How is onesignal.com?
Looks fine
risk 0/100
Registered 15 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 73 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
73 ms
HTTPS
71 d
left on a Google Trust Services certificate
Age
15 years
registered 2011-09-10
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records6 record types
| A | 104.17.111.223 104.16.160.145 |
|---|---|
| AAAA | 2606:4700::6810:a091 2606:4700::6811:6fdf |
| MX | 5 alt2.aspmx.l.google.com 10 alt3.aspmx.l.google.com 10 alt4.aspmx.l.google.com 5 alt1.aspmx.l.google.com 1 aspmx.l.google.com |
| NS | vin.ns.cloudflare.com gail.ns.cloudflare.com |
| TXT | google-site-verification=qitpgMqKs98-OLQzyM4zF8er917Lb9bZOqtTK3zyWm0 google-site-verification=pllKmUS3w9kTdUlvl4BhMMAhQR8NJpRHpE2zU46bUwU anthropic-domain-verification-k5t6pn=lsC27lGHqKpiTRFWnvJeLSXRY google-site-verification=Hq-wazHrRqgmvaPYhMGOQ5Wu9_F7q29KtO2_XZFBnao google-site-verification=yLfPcFr56Lg5lnFCxjVpl1FV4wCzCyfhLk0i3VBlgJE google-site-verification=ec5fD3h6tTmwxiZ3eWf33qoWz74gL4QRzWKA_BwGEwQ v=spf1 include:_spf.google.com include:_spf.salesforce.com include:mktomail.com include:_spf.sendergen.com ~all miro-verification=f1dfeb470361b0d434d09126d0befa76e3f33e79 |
| CAA | {'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com; cansignhttpexchanges=yes'} {'type': 'CAA', 'issue': 'pki.goog; cansignhttpexchanges=yes', 'critical': 0} {'type': 'CAA', 'issue': 'comodoca.com', 'critical': 0} {'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'ssl.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'comodoca.com'} {'type': 'CAA', 'issue': 'ssl.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'} {'type': 'CAA', 'critical': 0, 'issuewild': 'pki.goog; cansignhttpexchanges=yes'} {'type': 'CAA', 'issue': 'digicert.com; cansignhttpexchanges=yes', 'critical': 0} {'type': 'CAA', 'iodef': 'mailto:security@onesignal.com', 'critical': 0} |
RegistrationMarkMonitor Inc.
| registrar | MarkMonitor Inc. |
|---|---|
| registered | 2011-09-10 |
| expires | 2027-09-10 |
| last changed | 2023-08-02 |
| owner | REDACTED FOR PRIVACY |
| nameservers | gail.ns.cloudflare.com vin.ns.cloudflare.com |
| status | client delete prohibited client transfer prohibited client update prohibited server delete prohibited server transfer prohibited server update prohibited |
registered 2011-09-10expires 2027-09-10
HTTPS certificate71 days left
| valid | yes |
|---|---|
| issuer | Google Trust Services |
| covers | onesignal.com |
| protocol | TLSv1.3 |
issued 2026-10-09expires 2027-01-07
DNSSECsecure
Domain is properly signed — chain validated by an independent validating resolver
. → com → onesignal.com
Email authenticationexcellent
| SPF | pass v=spf1 include:_spf.google.com include:_spf.salesforce.com include:mktomail.com include:_spf.sendergen.com ~all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: google, s1, s2 |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 172/205
Basic Security10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security45/45missing: DKIM Presence
Advanced Security25/25
Domain Reputation47/50missing: Typosquatting Check
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop104.17.111.223Barracuda104.17.111.223UCEPROTECT Level 1104.17.111.223SpamCop104.16.160.145Barracuda104.16.160.145UCEPROTECT Level 1104.16.160.145
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=onesignal.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=onesignal.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on onesignal.com.
Reference: /llms.txt.
Watch onesignal.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days