HOW.IS
?

How is ubuntu.com?

Looks fine risk 0/100

Registered 22 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 349 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How ubuntu.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
349 ms
HTTPS
50 d
left on a Let's Encrypt certificate
Age
22 years
registered 2004-05-29
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records6 record types
A185.125.190.21
185.125.190.29
185.125.190.20
AAAA2620:2d:4000:1::27
2620:2d:4000:1::26
2620:2d:4000:1::28
MX10 mx.ubuntu.com
NSns1.canonical.com
ns2.canonical.com
ns3.canonical.com
TXTforward-email-site-verification=6IsURgl2t7
google-site-verification=8CcvY6fsgRbiFk2nyEaiA9rE-ykXOcWUPjJKlO6P4vk
v=spf1 include:_spf.canonical.com include:spf.forwardemail.net ~all
CAA{'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com'}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0}
{'type': 'CAA', 'iodef': 'mailto:is-admin@canonical.com', 'critical': 0}
{'type': 'CAA', 'issue': 'letsencrypt.org; accounturi=https://acme-v01.api.letsencrypt.org/acme/reg/32541290', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered2004-05-29
expires2028-05-29
last changed2026-04-27
ownerREDACTED FOR PRIVACY
nameserversns1.canonical.com
ns2.canonical.com
ns3.canonical.com
statusclient delete prohibited
client transfer prohibited
client update prohibited
registered 2004-05-29expires 2028-05-29
HTTPS certificate50 days left
validyes
issuerLet's Encrypt
coversubuntu.com, www.ubuntu.com
protocolTLSv1.3
issued 2026-09-16expires 2026-12-15
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → ubuntu.com
Email authenticationfair
SPFpass v=spf1 include:_spf.canonical.com include:spf.forwardemail.net ~all
DMARCwarning policy none
DKIMnone of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 163/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
38/45missing: DMARC Record, DKIM Presence
Advanced Security
20/25missing: Mail Server Configuration
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 11 lookups
SURBL MultidomainURIBL MultidomainSpamCop185.125.190.21Barracuda185.125.190.21UCEPROTECT Level 1185.125.190.21SpamCop185.125.190.29Barracuda185.125.190.29UCEPROTECT Level 1185.125.190.29SpamCop185.125.190.20Barracuda185.125.190.20UCEPROTECT Level 1185.125.190.20

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=ubuntu.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=ubuntu.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on ubuntu.com. Reference: /llms.txt.

Watch ubuntu.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days