HOW.IS
?

How is nytimes.com?

Looks fine risk 0/100

Registered 33 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 131 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How nytimes.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
131 ms
HTTPS
144 d
left on a DigiCert Inc certificate
Age
33 years
registered 1994-01-18
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A151.101.193.164
151.101.129.164
151.101.1.164
151.101.65.164
MX1 aspmx.l.google.com
10 alt4.aspmx.l.google.com
10 alt3.aspmx.l.google.com
5 alt2.aspmx.l.google.com
5 alt1.aspmx.l.google.com
NSdns2.p06.nsone.net
ns-635.awsdns-15.net
ns-1328.awsdns-38.org
ns-244.awsdns-30.com
dns3.p06.nsone.net
dns1.p06.nsone.net
ns-1652.awsdns-14.co.uk
dns4.p06.nsone.net
TXTgamma-domain-verification-m0hfp8=Kn1CNDywmVQvNK2EE60GxQORI
atlassian-domain-verification=Vrn33GZgJTapfeggl1snZZ5a8HjNwfFb1K5kBxVNhp7jlMFlRZGUytV9rIHhGdR8
miro-verification=ee856857f05022ca58c04ab6f8e4014e564b3d6b
serval-domain-verification-bew4y4=VA1qmSGnvHaYCguEOONe1E2Nq
_wufmw8f1leho148v35f8zaogcyux7lx
atlassian-sending-domain-verification=1b4b110f-a2dd-4853-8b13-de36c831aa81
masv=oFbRBdtBUCoWWHaQiRJLZcKASUJZboJz
notion-domain-verification=4wS9fYEvnEgZg6Fc4cQ3atgsNuaj2zZIKwRP34uAGse
google-site-verification=q5oM_szMOT79db0AJjdk_JP1xeurksaWmhbv_dd-MEM
wiz-domain-verification=f58277d3dd68296f29aace3a12b746a054eee9f6c472f21673207cfcc1991081
ZOOM_verify_ClSSgAI2bqqZQA66rT4Z1x
_b2ao2yybjl1klqaw0mahepejqyvwgq1
v=spf1 include:nytimes.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:_spf.e.sparkpost.com include:amazonses.com ~all
apple-domain-verification=1BVLidj37w9zRMnU
adobe-idp-site-verification=5ce4d99c-af0a-4b76-9217-bd49d3336df0
parallels-domain-verification=df31386535ac4cbe8d70cde19722e58da9831b130c3d46299f64ca5d0ed0f94d
cursor-domain-verification-cbqk6b=DdvvVJNHMmVswd6oRmD8GZX50
docusign=6a4f88fd-cd2f-4917-acdb-bb2f343438a1
lucidlink-verification=PZP4S4XGS2MW9TT3H76V0TPSY0
NV=6b9b6zcshr98ey1x
onetrust-domain-verification=1e62f8d767fc41a39fdf3f77025a8105
dropbox-domain-verification=4ld3jahx0psi
google-site-verification=dNxU4aqYrP-m9U4J4OO_hvaOfjepywv2BN8Luc-q4o8
google-site-verification=jZcmQFxPEP38yqYpmRvo0v_9hQFAdBZPUEBwTNUPUF8
shade-domain-verification-wys4jv=w07FFVQR3MSW3TNoXqZAYS7O0
google-site-verification=tvhSn0gaSi6CUrrc9N1pvq4tmJrzvbfJbKVWPrgg_6Q
google-site-verification=ZsySMeZ_SRbJZFu-53ptepytP7h5pxHO0qAg8Z2bKug
MS=ms22827202
google-site-verification=aReMr8hkX3gxeHLKKk4tJ1s970U7QdEqUMIhMmLUfjQ
google-site-verification=OJl4BugQ_esE20V0QtVc9DhqvnnxOLHnf5AmFjdLSqk
google-site-verification=ZTCMdpSKM7HwqTvGUf_00Ef008JhOnbzGgCSUGYfsro
jamf-site-verification=PIprfFrz8CBhH0TK0nNhnQ
google-site-verification=NSmi94k0NzvQaksUCNXeJZPYtJPSoUf52cjJsJcZFy4
google-site-verification=4qJm5sAZa1_29BTwFjqW09t7_7D4Vee3LBFQqg8xYbs
dell-technologies-domain-verification=nytimes.com_e9803e4c-210b-4501-a26b-705148cb7292_1777730473
1password-site-verification=5XOUF7UVRZC5XFXKJ7IH435GPA
