Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/medium.com
Generated: Fri, 13 Nov 2026 14:54:36 GMT
Target Website: medium.com
Overall Trust Score: 94/100 (Trusted)
Is medium.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Checked Nov 13, 2026
94
Trust score
Why: Main reasons: domain registered 28+ years ago; not flagged by Google Safe Browsing; no impersonation patterns detected. Minor issues: site returned HTTP 403.
Identity & Age100/100
Impersonation Risk100/100
Red Flags100/100
Transparency70/100
Security100/100
Email100/100
Positive highlights
- Domain registered 28+ years agoLong-established domains are far less likely to be disposable scams.
- Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- Valid SSL / TLS certificate activeIssued by C=US, O=Amazon, CN=Amazon RSA 2048 M04, valid for 106 remaining days.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Fast response (3ms)
- Not present in PhishStats phishing feed
- HSTS is setTells browsers to only use HTTPS for this domain.
- DMARC published (reject)
Negative highlights
- Site returned HTTP 403The server is reachable but did not return a success status.
Note: Registered via Amazon Registrar, Inc..
Note: 1 technologies detected. Cloudflare
Note: Policy pages could not be checked. The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Key facts about medium.com
- Website
- medium.com
- Popularity
- Not checked
- Domain created
- May 27, 1998 (28.5 years old)
- Domain expires
- May 26, 2027
- Registrar
- Amazon Registrar, Inc.
- Owner details
- Public in WHOIS
- IP address
- 162.159.152.4
- Hosting / CDN
- Cloudflare
- SSL certificate
- Amazon · valid until Feb 27, 2027
- Email security
- SPF ✓ · DMARC ✓ (reject)
- Threat blocklists
- Not listed (clean)
- Technology
- Cloudflare
Summary
94/100 — trusted. Long-established domain (28.5 years old), clean threat reputation, no impersonation patterns.
No malware/phishing on feedsGood reputationHTTPS enabled
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
Verified
- Registrar Name
- Amazon Registrar, Inc.
- Creation Date
- May 27, 1998 (28.5 years ago)
- Last Updated
- May 16, 2026
- Registry Expiry Date
- May 26, 2027
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client transfer prohibited
ICANN Status Badges
client transfer prohibited
Domain registered 28+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Amazon Registrar, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
Good
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
All Response Headers (20)
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cf-mitigated: challenge cf-ray: a59e9cd49c343564-CMH connection: close content-length: 5603 content-security-policy: default-src 'none'; script-src 'nonce-AVwzHOHwQIvUf2bsvX9bYw' 'unsafe-eval' https://challenges.cloudflare.com; script-src-attr 'none'; style-src 'unsafe-inline'; img-src 'self' https://challenges.cloudflare.com; connect-src 'self' https://challenges.cloudflare.com; frame-src 'self' https://challenges.cloudflare.com blob:; child-src 'self' https://challenges.cloudflare.com blob:; worker-src blob:; form-action http: https:; base-uri 'self' content-type: text/html; charset=UTF-8 critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin date: Fri, 13 Nov 2026 14:54:36 GMT origin-agent-cluster: ?1 permissions-policy: accelerometer=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=(),xr-spatial-tracking=* referrer-policy: same-origin server: cloudflare server-timing: chlray;desc="a59e9cd49c343564" strict-transport-security: max-age=31536000; includeSubDomains; preload x-content-type-options: nosniff x-frame-options: SAMEORIGIN
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Content Security Policy is set
Restricts which scripts and resources the page can load.
+5
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Permissions Policy is set
Restricts access to powerful browser features (camera, mic, etc.).
+2
DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
Resolved
- IPv4 Addresses (A)
- 162.159.152.4, 162.159.153.4
- IPv6 Addresses (AAAA)
- 2606:4700:7::a29f:9804, 2606:4700:7::a29f:9904
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), aspmx2.googlemail.com (Priority: 10), aspmx3.googlemail.com (Priority: 10)
- Authoritative Nameservers (NS)
- alina.ns.cloudflare.com, kip.ns.cloudflare.com
- TXT Records Found
- 18 TXT verification records
A Records (IPv4)
162.159.152.4162.159.153.4
TXT Verification Records
07ecf60c9da442a9b3bcce99190ff60a
Domain Verification for Digicert (10/05/2022)y7ncgbyk39tw482zsbwcnfx0t775d85j
anthropic-domain-verification-p32bnn=TlzaDtedEYyM5ccLdU8NsQIPP
apple-domain-verification=Ls6JkesM8aOd8xyQ
cursor-domain-verification-54pwxn=8yHL5J3FELu0JwETv8iGeZt4A
dropbox-domain-verification=d7wsnlvbz6l3
facebook-domain-verification=eqviiajbkkhum35vciytgngt69oan0
google-site-verification=QuRrrbvTtvFC0uq2BLr_CcuuuDEiNGDJjI7XkPV3s60
google-site-verification=TUaeSBwTARWW1ntR_TLK0FwD5WKnFCpB5gYVuXkBmlg
google-site-verification=jUulFqySbosf7Fvi1pvOm1KL3AeQ5L5s18CDIU30xek
google-site-verification=nlPBDLGxOufYa5DdXnQ8d28h5dJjwy0bSakZq-tSios
google-site-verification=qmNSvk4iAfYY_fZYv821myqWI4vaInKsGaBTkg4wNRw
linear-domain-verification=tyjcyfd4thj2
notion-domain-verification=FPUVTTLhldYnVqE4496kGbBhDpf54Y4O7eA8SxkbAHk
