How is medium.com?
Looks fine
risk 0/100
Registered 28 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 43 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
43 ms
HTTPS
39 d
left on a Google Trust Services certificate
Age
28 years
registered 1998-05-27
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records6 record types
| A | 162.159.153.4 162.159.152.4 |
|---|---|
| AAAA | 2606:4700:7::a29f:9904 2606:4700:7::a29f:9804 |
| MX | 10 aspmx2.googlemail.com 1 aspmx.l.google.com 10 aspmx3.googlemail.com 5 alt2.aspmx.l.google.com 5 alt1.aspmx.l.google.com |
| NS | alina.ns.cloudflare.com kip.ns.cloudflare.com |
| TXT | 07ecf60c9da442a9b3bcce99190ff60a google-site-verification=TUaeSBwTARWW1ntR_TLK0FwD5WKnFCpB5gYVuXkBmlg linear-domain-verification=tyjcyfd4thj2 facebook-domain-verification=eqviiajbkkhum35vciytgngt69oan0 google-site-verification=jUulFqySbosf7Fvi1pvOm1KL3AeQ5L5s18CDIU30xek v=spf1 include:amazonses.com include:_spf.google.com include:mail.zendesk.com include:sendgrid.net include:spf.tipalti.com include:_spf.psm.knowbe4.com ~all yahoo-verification-key=nOxcdTfSy6txWr8ZAJ8EevOZHdrxuX4qFKljmgTLsu8= apple-domain-verification=Ls6JkesM8aOd8xyQ dropbox-domain-verification=d7wsnlvbz6l3 notion-domain-verification=FPUVTTLhldYnVqE4496kGbBhDpf54Y4O7eA8SxkbAHk google-site-verification=QuRrrbvTtvFC0uq2BLr_CcuuuDEiNGDJjI7XkPV3s60 cursor-domain-verification-54pwxn=8yHL5J3FELu0JwETv8iGeZt4A openai-domain-verification=dv-G8sPcKCsIq9tKkWTNFJZh3RE google-site-verification=qmNSvk4iAfYY_fZYv821myqWI4vaInKsGaBTkg4wNRw Domain Verification for Digicert (10/05/2022)y7ncgbyk39tw482zsbwcnfx0t775d85j google-site-verification=nlPBDLGxOufYa5DdXnQ8d28h5dJjwy0bSakZq-tSios anthropic-domain-verification-p32bnn=TlzaDtedEYyM5ccLdU8NsQIPP |
| CAA | {'type': 'CAA', 'issue': 'awstrust.com', 'critical': 0} {'type': 'CAA', 'issue': 'digicert.com', 'critical': 0} {'type': 'CAA', 'issue': 'amazontrust.com', 'critical': 0} {'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0} {'type': 'CAA', 'issue': 'amazon.com', 'critical': 0} {'type': 'CAA', 'issue': 'pki.goog', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'awstrust.com'} {'type': 'CAA', 'issue': 'amazonaws.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'pki.goog'} |
RegistrationAmazon Registrar, Inc.
| registrar | Amazon Registrar, Inc. |
|---|---|
| registered | 1998-05-27 |
| expires | 2027-05-26 |
| last changed | 2026-05-16 |
| owner | c/o whoisproxy.com |
| nameservers | alina.ns.cloudflare.com kip.ns.cloudflare.com |
| status | client transfer prohibited |
registered 1998-05-27expires 2027-05-26
HTTPS certificate39 days left
| valid | yes |
|---|---|
| issuer | Google Trust Services |
| covers | medium.com, *.medium.com |
| protocol | TLSv1.3 |
issued 2026-09-05expires 2026-12-04
DNSSECinsecure
Domain is not signed with DNSSEC
. → com → medium.com
Email authenticationexcellent
| SPF | pass v=spf1 include:amazonses.com include:_spf.google.com include:mail.zendesk.com include:sendgrid.net include:spf.tipalti.com include:_spf.psm.knowbe4.com ~all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: google, s1, s2, mx |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade A · 175/205
Basic Security10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security45/45missing: DKIM Presence
Advanced Security25/25
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop162.159.153.4Barracuda162.159.153.4UCEPROTECT Level 1162.159.153.4SpamCop162.159.152.4Barracuda162.159.152.4UCEPROTECT Level 1162.159.152.4
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=medium.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=medium.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on medium.com.
Reference: /llms.txt.
Watch medium.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days