HOW.IS
?

How is cornell.edu?

Not sure yet risk 10/100

On no blocklists we checked, valid HTTPS, the site answered 200 in 127 ms.

Why

02050100
finecarefulhigh risk
  • +10Could not read the domain's registration record.
  • ·Could not check registration; retry before trusting this domain.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How cornell.edu looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
127 ms · ends at www.cornell.edu
HTTPS
53 d
left on a InCommon, LLC certificate
Age
?
creation date not reported
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records4 record types
A128.253.173.245
128.253.173.243
128.253.173.241
128.253.173.246
128.253.173.242
128.253.173.244
MX0 cornell-edu.mail.protection.outlook.com
NScudns.cit.cornell.edu
drdns.cit.cornell.edu
bigred.cit.cornell.edu
drdns2.cit.cornell.edu
dns.cit.cornell.edu
TXTgoogle-site-verification=CauHX8dfnPle2exSgs6k3OuJ_rPzkV1d6n6E9OFJFO8
openai-domain-verification=dv-Ha5ILJQm9n2m08y8A4buZxcw
autodesk-domain-verification=9Y0MrpeHy7LiqjUs0Rpy
NmwZsJfvHf2DUPwvPqMaLkflPi89l0leQfEkMtPmpxQNqlkPy0anm5LZM/N+sxrW+oJfdGKCyoi/qnhAhPy8yg==
adobe-idp-site-verification=f41c9778dd61e0b903e5daff9095300a03eb9ad4a2a7ce435b4e4eaf76000127
7OT7JRZVY1IKZ8J8U84AK2JX4T0J2BM42TL8LSZLV
sending_domain44232=26593424e3f9a029c8413a3f66844938dd909eec6d3c1421168e0fa974950b97
google-site-verification=2Fa7hSAy-FAwrMvWZafs9FUqgGxiNrzJExOmdf5HWAo
google-site-verification=Gh3jhxuBIdlsH1dgfvJhSGS30sk0OFFvel_I9xQkI5c
apple-domain-verification=R62yGBLwZW9fUKsm
v=spf1 ip4:128.253.150.144/30 ip4:128.253.150.158 ip4:128.253.150.176 ip4:128.253.150.177 include:_spf.google.com include:spf.protection.outlook.com include:_spf.qualtrics.com -all
google-site-verification=V6u6xIMwPwKv6d55ZV4VqbkO1mjLlzyvQKkbz4usOM0
anthropic-domain-verification-87t7t2=FGRTQdaOVepXoeivaLuhMkGII
facebook-domain-verification=kiwj4xtbf69jsywfq4nlu7a0z81doz
D750B9F1EBA3435D9D77F95792265223
notion-domain-verification=mTQLByaJiMJcaoejfap0w1HqVtit4gqXfxNE3z57ugv
Registrationregistrar not reported
HTTPS certificate53 days left
validyes
issuerInCommon, LLC
coverscornell.edu
protocolTLSv1.2
issued 2026-06-04expires 2026-12-19
DNSSECinsecure

Domain is not signed with DNSSEC

. → edu → cornell.edu
Email authenticationexcellent
SPFpass v=spf1 ip4:128.253.150.144/30 ip4:128.253.150.158 ip4:128.253.150.176 ip4:128.253.150.177 include:_spf.google.com include:spf.protection.outlook.com include:_spf.qualtrics.com -all
DMARCpass policy reject
DKIMfound: selector2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 145/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
10/25missing: Mail Server Configuration, SOA Record Configuration, IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 17 lookups
SURBL MultidomainURIBL MultidomainSpamCop128.253.173.241Barracuda128.253.173.241UCEPROTECT Level 1128.253.173.241SpamCop128.253.173.242Barracuda128.253.173.242UCEPROTECT Level 1128.253.173.242SpamCop128.253.173.244Barracuda128.253.173.244UCEPROTECT Level 1128.253.173.244SpamCop128.253.173.245Barracuda128.253.173.245UCEPROTECT Level 1128.253.173.245SpamCop128.253.173.246Barracuda128.253.173.246UCEPROTECT Level 1128.253.173.246

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=cornell.edu" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=cornell.edu"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on cornell.edu. Reference: /llms.txt.

Watch cornell.edu. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days