How is onetag-sys.com?

Looks fine risk 0/100

Registered 12 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 79 ms.

Why

02050100

finecarefulhigh risk

·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.

Site

200

79 ms

HTTPS

86 d

left on a DigiCert Inc certificate

Age

12 years

registered 2015-04-05

Blocklists

listings across 5 lists

Everything we looked at

DNS records4 record types

A	51.222.39.185 51.222.239.232 51.222.39.184 51.222.239.230 51.222.39.187 51.222.39.186
NS	ns11.constellix.com ns21.constellix.com ns31.constellix.com ns41.constellix.net ns51.constellix.net ns61.constellix.net
TXT	facebook-domain-verification=6yxgi4z4315qewbjyndmdc1q0dhk4x facebook-domain-verification=rqujr9qqbaho6fg06a057o5ocoq9xe sdxmgq3p0x5ctx0npp5v11r73m6gw44t py92vgby0ggv91rk2461pmb6gz8t4lmt _zvyxxiok85q8192vz5yos4t49i4ouqt
CAA	{'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0} {'type': 'CAA', 'issue': 'digicert.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'} {'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com'}

RegistrationGoDaddy.com, LLC

registrar	GoDaddy.com, LLC
registered	2015-04-05
expires	2027-04-05
last changed	2024-04-23
nameservers	ns11.constellix.com ns21.constellix.com ns31.constellix.com ns41.constellix.net ns51.constellix.net ns61.constellix.net
status	client delete prohibited client renew prohibited client transfer prohibited client update prohibited

registered 2015-04-05expires 2027-04-05

HTTPS certificate86 days left

valid	yes
issuer	DigiCert Inc
covers	*.onetag-sys.com, onetag-sys.com
protocol	TLSv1.3

issued 2025-12-23expires 2027-01-22

DNSSECinsecure

Domain is not signed with DNSSEC

. → com → onetag-sys.com

Email authenticationpoor

SPF	none
DMARC	pass policy reject
DKIM	none of 1 common selectors

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 150/205

Basic Security

20/40missing: DNSSEC Enabled

Record Security

30/45missing: SPF Record, DKIM Presence

Advanced Security

5/25missing: Mail Server Configuration, SOA Record Configuration, IPv6 Support

Domain Reputation

50/50

Threat Detection

45/45missing: Domain Age Check

Blocklists0 listings · 17 lookups

SURBL MultidomainURIBL MultidomainSpamCop51.222.39.187Barracuda51.222.39.187UCEPROTECT Level 151.222.39.187SpamCop51.222.239.230Barracuda51.222.239.230UCEPROTECT Level 151.222.239.230SpamCop51.222.39.186Barracuda51.222.39.186UCEPROTECT Level 151.222.39.186SpamCop51.222.239.232Barracuda51.222.239.232UCEPROTECT Level 151.222.239.232SpamCop51.222.39.184Barracuda51.222.39.184UCEPROTECT Level 151.222.39.184

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=onetag-sys.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=onetag-sys.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on onetag-sys.com. Reference: /llms.txt.

Watch onetag-sys.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days