HOW.IS
?

How is openai.com?

Looks fine risk 0/100

Registered 20 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 53 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How openai.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
53 ms
HTTPS
50 d
left on a Google Trust Services certificate
Age
20 years
registered 2007-01-19
Blocklists
0
listings across 4 lists; 1 did not answer

Everything we looked at

DNS records5 record types
A104.18.33.45
172.64.154.211
MX10 alt3.aspmx.l.google.com
5 alt1.aspmx.l.google.com
1 aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt2.aspmx.l.google.com
NSns3-02.azure-dns.org
ns4-02.azure-dns.info
ns1-02.azure-dns.com
ns2-02.azure-dns.net
TXTnotion-domain-verification=GZFdn3LQ77QuL3XKYZT6BmKDkFfmbiAorjzDIdvLRd6
v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:8050860.spf04.hubspotemail.net include:mktomail.com include:spf_c.oraclecloud.com -all
postman-domain-verification=dc3e890ca92455e54d07dcec9ea8404fc401b0a5a900dfb759062cd1dc68b28f7bc7db58254e4936ff8a9303f38cb9719e1af16757b09e0067c635510c90cde8
parsec-domain-verification=td_30Hu4AtBG9pDT9HTJCFK42bxN3q
autodesk-domain-verification=HucZBMSc_T52XRJSn15D
uber-domain-verification=77dfb7a6-1534-4c1b-a4e2-ba173fa8e9a3
calendly-site-verification=fBZScJDPHrHKIWIb9dKdryZqPPcCkxGISR8z5xSdX
atlassian-domain-verification=xdHUKPdNqeX/XU/VMyGIRWfzqvhwWmcHR1DhX2J3JllvjIY3A0Aw9Ctst0DXGIgt
apple-domain-verification=EgaXvYuVUgRwJTk3
mgverify=22d53df776e7e9198e72a000c4056f5ba1624b8f2a50e3d0f4925fcea15bb5d4
onetrust-domain-verification=6bfaeb2a9cdf438bad3b7b30e745f3ed
dtm-domain-verification=yaoiU11N90j1RKR3IObEMhQO8WHP8K4zTGmCYlUIr6k
twilio-domain-verification=c7745eae53aa58c5874d7a8508c510bc
ms-domain-verification=a14381d7-1e61-4cbf-97fa-4ac14336f0cf
canva-site-verification=3pgWM7c4EwmBo5rsy9b2Mg
hiAwXiKX20HcM9FtFK90WRyUFLSV1w
TAILSCALE-FAWYbK3UOL8Tf83rkJoc
google-site-verification=9sG4lDm5hmXEmnwpVGkId_ftzq-b84TYi0rwy9J-f9s
smartsheet-site-validation=b4J2lcr0i94a3_8qW2jIQxWjyqlGUmF1
docker-verification=e315e0c2-f866-4bec-ac0c-844fa287bbec
hibp-verify=dweb_bngtm5m5asvzv8o0xxyy9pxb
linear-domain-verification=83vxugur897f
airalo-domain-verification=xFzIMCLQ9JTlUFK
onetrust-domain-verification=7acf44f596f84700bc82bfaaeb9b388c
figma-domain-verification=274542735efe890a700405d9916de07a971b531a0d1595c237b09d68770febf4-1762810003
MS=ms50231473
google-site-verification=dU3pms6hgznfQnTCxkcq6P4jGjd8LMra0v429l4oElA
box-domain-verification=e2ecedffb7ea6f02e5f7a4afdbb83e2892f81db3acd85ff600633ad76096d459
miro-verification=0ee819554f4ff63f853affdf30d1cf76a15c6846
mongodb-site-verification=9cei4YAQ08Y8uafD0DLW2sgyYqTNDtco
jamf-site-verification=2ysWIpJrXkO40kW1SNc8Qg
tukj3psjdk
atlassian-domain-verification=Q2BUDjXbr3zZaNROQ1MyCjvItM31fbzhL/GR5YEn96BAAyQzrQfkxaxxWC2qj/s5
openai-domain-verification=dv-un30neQJyISDPkxgKgArFtEc
ZOOM_verify_Ji3VecODDwjBgU1GccqGAC
central-10085
wrike-verification=NjMwNjgwMjo0NmU2YjQ1NjgzNGJkN2M3MmYwNWUyMTNhOWUwOGY0OTQxYjBlNWJmZTEwYjYzOWU5MDNlMDlkYzAxNGZlZDRh
google-site-verification=3uGPpoo5B2gXoFNwT4pfAJwH-1gjVj-fLqVSE6rCXGk
uber-domain-verification=faf07776-4ec9-4fd0-9ac5-2a6f8c514318
dropbox-domain-verification=mra9n6toqbqj
google-site-verification=BDCE3pqO3BG5T5jWaEmQl10f5gqe3GAXgjyV0pmA5Jo
hubspot-developer-verification=NDFmMGNmMTYtZWYxNS00YTNlLWFkM2ItMjEwYzhmYTk0NTNi
autodesk-domain-verification=C3oU6DmT-SfRlU0htRMR
pylon-domain-verification-na3cfk=bYVknYT5uGxjut616RQY8fCHj
airtable-verification=dea7eaaa4d90e623ec30a9b2fa12ca5f
stripe-verification=b1d42b65d1782470604a6dbb360e9dfe8bd7426974e5110605e86b22d945288d
whimsical=a3593eda7e8523a75b01fd953cac04549faefe0c
CAA{'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'}
{'type': 'CAA', 'issue': 'amazon.com', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com; cansignhttpexchanges=yes'}
{'type': 'CAA', 'issue': 'digicert.com; cansignhttpexchanges=yes', 'critical': 0}
{'type': 'CAA', 'issue': 'sectigo.com', 'critical': 0}
{'type': 'CAA', 'issue': 'pki.goog; cansignhttpexchanges=yes', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'pki.goog; cansignhttpexchanges=yes'}
{'type': 'CAA', 'critical': 0, 'issuewild': 'sectigo.com'}
{'type': 'CAA', 'issue': 'godaddy.com', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'amazon.com'}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered2007-01-19
expires2029-01-19
last changed2024-10-17
ownerREDACTED FOR PRIVACY
nameserversns1-02.azure-dns.com
ns2-02.azure-dns.net
ns3-02.azure-dns.org
ns4-02.azure-dns.info
statusclient delete prohibited
client transfer prohibited
client update prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 2007-01-19expires 2029-01-19
HTTPS certificate50 days left
validyes
issuerGoogle Trust Services
coversopenai.com, *.openai.com
protocolTLSv1.3
issued 2026-09-16expires 2026-12-15
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → openai.com
Email authenticationexcellent
SPFpass v=spf1 include:_spf.google.com include:spf.protection.outlook.com include:8050860.spf04.hubspotemail.net include:mktomail.com include:spf_c.oraclecloud.com -all
DMARCpass policy reject
DKIMfound: google, selector1, s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 180/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop104.18.33.45Barracuda104.18.33.45UCEPROTECT Level 1104.18.33.45SpamCop172.64.154.211Barracuda172.64.154.211UCEPROTECT Level 1172.64.154.211

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=openai.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=openai.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on openai.com. Reference: /llms.txt.

Watch openai.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days