HOW.IS
?

How is debian.org?

Looks fine risk 0/100

Registered 28 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 178 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How debian.org looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
178 ms · ends at www.debian.org
HTTPS
77 d
left on a Let's Encrypt certificate
Age
28 years
registered 1999-03-10
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records6 record types
A151.101.66.132
151.101.130.132
151.101.2.132
151.101.194.132
AAAA2a04:4e42::644
2a04:4e42:200::644
2a04:4e42:400::644
2a04:4e42:600::644
MX0 mailly.debian.org
0 muffat.debian.org
0 mitropoulos.debian.org
NSnsp.dnsnode.net
dns4.easydns.info
sec1.rcode0.net
sec2.rcode0.net
TXTgoogle-site-verification=3u3n3jrPTlPrumIxQAl4r0utY6hrkj1_DSvdxjiTSP8
v=spf1 include:_spf.debian.org ~all
google-site-verification=ZvQZs5Pg8s0z1QdrC74DIZ1J4dPTNcQa8t6apDWXEyc
CAA{'type': 'CAA', 'critical': 128, 'issuewild': ';'}
{'type': 'CAA', 'iodef': 'mailto:dsa@debian.org', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org;validationmethods=dns-01;accounturi=https://acme-v02.api.letsencrypt.org/acme/acct/346607', 'critical': 128}
RegistrationGandi SAS
registrarGandi SAS
registered1999-03-10
expires2027-03-10
last changed2026-08-12
ownerSoftware in the Public Interest, Inc. - Debian Project
nameserversdns4.easydns.info
nsp.dnsnode.net
sec1.rcode0.net
sec2.rcode0.net
statusclient transfer prohibited
registered 1999-03-10expires 2027-03-10
HTTPS certificate77 days left
validyes
issuerLet's Encrypt
coversdebian.org, www-fastly.debian.org
protocolTLSv1.3
issued 2026-10-14expires 2027-01-12
DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → org → debian.org
Email authenticationfair
SPFpass v=spf1 include:_spf.debian.org ~all
DMARCwarning policy none
DKIMnone of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 173/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
38/45missing: DMARC Record, DKIM Presence
Advanced Security
20/25missing: SOA Record Configuration
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop151.101.194.132Barracuda151.101.194.132UCEPROTECT Level 1151.101.194.132SpamCop151.101.130.132Barracuda151.101.130.132UCEPROTECT Level 1151.101.130.132SpamCop151.101.2.132Barracuda151.101.2.132UCEPROTECT Level 1151.101.2.132SpamCop151.101.66.132Barracuda151.101.66.132UCEPROTECT Level 1151.101.66.132

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=debian.org" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=debian.org"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on debian.org. Reference: /llms.txt.

Watch debian.org. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days