HOW.IS
?

How is costco.com?

Looks fine risk 0/100

Registered 30 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 69 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How costco.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
69 ms · ends at www.costco.com
HTTPS
14 d
left on a Certainly certificate
Age
30 years
registered 1997-03-17
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A151.101.131.52
151.101.67.52
151.101.195.52
151.101.3.52
MX10 mx0b-001f9d01.pphosted.com
10 mx0a-001f9d01.pphosted.com
NSa9-66.akam.net
a1-116.akam.net
a14-67.akam.net
a28-66.akam.net
a6-64.akam.net
a5-64.akam.net
TXTd4c2e4a3297fe25a71d030b67eb83bfc
onx=2d96b540-bcd6-4410-813c-d5e96ab635c5
VmwCafXLaizwh4cfQPdy
MS=ms45356090
Dynatrace-site-verification=85537782-cedf-4d0d-9b24-3126f2ae1dcb__87kk52lv2c0qrp2k60td8iugme
a3a34ae6-fccb-4452-9105-cb31f5348086
vmware-cloud-verification-7161df13-1d90-4cbe-a1a9-0f29fc3e9ffc
flexera-domain-verification-mddzccpcqcdbeuih
adobe-idp-site-verification=ae9e3f0f-2848-4000-aed4-e1c7e8031815
dtm-domain-verification=RvQ3bIbvQAeeMHbrXwHbtfcU-Z8WGxW6tBQQFfdpIvA
ciscocidomainverification=778c9d75e8b6fdb7dc3f095b677d08d21ececebe8462cb691c377eb0c061c825
postman-domain-verification=a5e9b1c7145c22a192ff089eb9c140d4a589b99d7763b87483c24c2deba6d7032578d3a1329849d9e52dd2ae59b3721b451d3fdb461b4514f4e8f5f6b8d696cd
docusign=4db9a87a-9dea-417f-bfaa-d45bf7c94291
atlassian-domain-verification=mOyfCnOmDOAo2wCWxZ1feSqlR3yeXX6nP2KotAWqkWWtO1NAJydXpiYNCYEhJUn8
v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
flexera-domain-verification-bazgmhadwejbbgdq
google-site-verification=3Kx9tc2_v5CgX3NuVqNwWFZRYanPPJCP3__8KbRxn5Q
onetrust-domain-verification=e62749d1cc3549bea14bacad4cd8215f
have-i-been-pwned-verification=7411effeb11c12300a4c027396b4cf0f
onx=efbf8ab1-7e83-4416-85a4-711586edb47c
google-site-verification=dffTnhrKhs3V5-UUHvEYJg-RNLJjBz27jCBqmF6sX_E
ms-domain-verification=2d5e7430-b403-4b17-a1df-4cb3eee9967b
docusign=3e51deb4-b2f9-46ef-b120-18f6955ebce1
google-site-verification=XGHXzaAnl-HmYsIW4QB-l4aaHMgJyBHqcT3Jc8SB2BY
onetrust-domain-verification=0cc4aa566b3f4d3d9f5f03bc7cfd73c4
d3958bd3-ebec-43fc-8b73-53355efdf2f6.costco.com
google-site-verification=_UMsl36liAGjRl5ldvmM5bK7YCzP_z19C522LsS_6Z4
facebook-domain-verification=46if6nzbzbffbhikh3uq8sye7ez5bg
intersight=c7f5c84fa7c1559a23ae37f0a45aa2806cc1b09291dfe94ffa5c775b65feb280
onx=58b94d97-109f-4db2-98cf-5a1c93395b4d
CAA{'type': 'CAA', 'issue': 'digicert.com', 'critical': 128}
{'type': 'CAA', 'issue': 'certainly.com', 'critical': 128}
RegistrationCSC Corporate Domains, Inc.
registrarCSC Corporate Domains, Inc.
registered1997-03-17
expires2027-03-18
last changed2026-03-15
ownerCostco Wholesale Membership, Inc.
nameserversa1-116.akam.net
a14-67.akam.net
a28-66.akam.net
a5-64.akam.net
a6-64.akam.net
a9-66.akam.net
statusclient transfer prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 1997-03-17expires 2027-03-18
HTTPS certificate14 days left
validyes
issuerCertainly
coverscostco.com, costco.pharmacy, costcobusinessprinting.com, costcogas.com, costcogas.net, costcogasstation.com, costcogasstation.net, costcopharmacy.com, costcowaterdelivery.com, costcowholesale.com, cpsia.costco.com, ks8userportal.com
protocolTLSv1.3
issued 2026-10-12expires 2026-11-11
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → costco.com
Email authenticationexcellent
SPFpass v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all
DMARCpass policy reject
DKIMfound: google, s1, s2, mx

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 170/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
45/45missing: DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop151.101.131.52Barracuda151.101.131.52UCEPROTECT Level 1151.101.131.52SpamCop151.101.195.52Barracuda151.101.195.52UCEPROTECT Level 1151.101.195.52SpamCop151.101.67.52Barracuda151.101.67.52UCEPROTECT Level 1151.101.67.52SpamCop151.101.3.52Barracuda151.101.3.52UCEPROTECT Level 1151.101.3.52

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=costco.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=costco.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on costco.com. Reference: /llms.txt.

Watch costco.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days