HOW.IS
?

How is washingtonpost.com?

Looks fine risk 0/100

Registered 31 years ago, on no blocklists we checked, valid HTTPS, the site did not answer (timed out).

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

Site
down
timed out
HTTPS
154 d
left on a Amazon certificate
Age
31 years
registered 1995-11-13
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A23.53.11.145
23.53.11.140
MX10 mxb-001a3c01.gslb.pphosted.com
10 mxa-001a3c01.gslb.pphosted.com
NSns-666.awsdns-19.net
ns-1840.awsdns-38.co.uk
sdns34.ultradns.biz
sdns34.ultradns.net
ns-1027.awsdns-00.org
sdns34.ultradns.org
ns-404.awsdns-50.com
sdns34.ultradns.com
TXTgoogle-site-verification=0R8HaEZPmx7XZBckUaQMssOU2e6Dspe3AOMsYxNrWq8
google-site-verification=6Bi3yUCN2g3lzvqapLfrbgkQxob5YCjmZidGa2qiM4g
google-site-verification=Xq6gcVYYZJtb2DQN6h2bo-hkrdmZpcdAKO8CeYl8290
mBd2513ESDgG6ZfaSrFYw4WaOC2b0M21Ehl8KWI3GmgTDpfYKwGuBum8ivsayoYLzVCetyXDieRUdW4qdQe+hw==
v=spf1 ip4:198.72.14.0/23 ip4:192.72.255.0/24 ip4:54.156.98.51 ip4:54.210.51.17 include:spf.protection.outlook.com include:madgexjb.com include:spf-001a3c01.pphosted.com include:amazonses.com -all
slack-domain-verification=YsnaUOhPU4Y6dCz5a3TqBIs4DxEXrVFbuKbGFRyS
_40ij1ve2dtneubti00ikilfe0zlr0kz
_globalsign-domain-verification=SQONiBgTxRVzPPtIHjei_IUGCiAa0KxoVWFw1QfVes
google-site-verification=qcYuOKvxobypPYmqzzrcw5KiwtpfLgdEEt-HwMfLwvo
_zj8o0fyk0qj8jy5pt1zr1543e97ew7c
rovag_verification_token=C2158E1BE1D041B78CC57ED72101FF6C
MS=ms58521745
_dhwsbe1t7yht6p4dsc72mcajq9aaum9
brave-ledger-verification=28c1597498b6eafc29aac1f3a42f31559dfe03a832058ead6f684a518f180d62
globalsign-domain-verification=8frsHcE2ag-0ccaaP5BTpPmUJC8ob8pdjDQchfAWzD
_rm8r4wsr378iet73p2f9j7oecnksay1
f3de1c77b72748ff92a68f88f4d93dfd
google-site-verification=xLI97dy4D9FGihhl23twW5HHhVSmpnr2nWComZhpQVo
_globalsign-domain-verification=R1bvWDvJUF1gpXlmc7Q3deFwpZciil5dpJR4t-a8XM
knowbe4-site-verification=e04590e121eee5fbc18ada6449219119
CAA{'type': 'CAA', 'issue': 'amazon.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazonaws.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazontrust.com', 'critical': 0}
{'type': 'CAA', 'issue': 'awstrust.com', 'critical': 0}
{'type': 'CAA', 'issue': 'pki.goog', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'issue': 'entrust.net', 'critical': 0}
RegistrationCSC Corporate Domains, Inc.
registrarCSC Corporate Domains, Inc.
registered1995-11-13
expires2027-11-12
last changed2026-10-01
ownerWP Company LLC
nameserversns-1027.awsdns-00.org
ns-1840.awsdns-38.co.uk
ns-404.awsdns-50.com
ns-666.awsdns-19.net
sdns34.ultradns.biz
sdns34.ultradns.com
sdns34.ultradns.net
sdns34.ultradns.org
statusclient transfer prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 1995-11-13expires 2027-11-12
HTTPS certificate154 days left
validyes
issuerAmazon
coverswashingtonpost.com
protocolTLSv1.3
issued 2026-09-13expires 2027-03-29
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → washingtonpost.com
Email authenticationgood
SPFpass v=spf1 ip4:198.72.14.0/23 ip4:192.72.255.0/24 ip4:54.156.98.51 ip4:54.210.51.17 include:spf.protection.outlook.com include:madgexjb.com include:spf-001a3c01.pphosted.com include:amazonses.com -all
DMARCpass policy reject
DKIMnone of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 180/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop23.40.18.54Barracuda23.40.18.54UCEPROTECT Level 123.40.18.54SpamCop23.40.18.68Barracuda23.40.18.68UCEPROTECT Level 123.40.18.68

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=washingtonpost.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=washingtonpost.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on washingtonpost.com. Reference: /llms.txt.

Watch washingtonpost.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days