Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/medium
Generated: Sat, 05 Sep 2026 10:51:50 GMT
Target Website: medium.com
Overall Trust Score: 90/100 (Trusted)
medium.com
Trusted
Scanned: Sep 5, 10:51 AMTRUST SCORE
90
CONFIDENT
Low Risk
90/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
15/100
15/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
90/100 — trusted. Long-established domain (28.3 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
C=US, O=Let's Encrypt, CN=YR2
Threat Status
CleanClean
No blacklists or malware
Domain Age
28.3 years28.3 years
Registered 5/27/1998
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
162.159.153.4162.159.153.4
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
100 / 100100 / 100
Fast response time
Redirects
DirectDirect
No redirect hops
Top Priority RecommendationAction Needed
Site returned HTTP 403
The server is reachable but did not return a success status.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- HTTPS is enforced
- Fast response (4ms)
- Served through Cloudflare
- 4 address record(s) resolved
- IPv6 (AAAA) available
- 2 authoritative nameservers
- Domain registered 28+ years ago
- Owner information disclosed
Warnings
- Site returned HTTP 403
- No privacy policy found
- No terms of service found
- No contact page found
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- Amazon Registrar, Inc.
- Creation Date
- May 27, 1998 (28.3 years ago)
- Last Updated
- May 16, 2026
- Registry Expiry Date
- May 26, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited
ICANN Status Badges
client transfer prohibited
Domain registered 28+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Amazon Registrar, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
All Response Headers (20)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Permissions Policy is set
Restricts access to powerful browser features (camera, mic, etc.).
+2
- IPv4 Addresses (A)
- 162.159.153.4, 162.159.152.4
- IPv6 Addresses (AAAA)
- 2606:4700:7::a29f:9804, 2606:4700:7::a29f:9904
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), aspmx2.googlemail.com (Priority: 10), aspmx3.googlemail.com (Priority: 10)
- Authoritative Nameservers (NS)
- alina.ns.cloudflare.com, kip.ns.cloudflare.com
- TXT Records Found
- 17 TXT verification records
A Records (IPv4)
162.159.153.4162.159.152.4
TXT Verification Records
07ecf60c9da442a9b3bcce99190ff60a
Domain Verification for Digicert (10/05/2022)y7ncgbyk39tw482zsbwcnfx0t775d85j
anthropic-domain-verification-p32bnn=TlzaDtedEYyM5ccLdU8NsQIPP
apple-domain-verification=Ls6JkesM8aOd8xyQ
cursor-domain-verification-54pwxn=8yHL5J3FELu0JwETv8iGeZt4A
dropbox-domain-verification=d7wsnlvbz6l3
facebook-domain-verification=eqviiajbkkhum35vciytgngt69oan0
google-site-verification=QuRrrbvTtvFC0uq2BLr_CcuuuDEiNGDJjI7XkPV3s60
google-site-verification=TUaeSBwTARWW1ntR_TLK0FwD5WKnFCpB5gYVuXkBmlg
google-site-verification=jUulFqySbosf7Fvi1pvOm1KL3AeQ5L5s18CDIU30xek
google-site-verification=nlPBDLGxOufYa5DdXnQ8d28h5dJjwy0bSakZq-tSios
google-site-verification=qmNSvk4iAfYY_fZYv821myqWI4vaInKsGaBTkg4wNRw
linear-domain-verification=tyjcyfd4thj2
notion-domain-verification=FPUVTTLhldYnVqE4496kGbBhDpf54Y4O7eA8SxkbAHk
openai-domain-verification=dv-G8sPcKCsIq9tKkWTNFJZh3RE
v=spf1 include:amazonses.com include:_spf.google.com include:mail.zendesk.com include:sendgrid.net include:spf.tipalti.com include:_spf.psm.knowbe4.com ~all
yahoo-verification-key=nOxcdTfSy6txWr8ZAJ8EevOZHdrxuX4qFKljmgTLsu8=
4 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
2 authoritative nameservers
+2
- Registrable Domain
- medium.com
- Registrar Organization
- Amazon Registrar, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited
- Delegated Authoritative Nameservers
- alina.ns.cloudflare.com, kip.ns.cloudflare.com
- Registration Lifecycle
- Registered: 1998 → Expires: 2027
Nameservers (NS)
alina.ns.cloudflare.comkip.ns.cloudflare.com
Domain registered 28+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Amazon Registrar, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 include:amazonses.com include:_spf.google.com include:mail.zendesk.com include:sendgrid.net include:spf.tipalti.com include:_spf.psm.knowbe4.com ~all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; sp=reject; pct=100; fo=1; ri=3600; rua=mailto:dmarc.rua@medium.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc.rua@medium.com,mailto:ruf@dmarc.medium.com,mailto:dmarc_agg@vali.email;
- DKIM Selectors Detected
- google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google, s1, s2)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- medium
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Just a moment...
- Meta Description
- —
- Document Language
- en-US
- Character Encoding
- UTF-8
- Viewport Setting
- width=device-width,initial-scale=1
- Generator Software
- —
1 technologies detected
Cloudflare
Mobile viewport configured
+2
Missing meta description
-2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 4 ms
- Payload Body Size
- 5.5 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
No findings.
AI Content Evaluation
90/100 — trusted. Long-established domain (28.3 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 60 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 162.159.153.4
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://medium.com/
- Redirect Hop Count
- 0 hops
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (4ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- C=US, O=Let's Encrypt, CN=YR2
- Subject Common Name (CN)
- status.medium.com
- Validity Period
- 89 days remaining (Expires: 2026-12-03T21:24:42Z)
- Subject Alternative Names (SANs)
- 9 domains protected
- Certificates Logged (CT)
- 23 certs recorded
Subject Alternative Names (Sample)
status.medium.comlink.medium.comhelp.medium.comcdn-audio-1.medium.comurl2204.mail.medium.commedium.comread.medium.comurl4137.links.medium.comjss.medium.com
Valid SSL / TLS certificate active
Issued by C=US, O=Let's Encrypt, CN=YR2, valid for 89 remaining days.
+10
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 8-1788605510-1.2.1.1, 1788605510, 1788605510-1.0.1.1, 1788605510-1.2.1.1-0, 0-1788605510-1.2.1.1
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
No contact page found
Reputable sites usually publish a contact page.
-4
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
Phone number published
+2
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://medium.com/sitemap/sitemap.xml
- Disallow Rules Count
- 16 rules
View Raw robots.txt
User-Agent: * Disallow: /m/ Disallow: /me/ Disallow: /@me$ Disallow: /@me/ Disallow: /*/edit$ Disallow: /*/*/edit$ Disallow: /media/ Disallow: /p/*/share Disallow: /r/ Disallow: /trending Disallow: /search?q$ Disallow: /search?q= Disallow: /*/search?q= Disallow: /*/search/*?q= Disallow: /*/*source= Allow: /_/api/users/*/meta Allow: /_/api/users/*/profile/stream Allow: /_/api/posts/*/responses Allow: /_/api/posts/*/responsesStream Allow: /_/api/posts/*/related User-Agent: Amazonbot User-Agent: Applebot-Extended User-Agent: Bytespider User-Agent: ClaudeBot User-Agent: FacebookBot User-Agent: GoogleOther User-Agent: GPTBot User-Agent: meta-externalagent Disallow: / Allow: /about Allow: /business Allow: /earn Allow: /gift Allow: /membership Allow: /partner-program Allow: /verified-authors Sitemap: https://medium.com/sitemap/sitemap.xml License: https://medium.com/license.xml
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
38
This scan
Sources Checked
18
Live security feeds
Scan Duration
3.77s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk