How is hetzner.com?

Looks fine risk 0/100

Registered 30 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 896 ms.

Why

02050100

finecarefulhigh risk

·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.

Site

200

896 ms · ends at www.hetzner.com

HTTPS

90 d

left on a DigiCert Inc certificate

Age

30 years

registered 1997-01-15

Blocklists

listings across 4 lists; 1 did not answer

Everything we looked at

DNS records5 record types

A	213.133.116.44
AAAA	2a01:4f8:0:1::7:4
MX	10 mail.hetzner.company
NS	ns1.your-server.de ns.second-ns.com ns3.second-ns.de
TXT	google-site-verification=CktAgNGkIy148VXnokZAPdBYMhMiw7Pt6FFG45NIQ-U facebook-domain-verification=du0cv82s7ny3qhgirjq88zfvcua78x v=spf1 include:_spf.hetzner.com include:spf.nl2go.com include:spf.brevo.com -all linkedin-site-verification=23ce3d5e-daf5-4b10-ad53-a1a5a1db18ce google-site-verification=bs9BF2uJQ5Nl9WpphEo5O4Oa4raS4rYfDhXzLJLzsIA sendinblue-site-verification=7093926 MS=7AA78F64D03EE178DFC9F87724CFF22953069D8F anthropic-domain-verification-mvy7ds=aw88M02yU3AmHUnAN9I1F31Yc apple-domain-verification=6shhWr2k3zAMOyP4 Trustpilot-Verification-kqvVskCm6JQ9Vg1qAmahpBSJ5tvZORbriFyVIk4E 0b2d2q52nf7bhnbydc9v46761vcs6jbp google-site-verification=9PWiLjFrzSajjCH9NknvvBb9fgS1o33s7XDxwA9qxqM brevo-code:c71dcaaaae0e9bcbde40c44ded92ab67

RegistrationHetzner Online GmbH

registrar	Hetzner Online GmbH
registered	1997-01-15
expires	2027-01-14
last changed	2026-03-13
nameservers	ns.second-ns.com ns1.your-server.de ns3.second-ns.de
status	client delete prohibited client transfer prohibited

registered 1997-01-15expires 2027-01-14

HTTPS certificate90 days left

valid	yes
issuer	DigiCert Inc
covers	*.hetzner.com, hetzner.com
protocol	TLSv1.3

issued 2026-07-15expires 2027-01-29

DNSSECinsecure

Domain is not signed with DNSSEC

. → com → hetzner.com

Email authenticationexcellent

SPF	pass `v=spf1 include:_spf.hetzner.com include:spf.nl2go.com include:spf.brevo.com -all`
DMARC	pass policy reject
DKIM	found: mail

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 165/205

Basic Security

20/40missing: DNSSEC Enabled

Record Security

30/45missing: CAA Records, DKIM Presence

Advanced Security

20/25missing: Mail Server Configuration

Domain Reputation

50/50

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 5 lookups

SURBL MultidomainURIBL MultidomainSpamCop213.133.116.44Barracuda213.133.116.44UCEPROTECT Level 1213.133.116.44

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=hetzner.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=hetzner.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on hetzner.com. Reference: /llms.txt.

IPv6. Does hetzner.com work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch hetzner.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days