How is brave.com?

Looks fine risk 0/100

Registered 31 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 39 ms.

Why

02050100

finecarefulhigh risk

·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.

Site

200

39 ms

HTTPS

131 d

left on a Amazon certificate

Age

31 years

registered 1995-09-18

Blocklists

listings across 5 lists

Everything we looked at

DNS records6 record types

A	3.167.56.104 3.167.56.82 3.167.56.108 3.167.56.114
AAAA	2600:9000:27c5:9800:6:d0d2:780:93a1 2600:9000:27c5:f000:6:d0d2:780:93a1 2600:9000:27c5:2600:6:d0d2:780:93a1 2600:9000:27c5:da00:6:d0d2:780:93a1 2600:9000:27c5:9c00:6:d0d2:780:93a1 2600:9000:27c5:a600:6:d0d2:780:93a1 2600:9000:27c5:4c00:6:d0d2:780:93a1 2600:9000:27c5:2800:6:d0d2:780:93a1
MX	5 alt2.aspmx.l.google.com 10 aspmx2.googlemail.com 1 aspmx.l.google.com 5 alt1.aspmx.l.google.com 10 aspmx3.googlemail.com
NS	chip.ns.cloudflare.com kim.ns.cloudflare.com
TXT	_globalsign-domain-verification=L_gCJjCp8BmJQV8Dw1zuHUrMXgEBInKkweJ0NqFGSE stripe-verification=abaf8277692b579a36980f8bce5c0e666d01940029ff29b49275347ad8dd9ccf jetbrains-domain-verification=cmhccblslkxaex2x98x6rfhr5 docusign=d29b5a86-240e-4695-bda6-40fac836d1ff MS=ms69010546 v=spf1 include:_spf.google.com include:mail.zendesk.com include:mg-spf.greenhouse.io include:sendgrid.net include:amazonses.com -all stripe-verification=847220A91D9946797AF5B23AF5E5816819D7635F929A648A642F6F719B684D4E hns-claim:aakdai3ypqcte6d7zzcpedduonetpg67lfap4fckaeaaaaaaaaaklzaororjdpl6qzexi75h7ofhv447lownw5btzuxvs4ibaaaaasi72t4a google-site-verification=ZwvN7sFdASQRA2TVqpPkgIsRY0nxP1AhNevNKduButY MS=787B3E2FFA50666A738CC3767FFAAAD7DE78D7E9 brave-ledger-verification=fea1b86c84e90d36b577216805e316e1a073678b1fda846a9b6b5c991fc99c6d _globalsign-domain-verification=T5-VK7xTMEy-qPcEnJL4pGgOKcJJ4dyplGYsa3tDRD google-site-verification=pUm3K397g4pZPb55WFKVAH4tD5Dk8VGN0228pOZMzE0 mongodb-site-verification=R4d5ZTaweerkuQdcFvHhIt4Lb7qnpno0 apple-domain-verification=5XuBJ6NV4KD8docJ _globalsign-domain-verification=HCquRZirWbyRekkdrNfZdytgWf8BuwrRiQbTsM9TFN SNAPCRAFT_IO_VERIFICATION=a6c419cd014cd335db14d30c0b0bffeb51648a8c1f006996aadb384625d7bcaa _globalsign-domain-verification=WGzMAqWI13UY476xZnkBgLT3F7tQHWObKP9h9vLm15
CAA	{'type': 'CAA', 'iodef': 'mailto:security@brave.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuemail': ';'} {'type': 'CAA', 'issue': 'digicert.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'amazon.com'} {'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0} {'type': 'CAA', 'issue': 'amazon.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'}

RegistrationNameCheap, Inc.

registrar	NameCheap, Inc.
registered	1995-09-18
expires	2029-09-17
last changed	2023-11-06
owner	Privacy service provided by WITHHELD FOR PRIVACY LLC
nameservers	chip.ns.cloudflare.com kim.ns.cloudflare.com
status	client transfer prohibited

registered 1995-09-18expires 2029-09-17

HTTPS certificate131 days left

valid	yes
issuer	Amazon
covers	brave.com, blog.brave.com, www.brave.com
protocol	TLSv1.3

issued 2026-08-21expires 2027-03-06

DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → com → brave.com

Email authenticationexcellent

SPF	pass `v=spf1 include:_spf.google.com include:mail.zendesk.com include:mg-spf.greenhouse.io include:sendgrid.net include:amazonses.com -all`
DMARC	pass policy reject
DKIM	found: google, s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 175/205

Basic Security

10/40missing: DNSSEC Enabled, Nameserver Diversity

Record Security

45/45missing: DKIM Presence

Advanced Security

25/25

Domain Reputation

50/50

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 14 lookups

SURBL MultidomainURIBL MultidomainSpamCop3.167.56.104Barracuda3.167.56.104UCEPROTECT Level 13.167.56.104SpamCop3.167.56.114Barracuda3.167.56.114UCEPROTECT Level 13.167.56.114SpamCop3.167.56.82Barracuda3.167.56.82UCEPROTECT Level 13.167.56.82SpamCop3.167.56.108Barracuda3.167.56.108UCEPROTECT Level 13.167.56.108

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=brave.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=brave.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on brave.com. Reference: /llms.txt.

Watch brave.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days