include:_spf.mxhero.com include:_spf.q4press.com include:stspg-customer.com include:5608010.spf08.hubspotemail.net ~all google-site-verification=ixberGbEpG-6o-WjOsKq3G8vwYzfJPk4-grr8JIiEy4 _ekctc4i0t2i82uxe4xittvln2jdo1ns asv=62e1f7ac21943b00bec6d263491f5afd paloaltonetworks-site-verification=e69cd908157ca263aebd6aa724d6f40903c62a390edeae2ffcb223a286e81ee0 docusign=c74e9bc1-e686-4549-a027-502ac2647988 5d9f07a12f786083f86c9582e5aff6e3bb335b0f2fc387f0af9e76eb8e68b76e mongodb-site-verification=iXfoWZuaZFu9OYf003LE2n1PZfF20zew onetrust-domain-verification=a153d3509dff42aa954e04fa87e2ee91 anthropic-domain-verification-ede8t0=p69vPv6cbVNPGb8gkr3h5QCes google-site-verification=LaeRMxQr903bnLCO_lQ1AmTBc-oKWTJGU_BFeBXBcKw atlassian-domain-verification=RBsyK96btDKk5ogVdtgwr3DUdfWI2BMzn1vpPsdGEXEtYDvXzsTdM7ubFx7HVhZH 1password-site-verification=UBIBTNGWFJBIJPPKGYJZQ4XNLA detectify-verification=34418ef6d428fa589e0242009de86e7d google-site-verification=A_i8cN9XRXZtfSZjRNN7JHPA_8H-D0uY9QqNTOY7Las mongodb-site-verification=a29HTYZEP557j7IUIaaUOzZm5HxbvY1a drift-domain-verification=69ba9345c1274754f39ffcd36db7f7c18a1fc04b98b234acc2575cfcd3ac5baf google-site-verification=e8_0EdcAu3Qp7xMpq10w8jg0a0thepvNICHOr3LMZS0 amazonses:w3BTGefFeXuqvvmfdFuGriN4u5DrNP9Ru7y6AqDfZ+Q= status-page-domain-verification=pg69mfwsg50n logmein-verification-code=0acf05fe-c5b7-4ec9-9a9b-be3b191c7834 pendo-domain-verification=b9ef9d71-a87e-4adb-a96d-51c73f2d26d3 zoom-domain-verification=7741ebe2-17cb-41d6-b176-baf04b7705a6 |
| CAA | {'type': 'CAA', 'issue': 'digicert.com', 'critical': 0} {'type': 'CAA', 'issue': 'www.digicert.com', 'critical': 0} |
RegistrationMarkMonitor Inc.
| registrar | MarkMonitor Inc. |
|---|---|
| registered | 1999-02-17 |
| expires | 2027-02-17 |
| last changed | 2025-01-16 |
| owner | REDACTED FOR PRIVACY |
| nameservers | dns1.p09.nsone.net dns2.p09.nsone.net dns3.p09.nsone.net dns4.p09.nsone.net ns01.box-ns.com ns02.box-ns.com ns03.box-ns.com ns04.box-ns.com |
| status | client delete prohibited client transfer prohibited client update prohibited server delete prohibited server transfer prohibited server update prohibited |
registered 1999-02-17expires 2027-02-17
HTTPS certificate164 days left
| valid | yes |
|---|---|
| issuer | DigiCert Inc |
| covers | box.com, *.box.com, *.account.box.com, *.app.box.com, *.ent.box.com, *.services.box.com, *.m.box.com, www.box.com, *.mktg.box.com |
| protocol | TLSv1.3 |
issued 2026-09-23expires 2027-04-09
DNSSECsecure
Domain is properly signed — chain validated by an independent validating resolver
. → com → box.com
Email authenticationexcellent
| SPF | pass v=spf1 ip4:74.112.184.0/22 ip4:107.152.16.0/20 ip4:204.14.232.0/22 ip4:202.129.242.0/25 ip4:34.211.27.153 ip4:54.70.65.68 include:_spf.google.com include:sendgrid.net include:_spf.mxhero.com include:_spf.q4press.com include:stspg-customer.com include:5608010.spf08.hubspotemail.net ~all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: default, google, k1, s1, s2 |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade A · 180/205
Basic Security20/40missing: DNSSEC Enabled
Record Security45/45missing: DKIM Presence
Advanced Security20/25missing: SOA Record Configuration
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop74.112.186.157Barracuda74.112.186.157UCEPROTECT Level 174.112.186.157
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=box.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=box.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on box.com.
Reference: /llms.txt.
Watch box.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days