How is cnn.com?
Looks fine
risk 0/100
Registered 33 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 53 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
53 ms · ends at www.cnn.com
HTTPS
146 d
left on a GlobalSign nv-sa certificate
Age
33 years
registered 1993-09-22
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records5 record types
| A | 151.101.67.5 151.101.3.5 151.101.131.5 151.101.195.5 |
|---|---|
| AAAA | 2a04:4e42:200::773 2a04:4e42:600::773 2a04:4e42::773 2a04:4e42:400::773 |
| MX | 10 cnn-com.mail.protection.outlook.com |
| NS | ns-587.awsdns-09.net ns-1242.awsdns-27.org ns-1652.awsdns-14.co.uk ns-378.awsdns-47.com |
| TXT | cisco-ci-domain-verification=4a1c92ef69fe42f8125c3ca9ce0696dcf6cc16fa80243257de578af593d19548 stripe-verification=42CDB310484C1CAA878F12A73EB7505EA6E7F154731CD7E4F5ABB574DE5E7725 canva-site-verification=C8ADd96ykBUHF3wyVjPyXQ google-site-verification=R-Btow3Z8oU_9H1IWU4Gm4lvUQ_OVmsfxonIKhIaiPE facebook-domain-verification=xszi21kow2trmw3xt3ph6s631zyu3i mongodb-site-verification=mtrxHeW3jOzWtwEwnOLpeQo9NXh6Lqas 2baPGrmeo+RwsWdIdq/gIVSEWNb4tC9mLGQu0j4l/mduqhm06T+V9vNLXsauLyH9FwMZJSRHvj/YHGKOVWRylw== google-site-verification=_QivaXNjhXy-V1y_YqrycXdAWZi2mVrcwbXerX6THeY atlassian-domain-verification=joqe6L8dNi+aisGbB1XHQa0pDc53V2l0GQQRUtLEcr2997x0+rtrAA5Zw+UgQw3u _globalsign-domain-verification=nPcGMc5MexVHi5gaiJ3TNZjT3fI_seEOQWXPUSMmWm 98f06e94-b4da-4343-86be-c6c1667205e6 google-site-verification=cNhH3bbaizgJp34tQo2r1NgKE0YYLIPNOOvcBVTT5Pk stripe-verification=1488a36c1dc125ea564dc5822d1414eeed68875825aaf90df27ac3131d053935 miro-verification=1e01f8da769be1241fceefd9abf2c317dcd68323 stripe-verification=08de20cb0357e775ecd57d7bcb9bc860f4e2a4e962245b893b24db9ba57839b9 stripe-verification=094254c9a60a6dc0c1c2a62294b81c0c3b9363d044151a3e562ffeac0a7c4157 jamf-site-verification=n384y4ilec6xqi08ShxAOg v=spf1 include:cnn.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:mail.zendesk.com ~all google-site-verification=j2gGPSOzQ_1vx08SNjoGR7G8PfAIAThdvkPr_KdQGkc google-site-verification=zLPPRYQh2mgpr-Yhg_8j8Z04d1okax7bGsPDmHlrfN0 adobe-idp-site-verification=279ead95-3581-42b7-82f4-73c97f8cebfa d1xTs9+kADZZSz3bPphLpkMXXxBGjqn5vsQHhi2M6lo0r8AdIbm6j8LfQXPujsywVgeGSP+AXWX0vO9Iep5cUg== stripe-verification=e5dad290205182f6bdbd4e72697ce3cf9a965f35cb0349d538e09706345fb673 |
RegistrationNom-iq Ltd. dba COM LAUDE
| registrar | Nom-iq Ltd. dba COM LAUDE |
|---|---|
| registered | 1993-09-22 |
| expires | 2027-09-21 |
| last changed | 2025-04-22 |
| nameservers | ns-1242.awsdns-27.org ns-1652.awsdns-14.co.uk ns-378.awsdns-47.com ns-587.awsdns-09.net |
| status | client delete prohibited client transfer prohibited client update prohibited server delete prohibited server transfer prohibited server update prohibited |
registered 1993-09-22expires 2027-09-21
HTTPS certificate146 days left
| valid | yes |
|---|---|
| issuer | GlobalSign nv-sa |
| covers | cnn.com, *.cnn.com |
| protocol | TLSv1.3 |
issued 2026-09-03expires 2027-03-21
DNSSECinsecure
Domain is not signed with DNSSEC
. → com → cnn.com
Email authenticationexcellent
| SPF | pass v=spf1 include:cnn.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:mail.zendesk.com ~all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: selector1, k1, s1, s2 |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 165/205
Basic Security20/40missing: DNSSEC Enabled
Record Security30/45missing: CAA Records, DKIM Presence
Advanced Security20/25missing: Mail Server Configuration
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop151.101.67.5Barracuda151.101.67.5UCEPROTECT Level 1151.101.67.5SpamCop151.101.3.5Barracuda151.101.3.5UCEPROTECT Level 1151.101.3.5SpamCop151.101.131.5Barracuda151.101.131.5UCEPROTECT Level 1151.101.131.5SpamCop151.101.195.5Barracuda151.101.195.5UCEPROTECT Level 1151.101.195.5
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=cnn.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=cnn.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on cnn.com.
Reference: /llms.txt.
Watch cnn.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days