HOW.IS
?

How is leroymerlin.es?

Not sure yet risk 10/100

On no blocklists we checked, valid HTTPS, the site answered 403 in 125 ms.

Why

02050100
finecarefulhigh risk
  • +10Could not read the domain's registration record.
  • ·Could not check registration; retry before trusting this domain.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How leroymerlin.es looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
125 ms
HTTPS
140 d
left on a GlobalSign nv-sa certificate
Age
?
creation date not reported
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records4 record types
A151.101.2.132
MX10 mxb-004bb303.gslb.pphosted.com
10 mxa-004bb303.gslb.pphosted.com
NSns-cloud-c2.googledomains.com
ns-cloud-c4.googledomains.com
ns-cloud-c3.googledomains.com
ns-cloud-c1.googledomains.com
nsb.perf1.com
nsa.perf1.fr
nsc.perf1.com
TXTztq4lcmjg733m9qbcydcg4rpg5l17nj5
globalsign-domain-verification=50422BD48C1ECC3A406DA0FC41A05BBC
globalsign-domain-verification=12f0d12f0a65261d560a4ce2ac0fd63d
google-site-verification=BdgVWDTMXvJ_AQO9hiuaU6ONuUT1FTEFVPBfe7USmLs
brevo-code:ca6c06e9ed0455ba7580944b1ce14711
_f7x93c9c1p23nlusaypxbrgwwyoejq1
81k40mxpv8sff4nptzx21s58tfnxgw6q
MS=ms62522461
google-site-verification=cifxtgqjQ7q9BAV7nz0Thr3524A4ENZsemq23MhXxV4
globalsign-domain-verification=628f1ec9599d494d7f2a54c9beefe172
globalsign-domain-verification=25E0065FDBC0CE56DFA4658033BCE99C
google-site-verification=tYuPuwKFNYAPbJfNM_GjS4wydKsvjF2KeCkkeOxRSJc
onetrust-domain-verification=542f32a334724b02a207a6094fbaf4a4
google-site-verification=mjIyp3zIDq7LtNM59c-fCPi8Jhg4PhkfsVFTz6ubTzY
globalsign-domain-verification=78A926D9E37ECFEC99A552478810414C
_3jolpjq5yth3khneswfnhdzyyn34fra
msfpkey=wu723hwjqvyg1g4led3vdqz6
google-site-verification=GwBW0PwJ2I3KGuEQx9uX02aHxZJKU5hRDWlxTQdafwE
workplace-domain-verification=ee57205ff8254396a583702bd13cfff3
MS=ms32073589
facebook-domain-verification=e8uys5gwjgbczfflcapmvs3np3dpy2
datadome-domain-verify=c9qHDa3fzqUskyIruQQj9SxiBtvHOkGg
_globalsign-domain-verification=2bl7UyNf4hTGV2Pvt2DvHWSrSEeFGlnOifyQLgBcID
fastly-domain-delegation-f56k9461yu0j3ow9-336583-20210119
fhxsjkltqtn9d2l77mmphp4jl3ks0z1b
8bbhp55kj433xykgbw7v81bs7g4cgtmy
mk-org-sso-4d2de498-973c-44f4-8fd6-4c5fbd2f8ae6
globalsign-domain-verification=5c0363952889733b1d63e81219847a63
cg0vhlrywk8df9b53wsckhghr61gwkg8
_globalsign-domain-verification=2wRqY6IrIINLY7B8Qcp-qur9HsiRTO04g4gwsMmFy3
miro-verification=135397bcb353186d419eb74fffc2b6adf6a5a62f
b296ad28b25254b1416638faef388b5e
MS=ms18436064
globalsign-domain-verification=B0A8C0D83A8ECB28CA1BBF9EFA635974
v=spf1 include:_spf.google.com include:spf_c.oraclecloud.com ip4:153.92.246.240/32 ip4:178.79.168.79/32 ip4:34.91.112.72/32 ip4:85.158.120.108/32 ip4:85.158.120.41/32 include:r1122080.benchclient.com include:spf-004bb303.pphosted.com ~all
google-site-verification=sYq-5__dGWSbPjpPuv7lmpXdayfo4T9N9z7zFCK0k9o
google-site-verification=dV7hNBMEDPY66UDUtOo5B4KBW2i5gdlbwFjvaWQrQ8o
tmes=3a3081a280f57f748c31b431119487df
MS=ms72135201
adobe-idp-site-verification=cc88d81147e75091a30a77d1d30d11039df985233af107344402ce50cd3e6790
apple-domain-verification=EFPGqHwSXbR2W0FL
ethiack-verification=7f41ab30092b0926e07e643d9704628fb542a0b7bd8147b888ddc8775b2383e5624c274f0c5ad48db55456b277e7da783d54fbc9bab2f7c379ecb3730ba63665
msfpkey=5vqxd16pejevzw2mc31c0owep
Dynatrace-site-verification=e49b3727-3c65-4465-b87c-4c529414c1bf__hncd6agbqhphtp7ukp2im2aeob
atlassian-domain-verification=TyaKvAX0UU8BlN1JKOirjNvpd7WXTpDQ6dGjItKHSqpsfaHAFsaQyazTgaCCvYZH
google-site-verification=g-bf3q2wcX-RvE3MqXQmsG2GTQ8PBL4lpOoxhbNpgl4
ybnf5cdjs1w66mhkhgc0gdlm5w4cxbjc
google-site-verification=GwBW0PwJ2I3KGuEQx9uX02aHxZJKU5hRDWlxTQdafwE.
atlassian-domain-verification=QyOuzfNDro8hX8QBpdxuetS0NsV4vTpLwrmnbU5YGKkUlQKh23NipVlnpPPG0s1I
globalsign-domain-verification=640261E8A5FFBB6FA022258E19767BF8
_epb2hqgazhe9a2gj36o3xr2mol2t8vp
google-site-verification=0cjBmrUlRfTts5peIHW0eDL-SFeykIv5h5aZcvUm7XY
atlassian-domain-verification=PoDHQrN0HqK265qxk7VWow2hdQdfsxo8XSCOveBp6LYI4U8JYgbpin4dBrkIx+3X
Registrationregistrar not reported
HTTPS certificate140 days left
validyes
issuerGlobalSign nv-sa
coversleroymerlin.es
protocolTLSv1.3
issued 2026-09-01expires 2027-03-19
DNSSECinsecure

Domain is not signed with DNSSEC

. → es → leroymerlin.es
Email authenticationexcellent
SPFpass v=spf1 include:_spf.google.com include:spf_c.oraclecloud.com ip4:153.92.246.240/32 ip4:178.79.168.79/32 ip4:34.91.112.72/32 ip4:85.158.120.108/32 ip4:85.158.120.41/32 include:r1122080.benchclient.com include:spf-004bb303.pphosted.com ~all
DMARCpass policy reject
DKIMfound: google, k1, s1, s2, mail

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 165/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop151.101.66.132Barracuda151.101.66.132UCEPROTECT Level 1151.101.66.132

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=leroymerlin.es" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=leroymerlin.es"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on leroymerlin.es. Reference: /llms.txt.

Watch leroymerlin.es. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days