How is xbox.com?
Looks fine
risk 0/100
Registered 30 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 409 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
409 ms · ends at www.xbox.com
HTTPS
93 d
left on a Microsoft Corporation certificate
Age
30 years
registered 1996-12-18
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records6 record types
| A | 20.76.201.171 20.231.239.246 20.112.250.133 20.70.246.20 20.236.44.162 |
|---|---|
| AAAA | 2603:1030:b:3::152 2603:1010:3:3::5b 2603:1030:c02:8::14 2603:1030:20e:3::23c 2603:1020:201:10::10f |
| MX | 10 xbox-com.mail.protection.outlook.com |
| NS | ns1-205.azure-dns.com ns3-205.azure-dns.org ns4-205.azure-dns.info ns2-205.azure-dns.net |
| TXT | facebook-domain-verification=yvcz1zil7qv3biswf68ikkxkh1nsoh AFDVALIDATION=Xbox b1939PPDAGDjXs+54riWGyuzfCM+s+PE66uPOHEQ+9z264YnfenE2CVrUxq+5UGTDqiOU8JqZ5AKRvfcUVpfXQ== google-site-verification=e70dJcpsqnXzda_PC9I_VO_bpU9hlMlqhtvsxegHEQc facebook-domain-verification=n2md3enk4k9r4s6kylpqmekhxyyrq7 atlassian-domain-verification=xvoaqRfxSg3PnlVnR4xCSOlKyw1Aln0MMxRiKXnwWroFG7vI76TUC8xYb03MwMXv adobe-idp-site-verification=8aa35c528af5d72beb19b1bd3ed9b86d87ea7f24b2ba3c99ffcd00c27e9d809c v=spf1 ip4:65.55.42.0/24 ip4:65.55.76.0/24 mx:xbox.com include:_spf-ssg-a.microsoft.com include:spf.protection.outlook.com -all google-site-verification=jRoICv0mMREqo5IthM1McDzE_8rRtEYtSVtHmOTUoJA docusign=c2837ae3-ac1e-446d-b257-c2328dce901a |
| CAA | {'type': 'CAA', 'critical': 0, 'contactemail': 'caarecordaware@microsoft.com'} |
RegistrationCSC Corporate Domains, Inc.
| registrar | CSC Corporate Domains, Inc. |
|---|---|
| registered | 1996-12-18 |
| expires | 2026-12-17 |
| last changed | 2025-12-14 |
| owner | Microsoft Corporation |
| nameservers | ns1-205.azure-dns.com ns2-205.azure-dns.net ns3-205.azure-dns.org ns4-205.azure-dns.info |
| status | client transfer prohibited server delete prohibited server transfer prohibited server update prohibited |
registered 1996-12-18expires 2026-12-17
HTTPS certificate93 days left
| valid | yes |
|---|---|
| issuer | Microsoft Corporation |
| covers | myservice.surface.com, xbox.com, myservice.xbox.com, microsoft.cz, www.microsoft.cz, www.winhec.net, www.winhec.com, winhec.net, winhec.com, microsoft.eu, www.microsoft.eu, windows.com |
| protocol | TLSv1.3 |
issued 2026-10-22expires 2027-01-30
DNSSECinsecure
Domain is not signed with DNSSEC
. → com → xbox.com
Email authenticationexcellent
| SPF | pass v=spf1 ip4:65.55.42.0/24 ip4:65.55.76.0/24 mx:xbox.com include:_spf-ssg-a.microsoft.com include:spf.protection.outlook.com -all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: selector1, mx |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 170/205
Basic Security20/40missing: DNSSEC Enabled
Record Security45/45missing: DKIM Presence
Advanced Security20/25missing: Mail Server Configuration
Domain Reputation50/50
Threat Detection35/45missing: Fast-Flux Detection, Domain Age Check
Blocklists0 listings · 17 lookups
SURBL MultidomainURIBL MultidomainSpamCop20.70.246.20Barracuda20.70.246.20UCEPROTECT Level 120.70.246.20SpamCop20.231.239.246Barracuda20.231.239.246UCEPROTECT Level 120.231.239.246SpamCop20.112.250.133Barracuda20.112.250.133UCEPROTECT Level 120.112.250.133SpamCop20.236.44.162Barracuda20.236.44.162UCEPROTECT Level 120.236.44.162SpamCop20.76.201.171Barracuda20.76.201.171UCEPROTECT Level 120.76.201.171
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=xbox.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=xbox.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on xbox.com.
Reference: /llms.txt.
Watch xbox.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days