How is herokuapp.com?

Be careful risk 20/100

Registered 16 years ago, on no blocklists we checked, no valid HTTPS certificate, the site did not answer (SSLError).

Why

02050100

finecarefulhigh risk

+20No valid HTTPS certificate.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

Site

down

SSLError

HTTPS

invalid

0059932CF27F0000:error:0A000458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name:ssl/record/rec_layer_s3.c:918:SSL alert number 112

Age

16 years

registered 2010-09-19

Blocklists

listings across 5 lists

Everything we looked at

DNS records2 record types

A	44.207.143.216 44.220.123.167 3.209.99.47
NS	dns2.p03.nsone.net ns01.herokudns.net dns3.p03.nsone.net ns04.herokudns.net ns03.herokudns.net ns02.herokudns.net dns1.p03.nsone.net dns4.p03.nsone.net

RegistrationMarkMonitor Inc.

registrar	MarkMonitor Inc.
registered	2010-09-19
expires	2027-09-19
last changed	2026-03-30
owner	Salesforce, Inc.
nameservers	dns1.p03.nsone.net dns2.p03.nsone.net dns3.p03.nsone.net dns4.p03.nsone.net ns01.herokudns.net ns02.herokudns.net ns03.herokudns.net ns04.herokudns.net
status	client delete prohibited client transfer prohibited client update prohibited server delete prohibited server transfer prohibited server update prohibited

registered 2010-09-19expires 2027-09-19

HTTPS certificatenot valid

valid	no
problem	0059932CF27F0000:error:0A000458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name:ssl/record/rec_layer_s3.c:918:SSL alert number 112

DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → com → herokuapp.com

Email authenticationpoor

SPF	none
DMARC	none
DKIM	none of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade C · 120/205

Basic Security

20/40missing: DNSSEC Enabled

Record Security

0/45missing: CAA Records, SPF Record, DMARC Record, DKIM Presence

Advanced Security

5/25missing: Mail Server Configuration, SOA Record Configuration, IPv6 Support

Domain Reputation

50/50

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 11 lookups

SURBL MultidomainURIBL MultidomainSpamCop44.207.143.216Barracuda44.207.143.216UCEPROTECT Level 144.207.143.216SpamCop3.209.99.47Barracuda3.209.99.47UCEPROTECT Level 13.209.99.47SpamCop44.220.123.167Barracuda44.220.123.167UCEPROTECT Level 144.220.123.167

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=herokuapp.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=herokuapp.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on herokuapp.com. Reference: /llms.txt.

Watch herokuapp.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days