How is taboola.com?
Looks fine
risk 0/100
Registered 20 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 55 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
55 ms · ends at www.taboola.com
HTTPS
71 d
left on a DigiCert Inc certificate
Age
20 years
registered 2007-02-23
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records5 record types
| A | 151.101.194.132 151.101.2.132 151.101.66.132 151.101.130.132 |
|---|---|
| MX | 1 aspmx.l.google.com 10 aspmx4.googlemail.com 5 alt1.aspmx.l.google.com 5 alt2.aspmx.l.google.com 10 aspmx2.googlemail.com 10 aspmx5.googlemail.com 10 aspmx3.googlemail.com |
| NS | dns1.p05.nsone.net ns02.dnsfaster.com ns03.dnsfaster.com dns2.p05.nsone.net ns01.dnsfaster.com dns4.p05.nsone.net ns04.dnsfaster.com dns3.p05.nsone.net |
| TXT | anthropic-domain-verification-1zbekh=lJFJALlYr77IEwETZNf4Bb2Bj google-site-verification=N60gm5YnA_5ibrU2k9tH-TJqaVwp-P3sB44ZzWbzxAc canva-site-verification=GpjIk35KwRWnY8jVajXblw atlassian-sending-domain-verification=0a85057d-574b-4719-b1e0-2a8933fb47f7 v=spf1 ip4:103.28.42.0/24 ip4:108.179.144.0/20 ip4:135.84.80.0/24 ip4:136.143.184.0/24 ip4:136.143.188.0/24 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.185.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 include:spf1.taboola.com -all yahoo-verification-key=DKyUWYGA+HpxVDpgfbzCO0iiiNgpigZ2wWpavmy0cZ8= c1a74638-2510-480f-ae6e-fa1ecd1f5650 apple-domain-verification=i6DeEiDFSJitl7Rq access-domain-verification=01c5772cd99575eb54bf8d643501d36be8275aafa83087622f8787c89530963a google-site-verification=k1dQX_v14MN8Mq34nd3RU2QJx_e7Emv7PeDmP_GPcbE |
| CAA | {'type': 'CAA', 'iodef': 'mailto:security@taboola.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com'} {'type': 'CAA', 'issue': 'digicert.com', 'critical': 0} |
RegistrationAscio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA
| registrar | Ascio Technologies, Inc. Danmark - Filial af Ascio technologies, Inc. USA |
|---|---|
| registered | 2007-02-23 |
| expires | 2031-02-23 |
| last changed | 2026-02-09 |
| nameservers | dns1.p05.nsone.net dns2.p05.nsone.net dns3.p05.nsone.net dns4.p05.nsone.net ns01.dnsfaster.com ns02.dnsfaster.com ns03.dnsfaster.com ns04.dnsfaster.com |
| status | active |
registered 2007-02-23expires 2031-02-23
HTTPS certificate71 days left
| valid | yes |
|---|---|
| issuer | DigiCert Inc |
| covers | *.taboola.com, taboola.com, trc.taboola.com, taboolasyndication.com, *.trc.taboola.com, *.taboolasyndication.com |
| protocol | TLSv1.3 |
issued 2025-12-15expires 2027-01-05
DNSSECsecure
Domain is properly signed — chain validated by an independent validating resolver
. → com → taboola.com
Email authenticationexcellent
| SPF | pass v=spf1 ip4:103.28.42.0/24 ip4:108.179.144.0/20 ip4:135.84.80.0/24 ip4:136.143.184.0/24 ip4:136.143.188.0/24 ip4:139.180.17.0/24 ip4:141.193.184.32/27 ip4:141.193.184.64/26 ip4:141.193.185.128/25 ip4:141.193.185.32/27 ip4:141.193.185.64/26 include:spf1.taboola.com -all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: google, selector1, selector2, k1, smtp |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade A · 180/205
Basic Security20/40missing: DNSSEC Enabled
Record Security45/45missing: DKIM Presence
Advanced Security20/25missing: IPv6 Support
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop151.101.66.132Barracuda151.101.66.132UCEPROTECT Level 1151.101.66.132SpamCop151.101.130.132Barracuda151.101.130.132UCEPROTECT Level 1151.101.130.132SpamCop151.101.2.132Barracuda151.101.2.132UCEPROTECT Level 1151.101.2.132SpamCop151.101.194.132Barracuda151.101.194.132UCEPROTECT Level 1151.101.194.132
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=taboola.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=taboola.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on taboola.com.
Reference: /llms.txt.
Watch taboola.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days