HOW.IS
?

How is hbr.org?

Looks fine risk 0/100

Registered 30 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 107 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How hbr.org looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
107 ms
HTTPS
154 d
left on a Amazon certificate
Age
30 years
registered 1996-12-05
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A3.170.3.73
3.170.3.103
3.170.3.21
3.170.3.104
MX10 usb-smtp-inbound-1.mimecast.com
10 usb-smtp-inbound-2.mimecast.com
NSns-469.awsdns-58.com
ns-1175.awsdns-18.org
ns-1877.awsdns-42.co.uk
ns-604.awsdns-11.net
TXTgoogle-site-verification=ikLo_eYH7jY56yB4qtVoDTxY9WUWl7NkUEsM-UB6DT0
extensis-domain-verification=3decd987-0352-469b-8111-a273b429588a
sip=m699vbpan7kdoitobogsq38e1k
knowbe4-site-verification=f00a4d6e618b4a00b6f39e0b4c9e093f
docusign=59df337d-04fe-422f-bd8e-438fc3e80d21
MS=ms51679339
ciscocidomainverification=3a5e2e428cc891b6aef0b7598537338dd5c2bf8fe96326d58d87f62324dd9733
google-site-verification=P1JGD_hnkAqlxSPmsFW_M2nifpmJC2iBjnfmKi1uJCc
onetrust-domain-verification=0df7d79642a64b338bb91818045b158d
google-site-verification=0fyEgLpijqbt_OMG0ncBIK4G153eKqHF7UeGfTZgZk0
webexdomainverification.4C675B8B1892B136E053AB06FC0A3F65=7b2ac320-8920-4cf1-826d-975f96f199cb
openai-domain-verification=dv-yzIW4FvevpXrgKYrQ9Ndlm4V
smartsheet-site-validation=76f6Fdn8EnnOgbwX-KcCnJ5Nj66wRUeo
Wo71J1PNbWKkAikjb4WeqxCjBcNQwf6hcll0LJM6s9peRMF1ImcaCENQfddffLROaJY6wZHW2jrUsDNXC38vjg==
lyncdiscover = seh3q1rpvadu98fpk213q7htq2
_1nl5kysnqxswpmo75e1u1fdcbs0fptr
facebook-domain-verification=hvrm85rd5hvr18o50vzpd1lprkjg76
google-site-verification=o-E502ZnlfSSAM2JRb0RUfIxROmYDcYVOZnzlVRknS0
atlassian-domain-verification=5VnB9cXf8cZ+rqMksjlq1KyEzUSjGsBJ5irmtvOZtpwtq6AsKSs+jGHcKUhotODA
v=spf1 ip4:167.89.5.215 include:hbsp.harvard.edu include:amazonses.com include:u12602457.wl208.sendgrid.net include:aspmx.sailthru.com include:_spf.bigcommerce.com ~all
CAA{'type': 'CAA', 'issue': 'amazon.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazontrust.com', 'critical': 0}
{'type': 'CAA', 'iodef': 'mailto:hostmaster@harvardbusiness.org', 'critical': 0}
{'type': 'CAA', 'issue': 'amazonaws.com', 'critical': 0}
{'type': 'CAA', 'issue': 'awstrust.com', 'critical': 0}
{'type': 'CAA', 'issue': 'sectigo.com', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered1996-12-05
expires2027-12-04
last changed2026-08-11
ownerREDACTED FOR PRIVACY
nameserversns-1175.awsdns-18.org
ns-1877.awsdns-42.co.uk
ns-469.awsdns-58.com
ns-604.awsdns-11.net
statusclient delete prohibited
client transfer prohibited
client update prohibited
registered 1996-12-05expires 2027-12-04
HTTPS certificate154 days left
validyes
issuerAmazon
covers*.hbr.org, hbr.org
protocolTLSv1.3
issued 2026-09-15expires 2027-03-31
DNSSECinsecure

Domain is not signed with DNSSEC

. → org → hbr.org
Email authenticationexcellent
SPFpass v=spf1 ip4:167.89.5.215 include:hbsp.harvard.edu include:amazonses.com include:u12602457.wl208.sendgrid.net include:aspmx.sailthru.com include:_spf.bigcommerce.com ~all
DMARCpass policy reject
DKIMfound: selector2, s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 180/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop3.170.3.103Barracuda3.170.3.103UCEPROTECT Level 13.170.3.103SpamCop3.170.3.21Barracuda3.170.3.21UCEPROTECT Level 13.170.3.21SpamCop3.170.3.104Barracuda3.170.3.104UCEPROTECT Level 13.170.3.104SpamCop3.170.3.73Barracuda3.170.3.73UCEPROTECT Level 13.170.3.73

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=hbr.org" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=hbr.org"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on hbr.org. Reference: /llms.txt.

Watch hbr.org. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days