HOW.IS
?

How is wordpress.org?

Be careful risk 40/100

Registered 24 years ago, listed on 1 blocklist, valid HTTPS, the site answered 200 in 30 ms.

Why

02050100
finecarefulhigh risk
  • +40Listed on 1 spam/abuse blocklist(s).

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How wordpress.org looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
30 ms
HTTPS
57 d
left on a Let's Encrypt certificate
Age
24 years
registered 2003-03-28
Blocklists
1
listings across 5 lists

Everything we looked at

DNS records6 record types
A66.6.42.252
AAAA2620:109:b00a::4206:2afc
MX10 smtp2-dca.wordpress.org
10 smtp1-dca.wordpress.org
NSns1.wordpress.org
ns2.wordpress.org
ns3.wordpress.org
ns4.wordpress.org
TXTgoogle-site-verification=UL0sGJ1dZbCT4J7pGrLW3hqM_I1LJ8pUi2WBEI_98kI
v=spf1 ip4:66.6.42.0/24 ip4:66.155.40.0/24 include:helpscoutemail.com -all
google-site-verification=t8FjG1vzC4OFZJ8qL4SkR8xxtLyKldXKbswyeemQS5w
CAA{'type': 'CAA', 'iodef': 'mailto:caa@wordpress.org', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org;validationmethods=dns-01;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/53691143', 'critical': 0}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered2003-03-28
expires2035-03-28
last changed2026-08-12
ownerREDACTED FOR PRIVACY
nameserversns1.wordpress.org
ns2.wordpress.org
ns3.wordpress.org
ns4.wordpress.org
statusclient delete prohibited
client transfer prohibited
client update prohibited
registered 2003-03-28expires 2035-03-28
HTTPS certificate57 days left
validyes
issuerLet's Encrypt
covers*.wordpress.org, wordpress.org
protocolTLSv1.3
issued 2026-09-23expires 2026-12-22
DNSSECinsecure

Domain is not signed with DNSSEC

. → org → wordpress.org
Email authenticationexcellent
SPFpass v=spf1 ip4:66.6.42.0/24 ip4:66.155.40.0/24 include:helpscoutemail.com -all
DMARCpass policy reject
DKIMfound: s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 165/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
45/45missing: DKIM Presence
Advanced Security
25/25
Domain Reputation
40/50missing: IP Blacklist Status
Threat Detection
45/45missing: Domain Age Check
Blocklists1 listing · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop66.6.42.252Barracuda66.6.42.252UCEPROTECT Level 166.6.42.252

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=wordpress.org" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=wordpress.org"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on wordpress.org. Reference: /llms.txt.

Watch wordpress.org. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days