HOW.IS
?

How is shopify.com?

Looks fine risk 0/100

Registered 22 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 99 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How shopify.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
99 ms · ends at www.shopify.com
HTTPS
72 d
left on a Google Trust Services certificate
Age
22 years
registered 2005-03-11
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records4 record types
A23.227.38.33
MX5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com
10 alt4.aspmx.l.google.com
1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
NSgold.foundationdns.org
gold.foundationdns.net
gold.foundationdns.com
TXTklaviyo-site-verification=XxDdwy
_globalsign-domain-verification=_PJNYsq_1XyZleC1yx45rb_EUgbgkaJU36yk3CK0tk
openai-domain-verification=dv-2etxemuOx7cXQDQ5EjEWGZ9A
dtm-domain-verification=LhGwRr1DLWJoF6bVodh035n_BRj4Xu8PaEZ6bvvgd2Y
klaviyo-site-verification=VrspSg
klaviyo-site-verification=UfTdFX
bitrise-verification=990e159e8448fcb6-hCIxnrabFeH9
klaviyo-site-verification=VbLhyy
klaviyo-site-verification=YA4hNy
google-site-verification=knwYi_vDES4v7XUl8OOtP4gu4qhwAzIBbeB2ou2jx8Y
v=spf1 include:_spf.google.com include:mail.zendesk.com include:sendgrid.net ~all
teamviewer-sso-verification=85d99b4ff4b64f03a469d0c42c1eee61
rfs0f736s88q7ml97jw9qhg1yy2wmdy5
google-site-verification=96L28-MtSBLeQmyYR04q9iKI_Ib5qZd0YzVL8s1_gD0
klaviyo-site-verification=RcWeYn
google-site-verification=0nU18bxQue6doDAWZDptfd66kTIqHqW00fDhfJSd9es
yahoo-verification-key=9t6XYs7YEajKycpYmHz742ZV/lm84njkfUfGUldOtZM=
klaviyo-site-verification=SA72ug
globalsign-domain-verification=Cpw4zOAIT5WSnINjnI4gafPgxsCJlEF4Ac_70Xm93I
globalsign-domain-verification=lfM-pzwumuFWKV-wNEGq7a3KtsmRLJKsDxZzQaMjkw
zapier-domain-verification-challenge=506c545d-443f-4439-8d84-64648211b1f1
0lc931fl5ld2dpl15vx2flfkdwyvrrzx
amazonses:CxAO0EM1odef6TrFP0hDQh/2R7RoZYy8YlHYktk2Frk=
twilio-domain-verification=ebc01f01cee0f1aea3f4c069b8865de9
klaviyo-site-verification=UBeZ6P
protonmail-verification=c7bd7e61072d9855cfcab2f08804404f639439f9
qqmail-site-verification=bc0dd9aa889c6a66d9a58b31e496873cc7ae214ca8f
apple-domain-verification=eMDCoIZdcJThX3yQ
drift-domain-verification=9b23e1f43b57171c988b4510e75a686bda241639096f7eaabe8ff3d72ac63476
liveramp-site-verification=N48gDNFN3IB2NKIf75Fl46_sUzjxAbY3c1mfWs5pIKM
mailru-verification: a6784d11ca5a5f7b
rzp-site-verification=0c152e27933f70c5c7df025be3319f65
linear-domain-verification=3xuktyudsdny
klaviyo-site-verification=SuEeFy
mongodb-site-verification=vBP464dSOK9bgg6FWBthUMqVjYfqnjuY
klaviyo-site-verification=Y2Hvrx
docusign=de9614db-a0fa-4060-a1fa-2c444429ed9a
google-site-verification=Vm4475oXq82Dl_WCtZcmlaW3xrpB-6fyQXboHBjzzPY
MS=ms27001972
lucidlink-verification=7VB3ACRNY28GWP54ZC3YXN7QWR
ca3-fc9272b0aba34ba6991c0a62bc1998a0
ca3-86f15a314f3342baac2abe7a8849163c
google-site-verification=a4GkGdS7vBnkI284VSCo4bfYDNg-8OcEyjz8PR8ZhDM
facebook-domain-verification=u17rffysxyek688vqh4s02307suaza
google-site-verification=vEpSvWK6hOKDBrCrJ4uUeCliFPV0nyP9m_UCOEjJv1Q
openai-domain-verification=dv-3UNPEg4DuUI5Ace0uw1hzLq3
stripe-verification=61e8fb112f5e7ac2708127ea93fd0369d6a4f768bd498fd0d928c206a6240bd7
00078847
atlassian-domain-verification=aakXh8UjEwy75X6ck4l8jTIJDWHQ9CIunnUsE00mRgxM8IUzaJGlIt8zIINLFALR
openai-domain-verification=dv-SSeJm7iAiW11oexpj9ZCqdil
autodesk-domain-verification=e9Nbi4FUDsS7clWU8iNj
adobe-idp-site-verification=45576d365ff5492a15bc403c11382aad83403810324300fd62c5f196ce9e9063
_globalsign-domain-verification=1x11a1Wg3i08rScgK7aAMUJm_fdzKxH4whkWxr1bbg
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered2005-03-11
expires2027-03-11
last changed2025-09-02
ownerREDACTED FOR PRIVACY
nameserversgold.foundationdns.com
gold.foundationdns.net
gold.foundationdns.org
statusclient delete prohibited
client transfer prohibited
client update prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 2005-03-11expires 2027-03-11
HTTPS certificate72 days left
validyes
issuerGoogle Trust Services
coversshopify.com, *.shopify.com
protocolTLSv1.3
issued 2026-10-08expires 2027-01-06
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → shopify.com
Email authenticationexcellent
SPFpass v=spf1 include:_spf.google.com include:mail.zendesk.com include:sendgrid.net ~all
DMARCpass policy reject
DKIMfound: google, mail, resend

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 162/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
47/50missing: Typosquatting Check
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop23.227.38.33Barracuda23.227.38.33UCEPROTECT Level 123.227.38.33

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=shopify.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=shopify.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on shopify.com. Reference: /llms.txt.

Watch shopify.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days