HOW.IS
?

How is id.me?

Looks fine risk 0/100

Registered 17 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 158 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How id.me looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
158 ms
HTTPS
120 d
left on a DigiCert Inc certificate
Age
17 years
registered 2009-07-24
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records6 record types
A172.65.90.24
172.65.90.27
172.65.90.25
172.65.90.26
AAAA2606:4700:78::90:0:182
2606:4700:78::90:0:180
2606:4700:78::90:0:183
2606:4700:78::90:0:181
MX1 mxa-0054ed01.gslb.pphosted.com
1 mxb-0054ed01.gslb.pphosted.com
5 aspmx.l.google.com
10 alt2.aspmx.l.google.com
15 alt3.aspmx.l.google.com
15 alt4.aspmx.l.google.com
10 alt1.aspmx.l.google.com
NSapollo.ns.cloudflare.com
alla.ns.cloudflare.com
TXTSFMC-pvrJV4RY1B_HXxpZFLRZ_Lr39nj7-BstBI-nmosw
slack-domain-verification=FSmm5JvXzTcENw0WWsubh3LC5jWBK2ULCeRTEY2F
anthropic-domain-verification-s8b3b9=Tg8B2ZEvo1JO2261Mnvk71Ab3
google-site-verification=cW71dxHSO1JwQkb51iwEezmk2lw87IScqOUjOrCrglg
apple-domain-verification=cbvM6frp952RK4dE
atlassian-domain-verification=lnWJ4GfVdaAydCAHF8qRRlQf4A13OHl5nayYBZKgZPTUghKUmSwSckqEIECrsw2u
adobe-idp-site-verification=75dda91a3a185ffcc72dbeac6ee04472eb363fd2683d7743ed6da35c912d59e6
jamf-site-verification=OyFffUG83PuXAOzbaN8Urg
openai-domain-verification=dv-kQ7setVpoo5raChGgDcvTz1l
MS=ms44435230
h1-domain-verification=VnECuxHdmQbpVVUibneGRz3ccvu8dTbn9vrMSXq1b5uDNEtH
gamma-domain-verification-84zgtw=6pOsvlo7uGYGspBhoXqF4bDhG
_b4x3vl44zdkc4b9xspl2v68w7dmc7se
zapier-domain-verification-challenge=4418745d-8a02-4be3-8f93-264d86a27eaa
docusign=3bc0f094-2b00-49be-a2a8-57d487429b86
amazon-business-verification=7daecb8091a0c2a434caa5768323d6f1f1e1e263c73332dff2aec25462ad102e
prove-verify=268e929660284a26a7e75baf3ea6e886
docker-verification=02da437a-0770-4aa4-bd9b-6d36bd43c224
OSSRH-87398
paloaltonetworks-site-verification=b81b234a64e4ceb88b6c482eaa2c310e3026ae165c7cbb232b63e6292c758693
miro-verification=4697f40df2c2e28203ec6dea1ff335152442315d
facebook-domain-verification=v99xznuvxsw7qtjv5czsepw2w5c9gw
v=spf1 include:0.spf.id.me ~all
qase-7469224e7cfcdd6dcfd64b168964fa5359ab0f3e
uber-domain-verification=b1fa6b06-aee6-4b88-bfd2-ce5ce37ea980
google-site-verification=xMbAAd3sSNDs9_rZDPHncF2HbRoYwdUhbqwBIuT-OdQ
figma-domain-verification=fb09d7132fbb7ed6ec394efb4f2fbd5cd2496229e3f07c966d16b48f0fd230bf-1763066155
cursor-domain-verification-4k3rnr=yShOJziYVtyjxkBtqn957JqVH
lb2v9j77n1drqgzwlsmqvxkmhnm0kvk8
CAA{'type': 'CAA', 'critical': 0, 'issuewild': 'amazon.com; cansignhttpexchanges=yes'}
{'type': 'CAA', 'issue': 'pki.goog; cansignhttpexchanges=yes', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org; cansignhttpexchanges=yes'}
{'type': 'CAA', 'issue': 'digicert.com; cansignhttpexchanges=yes', 'critical': 0}
{'type': 'CAA', 'issue': 'amazon.com; cansignhttpexchanges=yes', 'critical': 0}
{'type': 'CAA', 'critical': 0, 'issuewild': 'pki.goog; cansignhttpexchanges=yes'}
{'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com; cansignhttpexchanges=yes'}
{'type': 'CAA', 'issue': 'letsencrypt.org; cansignhttpexchanges=yes', 'critical': 0}
RegistrationGoDaddy.com, LLC
registrarGoDaddy.com, LLC
registered2009-07-24
expires2028-07-24
last changed2026-08-12
ownerDomains By Proxy, LLC
nameserversalla.ns.cloudflare.com
apollo.ns.cloudflare.com
statusclient delete prohibited
client renew prohibited
client transfer prohibited
client update prohibited
registered 2009-07-24expires 2028-07-24
HTTPS certificate120 days left
validyes
issuerDigiCert Inc
coversid.me, www.id.me
protocolTLSv1.3
issued 2026-08-12expires 2027-02-26
DNSSECsecure

Domain is properly signed — chain validated by an independent validating resolver

. → me → id.me
Email authenticationexcellent
SPFpass v=spf1 include:0.spf.id.me ~all
DMARCpass policy reject
DKIMfound: google

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade A · 175/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
45/45missing: DKIM Presence
Advanced Security
25/25
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 14 lookups
SURBL MultidomainURIBL MultidomainSpamCop172.65.90.26Barracuda172.65.90.26UCEPROTECT Level 1172.65.90.26SpamCop172.65.90.27Barracuda172.65.90.27UCEPROTECT Level 1172.65.90.27SpamCop172.65.90.25Barracuda172.65.90.25UCEPROTECT Level 1172.65.90.25SpamCop172.65.90.24Barracuda172.65.90.24UCEPROTECT Level 1172.65.90.24

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=id.me" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=id.me"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on id.me. Reference: /llms.txt.

Watch id.me. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days