How is mozilla.org?
Looks fine
risk 0/100
Registered 29 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 120 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
120 ms · ends at www.mozilla.org
HTTPS
48 d
left on a Google Trust Services certificate
Age
29 years
registered 1998-01-24
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records6 record types
| A | 35.190.14.201 |
|---|---|
| AAAA | 2600:1901:0:c197:: |
| MX | 1 aspmx.l.google.com 5 alt1.aspmx.l.google.com 10 aspmx3.googlemail.com 5 alt2.aspmx.l.google.com |
| NS | ns1-240.akam.net ns7-66.akam.net ns4-64.akam.net ns5-65.akam.net |
| TXT | anthropic-domain-verification-w5rph5=bZ2V4N0ps4oFSU6yrv4DfD6nA google-site-verification=mU3ta-ZJga-aCNg7IlaRaGYK9sDOMagHRNGVW1FSJGE google-site-verification=S3M17z96OKfZJ2dq7mYqQDfRWsEVjy3hdxaSyB72YPc ZOOM_verify_lGxIzL49Id7PipUgDgTd9K yandex-verification zoom-domain-verification=ZOOM_verify_671ea7b9c47d4b7b8cc9441f40817e3e _zojr3c56nq36tokzhnj9crit28tiqly google-site-verification=Lo_B34AJAe70BQVNF1Fo1zGGJudPmw9bLTnP2C8lV-s v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:_spf.mozilla.com include:_spf.google.com include:spf.fundraiseup.com ~all google-site-verification=E1vBHtOW-D9IlAj-pbRM-8PrOSiPDT48lrwRlW82ysw google-site-verification=z68pON7CWSaZu_sBqDQofmDL19OVp3krGEjaDl7cSaU MS=ms14343235 rz8t7zvjv5frpfbjs3y5n6g5tkw7gt2q google-site-verification=Brpe3hQpo9FlGIHMtK4ViKL60L0G8VM16nXopwVDoEU openai-domain-verification=dv-J6NgbJamHFrHSyNqlhElIX5K google-site-verification=Ep3NdzNxaf8Vl48dniNneaqm7JcWUiy3GjKS0wx5zQw bzbkzkxj2ws8gvtw6hpssfy7lv9kym88 |
| CAA | {'type': 'CAA', 'issue': 'sectigo.com', 'critical': 0} {'type': 'CAA', 'iodef': 'mailto:foxsec+caaiodef@mozilla.com', 'critical': 0} {'type': 'CAA', 'issue': 'certainly.com', 'critical': 0} {'type': 'CAA', 'issue': 'digicert.com', 'critical': 0} {'type': 'CAA', 'issue': 'amazon.com', 'critical': 0} {'type': 'CAA', 'issue': 'pki.goog', 'critical': 0} {'type': 'CAA', 'issue': 'amazontrust.com', 'critical': 0} {'type': 'CAA', 'issue': 'amazonaws.com', 'critical': 0} {'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0} {'type': 'CAA', 'issue': 'comodoca.com', 'critical': 0} {'type': 'CAA', 'issue': 'awstrust.com', 'critical': 0} |
RegistrationMarkMonitor Inc.
| registrar | MarkMonitor Inc. |
|---|---|
| registered | 1998-01-24 |
| expires | 2027-01-23 |
| last changed | 2026-09-14 |
| owner | Mozilla Corporation |
| nameservers | ns1-240.akam.net ns4-64.akam.net ns5-65.akam.net ns7-66.akam.net |
| status | client delete prohibited server delete prohibited client transfer prohibited server transfer prohibited client update prohibited server update prohibited |
registered 1998-01-24expires 2027-01-23
HTTPS certificate48 days left
| valid | yes |
|---|---|
| issuer | Google Trust Services |
| covers | mozilla.org |
| protocol | TLSv1.3 |
issued 2026-09-14expires 2026-12-13
DNSSECinsecure
Domain is not signed with DNSSEC
. → org → mozilla.org
Email authenticationexcellent
| SPF | pass v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:_spf.mozilla.com include:_spf.google.com include:spf.fundraiseup.com ~all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: google |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 170/205
Basic Security10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security45/45missing: DKIM Presence
Advanced Security20/25missing: SOA Record Configuration
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop35.190.14.201Barracuda35.190.14.201UCEPROTECT Level 135.190.14.201
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=mozilla.org" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=mozilla.org"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on mozilla.org.
Reference: /llms.txt.
Watch mozilla.org. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days