HOW.IS
?

How is railway.app?

Looks fine risk 0/100

Registered 7 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 106 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How railway.app looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
106 ms · ends at railway.com
HTTPS
85 d
left on a Google Trust Services certificate
Age
7 years
registered 2019-08-01
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records6 record types
A104.18.10.246
104.18.11.246
AAAA2606:4700::6812:af6
2606:4700::6812:bf6
MX1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
NSblue.foundationdns.com
blue.foundationdns.net
blue.foundationdns.org
TXTTAILSCALE-k5Va9LBdoRG7KLKkDn1H
_e0snyquo4wfxwjjpki8o3t5ucz608h2
_zknl60hca5wtfjwl90ccaust9qbg6ok
apple-domain-verification=EnFQxsorXIy_9UH3UUInyoSk26GKN7Ae8HZRTSP6dmQ
docusign=4e0c6c3a-df4d-49d4-9fdb-6e941525ce91
google-site-verification=GwiJilmlcOrmdKSBWnSSSjrpu6TwaBvVtiPrt3LJbgQ
google-site-verification=Pzjmuu0er9pkGmtwWXEozcx8uKxr3iZ5_TglhsFN4v4
google-site-verification=g1QzWkzwU_n19TbxNo9bFcMSwPMXlgx9uLeQd9a8iFM
google-site-verification=hKpwmBsy17PjaHzW9M0rwGeisKHfeyeaBfoJJ_37kYM
google-site-verification=wUylFjrR3ySiER5cJl44WIF-IhvPFwdeTRuCp17o3bM
postman-domain-verification=e57c60e0ffa2956a857c81b073b7caba99c03e96e66dd1f2016437f31428fcde678febccf125795a009dcf4d2a201d78f164428b1f93bb9deb0a9da3a811e194
v=spf1 include:_spf.google.com ~all
CAA{'type': 'CAA', 'issue': 'comodoca.com', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com; cansignhttpexchanges=yes', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'issue': 'pki.goog; cansignhttpexchanges=yes', 'critical': 0}
{'type': 'CAA', 'issue': 'ssl.com', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'certainly.com'}
{'type': 'CAA', 'critical': 0, 'issuewild': 'comodoca.com'}
{'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com; cansignhttpexchanges=yes'}
{'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'}
{'type': 'CAA', 'critical': 0, 'issuewild': 'pki.goog; cansignhttpexchanges=yes'}
{'type': 'CAA', 'critical': 0, 'issuewild': 'ssl.com'}
RegistrationNamecheap Inc.
registrarNamecheap Inc.
registered2019-08-01
expires2028-08-01
last changed2025-08-15
ownerPrivacy service provided by WITHHELD FOR PRIVACY LLC
nameserversblue.foundationdns.com
blue.foundationdns.net
blue.foundationdns.org
statusactive
registered 2019-08-01expires 2028-08-01
HTTPS certificate85 days left
validyes
issuerGoogle Trust Services
coversrailway.app, *.railway.app
protocolTLSv1.3
issued 2026-10-29expires 2027-01-27
DNSSECinsecure

Domain is not signed with DNSSEC

. → app → railway.app
Email authenticationexcellent
SPFpass v=spf1 include:_spf.google.com ~all
DMARCpass policy reject
DKIMfound: google, s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 185/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
25/25
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop104.18.11.246Barracuda104.18.11.246UCEPROTECT Level 1104.18.11.246SpamCop104.18.10.246Barracuda104.18.10.246UCEPROTECT Level 1104.18.10.246

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=railway.app" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=railway.app"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on railway.app. Reference: /llms.txt.

IPv6. IPv6 readiness grade for railway.app Does railway.app work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch railway.app. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days