wrike-verification=NjYxMTMwODpmZGRiNmQ3Yjc1Yzk5NjFhMDk2OWI4MWM2NDhkZmYxNjdmOThhODQ2MDJmZmI0ZTMxNTUxOTMzZGRlMzQwZDEw
google-site-verification=4TE2ggBoy6PktLjtZ03t32A2oEZ0VD0PY6MnTj8IL_g
253961548-4297453
docusign=bd506110-db79-430e-b159-cc1d74fe1176
onetrust-domain-verification=dee1266d6a984549b43a1bd101957a8f
segment-site-verification=Z6wALFPYli6z0AlPlgjZXpMVRLZ2KiRb
klaviyo-site-verification=PkxYaQ
google-site-verification=NIqXa_F8IaqdPJhTtexgR0NYbzVLD_-X-uRUvyf4GyQ
klaviyo-site-verification=VBhmML
klaviyo-site-verification=NsTtn9
MS=A1BFCA84E21B7011CA98DF9DC251CDDF90E0174B
CAA{'type': 'CAA', 'issue': 'amazon.com', 'critical': 0}
{'type': 'CAA', 'issue': 'awstrust.com', 'critical': 0}
{'type': 'CAA', 'issue': 'pki.goog', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'issue': 'comodoca.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazonaws.com', 'critical': 0}
{'type': 'CAA', 'issue': 'symantec.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazontrust.com', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'issue': 'certainly.com', 'critical': 0}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered1994-01-18
expires2027-01-19
last changed2024-12-18
ownerThe New York Times Company
nameserversdns1.p06.nsone.net
dns2.p06.nsone.net
dns3.p06.nsone.net
dns4.p06.nsone.net
ns-1328.awsdns-38.org
ns-1652.awsdns-14.co.uk
ns-244.awsdns-30.com
ns-635.awsdns-15.net
statusclient delete prohibited
client transfer prohibited
client update prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 1994-01-18expires 2027-01-19
HTTPS certificate144 days left
validyes
issuerDigiCert Inc
coversnytimes.com, www.homedelivery.nytimes.com, *.api.dev.nytimes.com, *.api.nytimes.com, *.api.stg.nytimes.com, *.blogs.nytimes.com, *.blogs.stg.nytimes.com, *.dev.nyt.com, *.dev.nyt.net, *.dev.nytimes.com, *.newsdev.nyt.net, *.newsdev.nytimes.com
protocolTLSv1.3
issued 2026-09-02expires 2027-03-19
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → nytimes.com
Email authenticationexcellent
SPFpass v=spf1 include:nytimes.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:_spf.e.sparkpost.com include:amazonses.com ~all
DMARCpass policy reject
DKIMfound: google, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 175/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
15/25missing: SOA Record Configuration, IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop151.101.129.164Barracuda151.101.129.164UCEPROTECT Level 1151.101.129.164SpamCop151.101.65.164Barracuda151.101.65.164UCEPROTECT Level 1151.101.65.164SpamCop151.101.1.164Barracuda151.101.1.164UCEPROTECT Level 1151.101.1.164SpamCop151.101.193.164Barracuda151.101.193.164UCEPROTECT Level 1151.101.193.164

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=nytimes.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=nytimes.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on nytimes.com. Reference: /llms.txt.

Watch nytimes.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days