How is oecd.org?

Looks fine risk 0/100

Registered 32 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 222 ms.

Why

02050100

finecarefulhigh risk

·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.

Site

403

222 ms

HTTPS

19 d

left on a DigiCert Inc certificate

Age

32 years

registered 1994-12-13

Blocklists

listings across 5 lists

Everything we looked at

DNS records4 record types

A	151.101.3.10 151.101.67.10 151.101.131.10 151.101.195.10
MX	10 oecd-org.mail.protection.outlook.com
NS	ns1-03.azure-dns.com ns2-03.azure-dns.net ns3-03.azure-dns.org ns4-03.azure-dns.info
TXT	v=spf1 ip4:78.41.128.0/22 include:spf.protection.outlook.com -all d122tnk0lmcb7fw4lzdcvqmw9jdf4qqb 3f6aa5c46d2a4da482b5cb56af96dec1 v/l2fKfgQ+sfAM7ZccgEU41dgW0s412pftzTh7XJzyim4AUo1Wi2WVai364FALz09lut6gJWcS8YLtAjbkatrA== adobe-idp-site-verification=fe3732a56cceead6122113a39f9385a693c3367314cdad48789e5cfbf77d5977 MS=ms12713444 google-site-verification=ywMTwu2FAsfR60NR80rZ3jMdv8Ku-rr1NVnMGvor75k docusign=26a8c1aa-ac33-45f2-9a60-8d2cd96d4b3d docusign=4a7be657-e630-44fc-87ba-b68287ac2a3d cisco-ci-domain-verification=295dc971d1c6be2b5403477737c89eac7ec07601440a1e0855e475c20aa08f68 apple-domain-verification=Z7TTmRtTMuoxrVa2 2b065714-2fc1-4d13-b11f-08fbc02c7626 _c4vs31pucag8knkqzie5i90hhnstnug google-site-verification=SDEWojQdWXNif-TLtOo9erhxfQLpv29GSU6XhHK1r68 openai-domain-verification=dv-TmLkx83mPP4k3cYF7dEcKasX hpe-greenlake-domain-verification=4677486a4449536d6173586553475a59354f6761314d47683048313635694334

RegistrationNetwork Solutions, LLC

registrar	Network Solutions, LLC
registered	1994-12-13
expires	2029-12-12
last changed	2026-08-12
owner	hidden by privacy service
nameservers	ns3-03.azure-dns.org ns1-03.azure-dns.com ns2-03.azure-dns.net ns4-03.azure-dns.info
status	client transfer prohibited

registered 1994-12-13expires 2029-12-12

HTTPS certificate19 days left

valid	yes
issuer	DigiCert Inc
covers	*.oecd.org, oecd.org
protocol	TLSv1.3

issued 2025-10-16expires 2026-11-16

DNSSECinsecure

Domain is not signed with DNSSEC

. → org → oecd.org

Email authenticationexcellent

SPF	pass `v=spf1 ip4:78.41.128.0/22 include:spf.protection.outlook.com -all`
DMARC	pass policy reject
DKIM	found: selector1, selector2, k1

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 155/205

Basic Security

20/40missing: DNSSEC Enabled

Record Security

30/45missing: CAA Records, DKIM Presence

Advanced Security

10/25missing: Mail Server Configuration, SOA Record Configuration, IPv6 Support

Domain Reputation

50/50

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 14 lookups

SURBL MultidomainURIBL MultidomainSpamCop151.101.195.10Barracuda151.101.195.10UCEPROTECT Level 1151.101.195.10SpamCop151.101.131.10Barracuda151.101.131.10UCEPROTECT Level 1151.101.131.10SpamCop151.101.67.10Barracuda151.101.67.10UCEPROTECT Level 1151.101.67.10SpamCop151.101.3.10Barracuda151.101.3.10UCEPROTECT Level 1151.101.3.10

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=oecd.org" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=oecd.org"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on oecd.org. Reference: /llms.txt.

Watch oecd.org. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days