HOW.IS
?

How is npr.org?

Looks fine risk 0/100

Registered 33 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 145 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How npr.org looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
145 ms · ends at www.npr.org
HTTPS
125 d
left on a Amazon certificate
Age
33 years
registered 1993-12-13
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records4 record types
A18.165.83.21
18.165.83.38
18.165.83.52
18.165.83.110
MX10 mxa-0032f701.gslb.pphosted.com
10 mxb-0032f701.gslb.pphosted.com
NSns-139.awsdns-17.com
ns-769.awsdns-32.net
ns-1227.awsdns-25.org
ns-1580.awsdns-05.co.uk
TXTatlassian-domain-verification=9lkPCUXoZo9/uK7odGq6udvvCzWRQIIdJ14UCe0W4WOLmRsHYYPicVr0myfaR6as
e2ma-verification=ah1fb
stripe-verification=f163e5dc5b397fea4a815142393ae096a34704dfce3888cf910a800ea33fbd33
brave-ledger-verification=dffd0dcc07a6b671c80a0755b0370c40d229b926b5afb95b8e660c14bc1e1393
intersight=2d6b360329c8f7aca93c0f56037a7d8725e68324554e462abb4f5830ea828310
docusign=d1000a20-f346-4e9d-81d7-5c0b6c470c9b
lucidlink-verification=PBFDTWTMX79GYV1PPBAN5P92SC
atlassian-domain-verification=lX5Q/Ll/nrj/C4e6cySytCHKdx1H80MurTN7TPd8TMQVY4o9uzibdZHrgT9IB90I
v=spf1 include:spf-0032f701.pphosted.com include:spf.protection.outlook.com include:prss.org exists:%{i}._spf.mta.salesforce.com include:c9eb27a2d7.berenice.eoidentity.com ip4:64.124.132.59/32 ip4:66.150.167.192/27 ip4:162.242.229.170 ip4:205.153.38.0/24 ip4:205.153.36.170 ip4:40.107.0.0/16 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 ip4:139.60.0.0/24 ip4:139.60.1.0/24 ip4:139.60.2.0/24 ip4:139.60.3.0/24 ip4:13.111.0.0/16 ip4:136.147.135.0/24 ip4:136.147.176.0/24 ip4:136.147.182.0/24 ip4:198.245.81.0/24 ip4:199.122.123.0/24 ip4:195.66.99.135 ip4:212.227.89.57 ip4:217.160.226.166 ip4:54.194.192.132 ip4:62.75.247.44 ip4:82.165.193.1 ip4:85.25.144.9 ip4:87.79.30.25 ip4:87.79.30.30 ip4:208.86.168.7 ip4:135.84.68.123 ip4:206.152.14.54 ip4:54.240.43.16 include:_spf.salesforce.com ip4:209.144.103.186 include:spf.mandrillapp.com -all
google-site-verification=GhCa0MtDUMedDVVtFoDlMUCMRtcagJcLFhNAqaePPQo
lucidlink-verification=RNJ13EA4S94GPXG4KQ65WFW00W
tollbit-domain-verification=b382b8a9ab8071b8854c2a7b73773ea7017b866daa54db7747ac34d755516be2
docker-verification=0d5c5383-6c1d-4a60-add5-62a69e08c89c
stripe-verification=E0F516ADAE7EE0E0407C68E60E87A2E95306A5239F48BD9A102237AB9BCED866
Token: SFMC-48BHHFc3__TGFOIlUzHwZNVsAvJyXfq9Syls-gYl
e2ma-verification=3smcb
tollbit-domain-verification=6704e51d63e08bdc808332677183132f9cd8ba2185c40c102d6738e8fe832983
dell-technologies-domain-verification=npr.org_3f6b9445-a976-4474-830b-a246552bcdde_1752328632
ZOOM_verify_k_dnAddbSziOpsMEkmXiLQ
google-site-verification=ZZkj28LUEc29MPzvM7j02U8Qkg3t8CH3JlDO1cnWbdA
e2ma-verification=zt1fb
e2ma-verification=dv1fb
MS=ms72521120
e2ma-verification=d19fb
facebook-domain-verification=vffcg5c4iyq78of04zvynnxb1ledtk
miro-verification=a8d2cf7f81ffcb34f4a909a74956170e23a969cd
e2ma-verification=bv1fb
e2ma-verification=ssagb
e2ma-verification=9g1fb
atlassian-domain-verification=SOB5ZdyvwZb3NLiO6urLakx6J8pgXMVNbxzNLZLSvqKSSwQEsKpGveEAfb3RH1Hi
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered1993-12-13
expires2027-12-12
last changed2026-08-11
ownerREDACTED FOR PRIVACY
nameserversns-1227.awsdns-25.org
ns-139.awsdns-17.com
ns-1580.awsdns-05.co.uk
ns-769.awsdns-32.net
statusclient delete prohibited
client transfer prohibited
client update prohibited
registered 1993-12-13expires 2027-12-12
HTTPS certificate125 days left
validyes
issuerAmazon
coversnpr.org, *.npr.org
protocolTLSv1.3
issued 2026-01-31expires 2027-03-01
DNSSECinsecure

Domain is not signed with DNSSEC

. → org → npr.org
Email authenticationexcellent
SPFpass v=spf1 include:spf-0032f701.pphosted.com include:spf.protection.outlook.com include:prss.org exists:%{i}._spf.mta.salesforce.com include:c9eb27a2d7.berenice.eoidentity.com ip4:64.124.132.59/32 ip4:66.150.167.192/27 ip4:162.242.229.170 ip4:205.153.38.0/24 ip4:205.153.36.170 ip4:40.107.0.0/16 ip4:205.201.128.0/20 ip4:198.2.128.0/18 ip4:148.105.0.0/16 ip4:139.60.0.0/24 ip4:139.60.1.0/24 ip4:139.60.2.0/24 ip4:139.60.3.0/24 ip4:13.111.0.0/16 ip4:136.147.135.0/24 ip4:136.147.176.0/24 ip4:136.147.182.0/24 ip4:198.245.81.0/24 ip4:199.122.123.0/24 ip4:195.66.99.135 ip4:212.227.89.57 ip4:217.160.226.166 ip4:54.194.192.132 ip4:62.75.247.44 ip4:82.165.193.1 ip4:85.25.144.9 ip4:87.79.30.25 ip4:87.79.30.30 ip4:208.86.168.7 ip4:135.84.68.123 ip4:206.152.14.54 ip4:54.240.43.16 include:_spf.salesforce.com ip4:209.144.103.186 include:spf.mandrillapp.com -all
DMARCpass policy reject
DKIMfound: selector1, s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 165/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop18.165.83.38Barracuda18.165.83.38UCEPROTECT Level 118.165.83.38SpamCop18.165.83.52Barracuda18.165.83.52UCEPROTECT Level 118.165.83.52SpamCop18.165.83.110Barracuda18.165.83.110UCEPROTECT Level 118.165.83.110SpamCop18.165.83.21Barracuda18.165.83.21UCEPROTECT Level 118.165.83.21

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=npr.org" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=npr.org"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on npr.org. Reference: /llms.txt.

Watch npr.org. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days