HOW.IS
?

How is steampowered.com?

Looks fine risk 0/100

Registered 26 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 615 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How steampowered.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
615 ms · ends at store.steampowered.com
HTTPS
56 d
left on a Let's Encrypt certificate
Age
26 years
registered 2000-08-09
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A2.23.136.4
MX10 smtp.steampowered.com
NSa7-66.akam.net
a24-64.akam.net
a1-194.akam.net
a2-64.akam.net
a9-66.akam.net
a22-67.akam.net
TXTv=spf1 ip4:208.64.202.32/27 ip6:2602:801:f000:1234::/64 ip4:208.64.202.128/27 ip6:2602:801:f00c:1234::/64 ip4:208.64.202.192/27 ip6:2602:801:f00f:1234::/64 -all
google-site-verification=mi-0skdaq4tg4owg4lUJpeS-vWiiBsrQqnY9tVXb7es
CAA{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'issue': 'pki.goog', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'iodef': 'mailto:ssl-abuse@valvesoftware.com', 'critical': 0}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered2000-08-09
expires2028-08-09
last changed2024-09-05
ownerREDACTED FOR PRIVACY
nameserversa1-164.akam.net
a11-67.akam.net
a24-64.akam.net
a26-65.akam.net
a8-66.akam.net
a9-67.akam.net
statusclient delete prohibited
client transfer prohibited
client update prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 2000-08-09expires 2028-08-09
HTTPS certificate56 days left
validyes
issuerLet's Encrypt
coversaperturescience.com, community.steam-api.com, counter-strike.net, dayofdefeat.com, forums.l4d.com, half-life.com, half-life2.com, help.steampowered.com, l4d.com, learnwithportals.com, midnight-riders.com, orange.half-life2.com
protocolTLSv1.3
issued 2026-09-22expires 2026-12-21
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → steampowered.com
Email authenticationexcellent
SPFpass v=spf1 ip4:208.64.202.32/27 ip6:2602:801:f000:1234::/64 ip4:208.64.202.128/27 ip6:2602:801:f00c:1234::/64 ip4:208.64.202.192/27 ip6:2602:801:f00f:1234::/64 -all
DMARCpass policy reject
DKIMfound: smtp

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 165/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
45/45missing: DKIM Presence
Advanced Security
15/25missing: Mail Server Configuration, IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop2.23.136.4Barracuda2.23.136.4UCEPROTECT Level 12.23.136.4

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=steampowered.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=steampowered.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on steampowered.com. Reference: /llms.txt.

Watch steampowered.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days