Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/mit
Generated: Sat, 05 Sep 2026 10:52:03 GMT
Target Website: mit.edu
Overall Trust Score: 91/100 (Trusted)
mit.edu
Trusted
Scanned: Sep 5, 10:52 AMTRUST SCORE
91
CONFIDENT
Low Risk
91/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
70/100
70/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
91/100 — trusted. Domain registration date unconfirmed, clean threat reputation, no impersonation patterns. Verdict driven by: no terms of service found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
Standard Trusted CA
Threat Status
CleanClean
No blacklists or malware
Domain Age
ActiveActive
Registrar: Verified Registry
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
23.204.33.15323.204.33.153
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
100 / 100100 / 100
Fast response time
Redirects
1 Hop1 Hop
Redirect chain analyzed
Top Priority RecommendationAction Needed
No terms of service found
Reputable sites usually publish a terms of service.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- Site responded with 200
- HTTPS is enforced
- Fast response (338ms)
- Served through Cloudflare
- 3 address record(s) resolved
- IPv6 (AAAA) available
- 8 authoritative nameservers
- HTTPS encryption active & verified
Warnings
- No terms of service found
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- Verified Registry
- Creation Date
- —
- Last Updated
- —
- Registry Expiry Date
- —
- WHOIS Privacy Protection
- Redacted for Privacy (Protected)
- Domain Status Codes
- active
ICANN Status Badges
active
Domain records active on registry
Registry returned active status with redacted public contact records.
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-OptionsMissing
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: X-Content-Type-Optionsmissing: Referrer Policymissing: Permissions Policy
All Response Headers (15)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
Missing X-Content-Type-Options
Blocks MIME-sniffing browser attacks.
-2
Missing Referrer Policy
Controls what referrer information is sent with requests.
-2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 23.204.33.153
- IPv6 Addresses (AAAA)
- 2600:1407:7800:586::255e, 2600:1407:7800:58b::255e
- Mail Servers (MX)
- mit-edu.mail.protection.outlook.com (Priority: 100)
- Authoritative Nameservers (NS)
- eur5.akam.net, asia1.akam.net, use2.akam.net, asia2.akam.net, ns1-37.akam.net, ns1-173.akam.net, use5.akam.net, usw2.akam.net
- TXT Records Found
- 37 TXT verification records
A Records (IPv4)
23.204.33.153
TXT Verification Records
v=spf1 include:_s00430413.autospf.email -all
e2ma-verification=piiib
e2ma-verification=xlabb
atlassian-domain-verification=3eRva0Gy/EjVyKEw46uExfEXpDGJfhwocwVCy5NTxcPpf89AqdK3Lkc2Ert/Mram
pardot_310211_*=a4e9728d1b90355b6240f4d7778cc4da11c10a20552ae99e6ed03d8e48c06583
e2ma-verification=xiiib
airtable-verification=46ae122907d40a1413b6a05898774435
include:4920340.spf07.hubspotemail.net
jamf-site-verification=Zb92YEBOKGMV1yFAEtYd1w
google-site-verification=pqf9o422iIeT7mzfZmQwkpLYH3VTlB05OC9c_OncFOg
airtable-manual-domain-verification=ce83c94e-0127-4fd3-9265-3b37a46a7b8a
E2MA-VERIFICATION=C8D4
openai-domain-verification=dv-pavuNIk1XG88x99BoqSFI0Zs
mgverify=2a07014ab707abf9b6f984210c05ef7a1fd905296aebe173776844c14db61c1e
mandrill_verify.28vVgPhRZLda1o_v90CPWg
1VNZ334aKc8FypCKDhIMOQBsKFd8gCgTFQuPlDwQfzPNxPCKonTOnhuFQ8+kE32E2TgkBiOp9EFab5nfVc+38g==
*fastly-domain-delegation-hnb9joooe7gojgqu4eth-00494769-2025-08-23
google-site-verification=b4-1loZHD1WzNmews_hsTTKL__gLblD6iKBFbA4j97c
airtable-verification=4283ac2aa983e97636807d478d6bf30c
E2MA-VERIFICATION=MONGB
atlassian-domain-verification=3Ex0JUvwojvbDLOJvNHnYUFEZCF+kwii0OjHbhDkymB97xpCOkkIFUoET2RQy15E
AIRTABLE-VERIFICATION=C8040E640F7DEAB69A01D68C91893E07
google-site-verification=qNAffaSjUkhb2JCBb1BQ2nXAkcNYLeLc7G6vjMRD1js
google-site-verification=6ethhhET4cfz7L1Dfve9bCOTAqMr6IU79Va6gb8HxlA
atlassian-domain-verification=maRNLIMivtdhvCr9JoVuLKHWRn7mZOY8072lyRNeyamz0NHc/s0b0m3R3yt1NKK3
e2ma-verification=uviib
6B22D05A50CCFD8AEDE263D10A43B5F2
ecgkc7fnflsm01hh6uqjr86h02
adobe-idp-site-verification=0817e32603f0dda03188b9f1f3bbaf4f754c5322926036af8890df7bf65cb90d
amazonses:asyYfDTQj+TCy9t5jFbakgwGbomDqXREEs3KdC0iMQE=
