HOW.IS
?

How is ancestry.com?

Looks fine risk 0/100

Registered 31 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 67 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How ancestry.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
67 ms
HTTPS
33 d
left on a Google Trust Services certificate
Age
31 years
registered 1995-05-16
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A104.18.0.50
104.18.1.50
MX10 mxa-002f8e01.gslb.pphosted.com
10 mxb-002f8e01.gslb.pphosted.com
NSns-737.awsdns-28.net
ns-415.awsdns-51.com
ns-1429.awsdns-50.org
ns-1996.awsdns-57.co.uk
TXTatlassian-domain-verification=w3rz7z0y8xvagZiMhu44qJQUXTISEt1vlB5JLH44YwEGaJu1oJQweoaSPwzZwRDa
google-site-verification=IhnfKIdiEJloKVWygvyOX-OXEqYvnNW3a36zIqvI7s8
_globalsign-domain-verification=kXS4kgWQ9hbGjWDmISoLGlXLaOx8-EdTig6ux0WZ2x
facebook-domain-verification=jyq4fxqp7asgs8a4uos7lv175smrw0
openai-domain-verification=dv-m5ulmmlnY2Bbs21oMqlkLx91
anthropic-domain-verification-5x6v3a=SdaJCpCsOqRJK6kebbsyOLazK
wiz-domain-verification=6f1d3544773aad264133bcc557338a5f84b607290582a33eb48cc6e768f48b95
workplace-domain-verification=8M7WF3aEGWMl1TYqg8a0WPoeU5nGzn
cisco-ci-domain-verification=7e9f05a57120466147f6696af195ece74794ffcb865912d4841a6cfae29682fa
es-domain-verification=572c7e4d-8a43-477d-a7c1-6ec480ca835e
google-site-verification=xzRJaI_84GE45yCfP1XGewPRGYGYtoKN2taBi0W1tvw
adobe-idp-site-verification=1222e2336a518f7a8664dbdc6462f85d80c35afb4f46542ba5a329749a24a22a
ca3-5bb298b2372e4cd59aadef5eb8cdc5e2
mixpanel-domain-verify=030ac2cc-dd22-46ab-abd2-ffe6a6e01dde
apple-domain-verification=aRPuENZQPpkMdwYD
docusign=60713c36-f380-42c6-bc97-c0a2f7bb0288
google-site-verification=-AzknqzfMwXyfxPvw1tFMWHQop_hZggmsBKQaxTtJ_Y
ZOOM_verify_pUR3qD3KTUmjq_VepUKiNQ
bw=V0nvzHI6aiJ+zDVV34NJIpjumOt94AbC2UVMYwNiV94K
jamf-site-verification=bKnm7mL8x9P7tTbBibqUnw
LfWMRqtDo2P6V4y6XUr/J+AhoqnLN10va/BBwWlFW2swSuUuJIy0H7InunZ5t1x11GbBXDUuPLFrNb9i6xtZJg==
uber-domain-verification=bae1e0bc-36c1-4ddc-82cb-9df008237fbc
v=spf1 ip4:148.163.143.216 ip4:148.163.146.21 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 include:spfa1.ancestry.com include:spfa2.ancestry.com include:spfa3.ancestry.com include:spfa4.ancestry.com -all
atlassian-sending-domain-verification=84372097-817a-4816-8e7f-2c3b32ac6895
1h8615NzQEFqgIY5PxudWlC6duCLMQfBMw+fv5fm3NA7wz2Sl7G2nXilA3HMfQdoU3YUwadBga5qJlKymzJUNg==
apple-domain-verification=H7sVwFfpXAjrg5cjwMiD04RqrUPw-yk8nws1ZQLX0OE
Validity-Domain-Verification=ahh6a--ajdta71&akhdggS76SHKEUGkd
ca3-8ace22ca65d242f287d5417e8f1ccd9b
dtm-domain-verification=SC0ne4rDlm2aeoiu8c76XQPK2EThQ20Dlu700pGs87k
google-site-verification=7cbq4pQ7-mroQaqnQzd_NWlY6FnXHB5jXvaOBv9PvKE
CAA{'type': 'CAA', 'critical': 0, 'issuewild': 'globalsign.com'}
{'type': 'CAA', 'issue': 'pki.goog; cansignhttpexchanges=yes', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'amazon.com'}
{'type': 'CAA', 'critical': 0, 'issuewild': 'pki.goog; cansignhttpexchanges=yes'}
{'type': 'CAA', 'issue': 'comodoca.com', 'critical': 0}
{'type': 'CAA', 'issue': 'amazon.com', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com'}
{'type': 'CAA', 'issue': 'globalsign.com', 'critical': 0}
{'type': 'CAA', 'issue': 'digicert.com', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'thawte.com'}
{'type': 'CAA', 'issue': 'thawte.com', 'critical': 0}
RegistrationMarkMonitor Inc.
registrarMarkMonitor Inc.
registered1995-05-16
expires2027-05-17
last changed2025-04-15
ownerREDACTED FOR PRIVACY
nameserversns-1429.awsdns-50.org
ns-1996.awsdns-57.co.uk
ns-415.awsdns-51.com
ns-737.awsdns-28.net
statusclient delete prohibited
client transfer prohibited
client update prohibited
registered 1995-05-16expires 2027-05-17
HTTPS certificate33 days left
validyes
issuerGoogle Trust Services
coversancestry.com, *.ancestry.com, *.ajax.ancestry.com
protocolTLSv1.3
issued 2026-09-02expires 2026-12-01
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → ancestry.com
Email authenticationexcellent
SPFpass v=spf1 ip4:148.163.143.216 ip4:148.163.146.21 ip4:40.92.0.0/15 ip4:40.107.0.0/16 ip4:52.100.0.0/14 ip4:104.47.0.0/17 include:spfa1.ancestry.com include:spfa2.ancestry.com include:spfa3.ancestry.com include:spfa4.ancestry.com -all
DMARCpass policy quarantine
DKIMfound: s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 180/205
Basic Security
20/40missing: DNSSEC Enabled
Record Security
45/45missing: DKIM Presence
Advanced Security
20/25missing: IPv6 Support
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop104.18.0.50Barracuda104.18.0.50UCEPROTECT Level 1104.18.0.50SpamCop104.18.1.50Barracuda104.18.1.50UCEPROTECT Level 1104.18.1.50

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=ancestry.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=ancestry.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on ancestry.com. Reference: /llms.txt.

Watch ancestry.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days