openai-domain-verification=dv-G8sPcKCsIq9tKkWTNFJZh3RE
tollbit-domain-verification=ad88649c05afef85ddba3e3910778960d3d7bf85193e167281d4e0767d855153
v=spf1 include:amazonses.com include:_spf.google.com include:mail.zendesk.com include:sendgrid.net include:spf.tipalti.com include:_spf.psm.knowbe4.com ~all
yahoo-verification-key=nOxcdTfSy6txWr8ZAJ8EevOZHdrxuX4qFKljmgTLsu8=
4 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
2 authoritative nameservers
+2
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
Found
- Registrable Domain
- medium.com
- Registrar Organization
- Amazon Registrar, Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client transfer prohibited
- Delegated Authoritative Nameservers
- alina.ns.cloudflare.com, kip.ns.cloudflare.com
- Registration Lifecycle
- Registered: 1998 → Expires: 2027
Nameservers (NS)
alina.ns.cloudflare.comkip.ns.cloudflare.com
Domain registered 28+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via Amazon Registrar, Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
Protected
- SPF Record
- v=spf1 include:amazonses.com include:_spf.google.com include:mail.zendesk.com include:sendgrid.net include:spf.tipalti.com include:_spf.psm.knowbe4.com ~all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; sp=reject; pct=100; fo=1; ri=3600; rua=mailto:dmarc.rua@medium.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarc.rua@medium.com,mailto:ruf@dmarc.medium.com,mailto:dmarc_agg@vali.email;
- DKIM Selectors Detected
- google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google, s1, s2)
+3
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
Clean
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Clean / Verified
- Root Domain Label
- medium
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
Detected
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- Just a moment...
- Meta Description
- —
- Document Language
- en-US
- Character Encoding
- UTF-8
- Viewport Setting
- width=device-width,initial-scale=1
- Generator Software
- —
1 technologies detected
Cloudflare
Mobile viewport configured
+2
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
3ms
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 3 ms
- Payload Body Size
- 5.5 KB
- Compression Status
- Uncompressed
- Cache Directives
- Standard caching rules
No findings.
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
Safe
AI Content Evaluation
94/100 — trusted. Long-established domain (28.5 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 28+ years ago; not flagged by Google Safe Browsing; no impersonation patterns detected. Minor issues: site returned HTTP 403.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 60 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
cloudflare
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 162.159.152.4
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://medium.com/
- Redirect Hop Count
- 0 hops
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (3ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
Secure
- Certificate Authority (Issuer)
- C=US, O=Amazon, CN=Amazon RSA 2048 M04
- Subject Common Name (CN)
- jss.medium.com
- Validity Period
- 106 days remaining (Expires: 2027-02-27T23:59:59Z)
- Subject Alternative Names (SANs)
- 12 domains protected
- Certificates Logged (CT)
- 23 certs recorded
Subject Alternative Names (Sample)
jss.medium.comcdn-audio-1.medium.comstatus.medium.commedium.comhtclick.medium.comclick.medium.comlinks.medium.comtollbit.medium.comhelp.medium.comurl2204.mail.medium.comread.medium.comlink.medium.com
Valid SSL / TLS certificate active
Issued by C=US, O=Amazon, CN=Amazon RSA 2048 M04, valid for 106 remaining days.
+10
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
Warning
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Phone Numbers
- 1794581676-1.2.1.1, 1794581676, 1794581676-1.0.1.1
Policy pages could not be checked
The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
Present
- Robots.txt Directives
- Present & Configured
- Sitemaps Declared
- https://medium.com/sitemap/sitemap.xml
- Disallow Rules Count
- 16 rules
View Raw robots.txt
User-Agent: * Disallow: /m/ Disallow: /me/ Disallow: /@me$ Disallow: /@me/ Disallow: /*/edit$ Disallow: /*/*/edit$ Disallow: /media/ Disallow: /p/*/share Disallow: /r/ Disallow: /trending Disallow: /search?q$ Disallow: /search?q= Disallow: /*/search?q= Disallow: /*/search/*?q= Disallow: /*/*source= Allow: /_/api/users/*/meta Allow: /_/api/users/*/profile/stream Allow: /_/api/posts/*/responses Allow: /_/api/posts/*/responsesStream Allow: /_/api/posts/*/related User-Agent: Amazonbot User-Agent: Applebot-Extended User-Agent: Bytespider User-Agent: ClaudeBot User-Agent: FacebookBot User-Agent: GoogleOther User-Agent: GPTBot User-Agent: meta-externalagent Disallow: / Allow: /about Allow: /business Allow: /earn Allow: /gift Allow: /membership Allow: /partner-program Allow: /verified-authors Sitemap: https://medium.com/sitemap/sitemap.xml License: https://medium.com/license.xml
robots.txt published
+2
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
32
This scan
Sources Checked
19
Live security feeds
Scan Duration
3.75s
Full live scan
Last Scan
11/13/2026
Live timestamp
Overall Risk
Low Risk
User reviews of medium.com
No reviews yet. Be the first to share your experience.