How is huggingface.co?
Not sure yet
risk 10/100
On no blocklists we checked, valid HTTPS, the site answered 200 in 42 ms.
Why
02050100
finecarefulhigh risk
- +10Could not read the domain's registration record.
- ·Could not check registration; retry before trusting this domain.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
42 ms
HTTPS
122 d
left on a Amazon certificate
Age
?
creation date not reported
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records5 record types
| A | 3.167.112.25 3.167.112.45 3.167.112.38 3.167.112.96 |
|---|---|
| AAAA | 2600:9000:27d1:e400:17:b174:6d00:93a1 2600:9000:27d1:5c00:17:b174:6d00:93a1 2600:9000:27d1:ac00:17:b174:6d00:93a1 2600:9000:27d1:c400:17:b174:6d00:93a1 2600:9000:27d1:9400:17:b174:6d00:93a1 2600:9000:27d1:7800:17:b174:6d00:93a1 2600:9000:27d1:5800:17:b174:6d00:93a1 2600:9000:27d1:2000:17:b174:6d00:93a1 |
| MX | 5 alt2.aspmx.l.google.com 10 alt4.aspmx.l.google.com 1 aspmx.l.google.com 10 alt3.aspmx.l.google.com 5 alt1.aspmx.l.google.com |
| NS | ns-137.awsdns-17.com ns-1955.awsdns-52.co.uk ns-1452.awsdns-53.org ns-919.awsdns-50.net |
| TXT | mongodb-site-verification=pJyVDE1qFtWfLWussktn17TxGmMiOSrO cursor-domain-verification-e2jjpz=VS6jJT0Yi3HOWOAjVnPRBRn4R amazonses:haWTX74o8Xzj4/OOGCiZvCKU2CreCZ9D+2OemeBCWW0= anthropic-domain-verification-be2qx2=5duhSVDfBdfL9zp9HMwMo5DeF google-site-verification=0xPvU1qdox33LAduAR6WZBcojgN2dTHbmD6V7xH86ao google-site-verification=ZlzPJH9K6WW65-qtY2MAVZedKyBrjS2hX6B6Y6mlvxQ v=MCPv1; k=ed25519; p=EWH4AejXSbTWok3hjfTSRcFXFG/Qe+oQffs4nM/Hl7k= v=spf1 include:spf.mailjet.com include:_spf.google.com include:amazonses.com include:mail.zendesk.com ~all plausible-sso-verification=71baae3e-8875-4d97-b492-3d0bcc09ab35 openai-domain-verification=dv-e4Lrj3WKW6Ij50099jy0UDHH stripe-verification=EB5A6D7C5DB936DB61416A17258106A0BE35C774B2E9532B040C5D5F6859CBF7 uber-domain-verification=a96220f2-0f5b-4858-b6ce-1525a1e5b3a5 apple-domain-verification=ZDO4wVjVjWMGBFP3 1|www.huggingface.co seatsurfing-verification=c972dd30-8319-4f60-b684-089c02e1e7bd miro-verification=ffff67f600b7fa1bc0e2cfeb85506a9854d04b3f amazon-business-verification=edce90d350ae97c05d07c252817db08ffe470096ef197b689abfe8e5c692031d hcp-domain-verification=b90e13b0828283c307c52de32fe6661bcd4da664d5486f0b552f4593ebb20505 MS=ms73710064 google-site-verification=lyRnnTlQ38GAC7D92RqswXMuRY6G0pRaPMyfKtNK5zw zapier-domain-verification-challenge=83bd16a2-804b-4046-8607-d0aed15cc172 |
Registrationregistrar not reported
HTTPS certificate122 days left
| valid | yes |
|---|---|
| issuer | Amazon |
| covers | huggingface.co, *.huggingface.co |
| protocol | TLSv1.3 |
issued 2026-08-14expires 2027-02-27
DNSSECsecure
Domain is properly signed — chain validated by an independent validating resolver
. → co → huggingface.co
Email authenticationgood
| SPF | pass v=spf1 include:spf.mailjet.com include:_spf.google.com include:amazonses.com include:mail.zendesk.com ~all |
|---|---|
| DMARC | warning policy none |
| DKIM | found: google |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 158/205
Basic Security20/40missing: DNSSEC Enabled
Record Security23/45missing: CAA Records, DMARC Record, DKIM Presence
Advanced Security20/25missing: SOA Record Configuration
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop3.167.112.96Barracuda3.167.112.96UCEPROTECT Level 13.167.112.96SpamCop3.167.112.25Barracuda3.167.112.25UCEPROTECT Level 13.167.112.25SpamCop3.167.112.45Barracuda3.167.112.45UCEPROTECT Level 13.167.112.45SpamCop3.167.112.38Barracuda3.167.112.38UCEPROTECT Level 13.167.112.38
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=huggingface.co" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=huggingface.co"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on huggingface.co.
Reference: /llms.txt.
Watch huggingface.co. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days