HOW.IS
?

How is figma.com?

Looks fine risk 0/100

Registered 28 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 448 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How figma.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
448 ms · ends at www.figma.com
HTTPS
98 d
left on a Amazon certificate
Age
28 years
registered 1999-04-10
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A18.160.41.84
18.160.41.127
18.160.41.10
18.160.41.23
MX1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
NSns-1239.awsdns-26.org
ns-1657.awsdns-15.co.uk
ns-326.awsdns-40.com
ns-912.awsdns-50.net
TXT1password-site-verification=LUTCLEML6JDMHACYUXWAJAOV74
MS=ms23440957
MS=ms46247837
ZOOM_verify_vCQSjij2TCG8TawaqXfiMQ
adobe-idp-site-verification=8761b40fa7a309149c45c025ecf2d2eea8fb4ecb489194cce3e2efede17c781e
anthropic-domain-verification-4rt01s=L6y4AArUwEXaF4KxpmWGKAKXI
apple-domain-verification=1IOgJXKcT9knvlrK
asv=ab4063da93d45ff3539b2aa55f7e8976
atlassian-domain-verification=oDxpYa6fakpgoavsUf0n1AppTm13MnKzy2d01eAF1xtr9jA58AKXqtjU68cCkFtJ
bzagy7hkzg
cloudflare_dashboard_sso=9b4d3b2aa5748ef37a36cc90e9b58d2e
cursor-domain-verification-cvxp0h=ZYVC7GrCWXWBT8QrWSy3lnmoH
decagon-domain-verification-7ddqfp=9iCyjPaUwRA8hgPJua5GQcuzu
docusign=f6914af5-107a-4dfa-9793-e34a09f627f0
drift-domain-verification=1dcdd2801b99b27623f8d35030ff747cc591acd43ff39054869a54dd645ee0f8
dropbox-domain-verification=u0lztjyam5gd
figma-domain-verification=39be13b4a7b58a195f2f21f08e89010fd0e725ba1486664057a14988dac09557-1744290303
gather-domain-verification=084584f7-e59a-411f-9de8-433a580f05c2
gc-ai-domain-verification-af1e5b=9rPoWvCtOGSMSPWRfd3aNrrCz
google-site-verification=56-T7QBpEBj_eJAQEeNBiiDaKx2ylEDgBH0heMnXYkU
google-site-verification=A9O3cWeQxmKPiLAY-3s7WfVVpktBZCTxlIMU-eDz5Xs
google-site-verification=HaMs8wg-gbgQs2hFJuwU_ciNQK_YobMtJ5hizbD2BZQ
google-site-verification=RGkyUdk1Vglm9VUITzietBk9EpJLNF690eAPGADZAO8
google-site-verification=TUp2QwBcCejFVJKwyvEFK4yMNoQgQy5W0cIvuf66Mvs
google-site-verification=nB1tDMUrIaTGOd9dydIEsFV5x1dbAIouhQ0VutHrzlU
google-site-verification=rCFXO7IrgLapurW3LCjK3g10AK27Mu0dMoqL-0yW8wY
gradle-verification=QB4JUU586IL6KC3JVC3N0U5CNU10H
jamf-site-verification=FDySinqVSqqLh2C3KPBE1g
launchdarkly-domain-verification=6e258748-cb0a-4cc4-8089-3bc7cb20e878
linear-domain-verification=5wvb3h3uh9xv
mongodb-site-verification=sjpVUW9hVx0Fo7xU1OggxAwNUJIEbFXt
notion-domain-verification=geo971ObbpRnpoT5ZZ73OOXXFxDMUKS0v5PdfY2W20M
openai-domain-verification=dv-JGOTRvDBX9eV2Gk8RyduugId
postman-domain-verification=210f61d6c10b3191b254a11856eb960fbca3f02290a007849d4da5460f94b5b3ed2639e6774646700ed3d901432cba790f80b29f3d9d0e44614a53d72553ab0d
reachdesk-verification=blmLE2KVMUfpn0pQJUhEbNmcZhtV3APBlujc8UQoeKoT8ffJZ2AQIlMkQtjbZVA0
segment-site-verification=z2vlLwo9wlSRgpA1gJtKG7Cf7hXGU8ck
shopify-verification-code=W6bLm0nIDEt0NPjQ0RiAjioCy5vKJP
stripe-verification=60dc440f0fb540a3a80e4bb56aa675cd75849fd66b427bc012ea67e1f2f4d026
stripe-verification=E34C635DB81C09C3DB472AF2F6A6AA9C9BD6E615BB4987601C23914790BDE50C
twilio-domain-verification=6fde6edbfa6565710633cad4ef9e6f16
v=MCPv1; k=ed25519; p=xG82hehTGzTY42rScErytNIf7E+qNqxT7L6bvuTAU4A=
v=spf1 a include:_spf.google.com ip4:149.72.216.165 ip4:167.89.79.69 ip4:167.89.87.53 ip4:168.245.25.177 ip4:167.89.97.206 include:mail.zendesk.com include:mg-spf.greenhouse.io -all
wiz-domain-verification=cf7889d49aaa81b869ae25fdca5d98760b6e62f8b3dcdbd31428f6766df6df59
zapier-domain-verification-challenge=eb661d6f-ce23-49fa-a618-3f0f99e90ca8
CAA{'type': 'CAA', 'iodef': 'mailto:security@figma.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazonaws.com', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'issue': 'pki.goog; cansignhttpexchanges=yes', 'critical': 0}
RegistrationAmazon Registrar, Inc.
registrarAmazon Registrar, Inc.
registered1999-04-10
expires2027-04-10
last changed2026-05-15
ownerc/o whoisproxy.com
nameserversns-1239.awsdns-26.org
ns-1657.awsdns-15.co.uk
ns-326.awsdns-40.com
ns-912.awsdns-50.net
statusclient transfer prohibited
registered 1999-04-10expires 2027-04-10
HTTPS certificate98 days left
validyes
issuerAmazon
covers*.figma.com, figma.com
protocolTLSv1.3
issued 2026-07-21expires 2027-02-03
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → figma.com
Email authenticationexcellent
SPFpass v=spf1 a include:_spf.google.com ip4:149.72.216.165 ip4:167.89.79.69 ip4:167.89.87.53 ip4:168.245.25.177 ip4:167.89.97.206 include:mail.zendesk.com include:mg-spf.greenhouse.io -all
DMARCpass policy quarantine
DKIMfound: google, k1, s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 180/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop18.160.41.23Barracuda18.160.41.23UCEPROTECT Level 118.160.41.23SpamCop18.160.41.84Barracuda18.160.41.84UCEPROTECT Level 118.160.41.84SpamCop18.160.41.10Barracuda18.160.41.10UCEPROTECT Level 118.160.41.10SpamCop18.160.41.127Barracuda18.160.41.127UCEPROTECT Level 118.160.41.127

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=figma.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=figma.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on figma.com. Reference: /llms.txt.

Watch figma.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days