HOW.IS
?

How is strava.com?

Looks fine risk 0/100

Registered 23 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 174 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How strava.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
174 ms · ends at www.strava.com
HTTPS
138 d
left on a GoDaddy.com certificate
Age
23 years
registered 2003-12-22
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records4 record types
A108.138.64.14
108.138.64.64
108.138.64.68
108.138.64.60
MX30 alt2.aspmx.l.google.com
50 aspmx3.googlemail.com
10 aspmx.l.google.com
40 aspmx2.googlemail.com
20 alt1.aspmx.l.google.com
NSns-145.awsdns-18.com
ns-1461.awsdns-54.org
ns-1806.awsdns-33.co.uk
ns-610.awsdns-12.net
TXTgoogle-site-verification=7V-jaWtdlKU59XzrF3bZjomZygEWkYS4B1du-Tn6WTk
cursor-domain-verification-xxvmxc=08C6fCgWX5w8WDgwWcYQaMI9E
linear-domain-verification=ec65brnx9z94
google-site-verification=b-brkKP8oTaok4WqJS4ip220QWuatmTIa9_9-4yP0Rg
work-accounts-domain-verification=nLwT1cx0x4uEv9vvCACvt1Lg4luy5O
docusign=76e529f9-f4ae-4745-b880-de1c9d1417f6
docker-verification=2e6711c6-5d4d-4dbf-802d-e9c0eafda287
loom-site-verification=b0f23be7d86c413d868b47f2d93ec03e
anthropic-domain-verification-stddgc=YcuPCewLcCRlX44Nt6YT7iWGa
adobe-idp-site-verification=9a5218c79f86c05d91cd0b2e9563f5c6e8cd5572bf65e7e7686f55a90cf1befc
v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
tiktok-developers-site-verification=TaDdWWlWycl7vyceILq930ykKqH5rE31
google-site-verification=KKJriV53T6NWYsL-B85XmGlIGGVSQU7Iz1hA7L3lqgc
AVALARA-SAML-DOMAIN=1A25663DF88DABA53579ED844B69DF0CADA11F58EA96A9A82C31313DA963
jamf-site-verification=w9mElzcFuOBxXmCXv2bCpA
mixpanel-domain-verify=d81ed633-675a-4e48-a5ca-26304e495168
mixpanel-domain-verify=7a9d27b9-b001-4b6c-9015-6ca9d511eb0e
airtable-verification=de9c073c9ccf61acff9d73b8823edbef
notion-domain-verification=5btQssUe0luq0yarLdA50PxDGvHA6JIqrSaOyQvO0fs
google-site-verification=z9engXe1IAxie3KkQEmv3FU2paPe3wciOlRip5-AyA8
zapier-domain-verification-challenge=aaed450e-ad27-40cc-90a3-8946ab1a6998
apple-domain-verification=9ACAsKFrulr6AjAT
atlassian-domain-verification=4SfbkeWjP1TP5ROrzUdI40l9E0MqiStUDoG2m4KYvKDtsBhLnniowUc7ILCsYZ1S
cloudflare_dashboard_sso=9369287776c37e9ac8fb04bf9053fd26
hubspot-domain-verification=OGRkN2YzMDQtNzE4My00MGJlLWI1ODktNzM4ZmJmMDExMjEy
MS=C4B6EF60D51B967591B73261035E0C54EDF75375
google-site-verification=8oa-S3w8xvrsbI6gFOLjiipTrm_TizA54b2WptEosBY
decagon-domain-verification-4pmp61=bzrLxzaMsSC8YBwPLgVYm9xSC
google-site-verification=w4nbPkV1Xy_Sha-bUciA4fLF1L3jNqunS7B3BZ3jmk0
RegistrationGoDaddy.com, LLC
registrarGoDaddy.com, LLC
registered2003-12-22
expires2027-12-22
last changed2025-12-23
nameserversns-145.awsdns-18.com
ns-1461.awsdns-54.org
ns-1806.awsdns-33.co.uk
ns-610.awsdns-12.net
statusclient delete prohibited
client renew prohibited
client transfer prohibited
client update prohibited
registered 2003-12-22expires 2027-12-22
HTTPS certificate138 days left
validyes
issuerGoDaddy.com
covers*.strava.com, strava.com
protocolTLSv1.3
issued 2026-09-02expires 2027-03-19
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → strava.com
Email authenticationexcellent
SPFpass v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
DMARCpass policy reject
DKIMfound: google, s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 165/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop108.138.64.60Barracuda108.138.64.60UCEPROTECT Level 1108.138.64.60SpamCop108.138.64.68Barracuda108.138.64.68UCEPROTECT Level 1108.138.64.68SpamCop108.138.64.64Barracuda108.138.64.64UCEPROTECT Level 1108.138.64.64SpamCop108.138.64.14Barracuda108.138.64.14UCEPROTECT Level 1108.138.64.14

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=strava.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=strava.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on strava.com. Reference: /llms.txt.

IPv6. IPv6 readiness grade for strava.com Does strava.com work over IPv6? See the live check on aaaa.bot — website, mail and nameservers, graded A–F.

Watch strava.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days