87EDC6C34B18248C3196DDDF99E346F0
anthropic-domain-verification-4zkzdh=QhN4rrjaqMvpem4OLpNCpsSJP
e2ma-verification=oiiib
stripe-verification=fe726543b783764b2ba9137f4e675faa0709416ac7a5d9f50e21248a706ad93d
bWl0ZWR1
E2MA-VERIFICATION=86JGB
E2MA-VERIFICATION=8AWBB
3 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
8 authoritative nameservers
+2
- Registrable Domain
- mit.edu
- Registrar Organization
- Verified Registry
- WHOIS Privacy Status
- Enabled (WHOIS Guard / Redacted)
- Registry Status Codes
- active
- Delegated Authoritative Nameservers
- eur5.akam.net, asia1.akam.net, use2.akam.net, asia2.akam.net, ns1-37.akam.net, ns1-173.akam.net, use5.akam.net, usw2.akam.net
- Registration Lifecycle
- —
Nameservers (NS)
eur5.akam.netasia1.akam.netuse2.akam.netasia2.akam.netns1-37.akam.netns1-173.akam.netuse5.akam.netusw2.akam.net
Domain records active on registry
Registry returned active status with redacted public contact records.
- SPF Record
- v=spf1 include:_s00430413.autospf.email -all
- DMARC Policy Mode
- Policy: NONE
- DMARC Raw Record
- v=DMARC1; p=none; rua=mailto:dmarcreports@mit.edu
- DKIM Selectors Detected
- google, selector2, s1, s2
Email Protection Summary: This domain has basic or missing DMARC enforcement, which may allow malicious senders to spoof emails under this name.
SPF record published
+5
DMARC published (none)
Policy is 'none' — monitoring only, no active protection.
+1
DKIM configured (google, selector2, s1, s2)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- mit
- Top-Level Domain (TLD)
- .edu (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
js
VueSvelte
analytics
Google AnalyticsGoogle Tag Manager
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- MIT - Massachusetts Institute of Technology
- Meta Description
- —
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1.0
- Generator Software
- —
5 technologies detected
Vue, Svelte, Google Analytics, Google Tag Manager, Cloudflare
Mobile viewport configured
+2
Missing meta description
-2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 338 ms
- Payload Body Size
- 47 KB
- Compression Status
- Uncompressed
- Cache Directives
- public, max-age=373, s-maxage=3600
Response is cache-friendly
public, max-age=373, s-maxage=3600
+2
AI Content Evaluation
91/100 — trusted. Domain registration date unconfirmed, clean threat reputation, no impersonation patterns. Verdict driven by: no terms of service found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 2,694 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 23.204.33.153
- HTTP Status Code
- 200 OK
- Final Landing Destination
- https://web.mit.edu/
- Redirect Hop Count
- 1 hop
Redirect Hop Chain
- 1.https://mit.edu/ → https://web.mit.edu/
Site responded with 200
Final URL: https://web.mit.edu/. Response time 338ms.
+8
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (338ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- Standard Trusted CA
- Subject Common Name (CN)
- mit.edu
- Validity Period
- 60 days remaining (Expires: 2026-11-04T10:52:07.371Z)
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- 1 certs recorded
Subject Alternative Names (Sample)
mit.edu
HTTPS encryption active & verified
Live TLS connection established successfully on port 443 with valid cipher suites.
+8
Key Legal & Transparency Pages
- Published Phone Numbers
- 126533127390327, 0 0 867.217 200, 2.255-9.458, 2.037-1.018, 4.365-1.528, 4.365-8.658
Privacy policy linked from home page
+6
No terms of service found
Reputable sites usually publish a terms of service.
-4
Contact page linked from home page
+5
About page linked from home page
+3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
3 social profile(s) linked
twitter, facebook, instagram
+3
Phone number published
+2
Physical address published
77 Massachusetts Avenue
+3
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- None in robots.txt
- Disallow Rules Count
- 10 rules
View Raw robots.txt
User-agent: * Disallow: /afs/ Disallow: /cgi-bin/ Disallow: /user/ Disallow: /org/ Disallow: /activity/ Disallow: /contrib/ Disallow: /dept/ Disallow: /software/ Disallow: /bin/ Disallow: */Public/*
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
38
This scan
Sources Checked
18
Live security feeds
Scan Duration
3.99s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk