How is threema.ch?

Looks fine risk 0/100

Registered 14 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 1599 ms.

Why

02050100

finecarefulhigh risk

·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.

Site

200

1599 ms · ends at threema.com

HTTPS

140 d

left on a Sectigo Limited certificate

Age

14 years

registered 2012-10-24

Blocklists

listings across 4 lists; 1 did not answer

Everything we looked at

DNS records6 record types

A	203.56.112.78
AAAA	2a14:3e40:112:312::78
MX	10 mx.threema.ch
NS	ns1.threema.ch ns2.threema.ch ns5.threema.ch
TXT	swisssign-check=UQkmMCWJQIV5ZnH_HSLXznkwcok google-gws-recovery-domain-verification=50500555 google-site-verification=zPhfiLEW9KkRMmipnzs9hl6gobnHeVUoFMlsylsRbnI keybase-site-verification=pt4a2COxL-7z7Ya4U-nrrdll9x7KOPOhmBuhKerW9k4 v=spf1 ip4:185.88.236.64/26 ip6:2a02:41b:300a::/48 ip4:212.103.68.0/26 ip6:2a00:c38:1fb::/48 a mx -all
CAA	{'type': 'CAA', 'iodef': 'mailto:security@threema.ch', 'critical': 0} {'type': 'CAA', 'issue': 'entrust.net', 'critical': 0} {'type': 'CAA', 'issue': 'sectigo.com', 'critical': 0} {'type': 'CAA', 'issue': 'swisssign.com', 'critical': 0}

Registrationregistrar not reported

registered	2012-10-24
nameservers	ns1.threema.ch ns2.threema.ch ns5.threema.ch
status	active

HTTPS certificate140 days left

valid	yes
issuer	Sectigo Limited
covers	*.threema.ch, threema.ch
protocol	TLSv1.3

issued 2026-09-01expires 2027-03-18

DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → ch → threema.ch

Email authenticationexcellent

SPF	pass `v=spf1 ip4:185.88.236.64/26 ip6:2a02:41b:300a::/48 ip4:212.103.68.0/26 ip6:2a00:c38:1fb::/48 a mx -all`
DMARC	pass policy reject
DKIM	found: mail, mx

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 170/205

Basic Security

10/40missing: DNSSEC Enabled, Nameserver Diversity

Record Security

45/45missing: DKIM Presence

Advanced Security

20/25missing: Mail Server Configuration

Domain Reputation

50/50

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 5 lookups

SURBL MultidomainURIBL MultidomainSpamCop203.56.112.78Barracuda203.56.112.78UCEPROTECT Level 1203.56.112.78

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=threema.ch" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=threema.ch"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on threema.ch. Reference: /llms.txt.

Watch threema.ch. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days