haveibeenpwned.com
Have I Been Pwned: Check if your email address has been exposed in a data breach
haveibeenpwned.com is registered with 1API GmbH since November 13, 2013 (13.0 years). The registration expires on November 13, 2034. The site runs on Cloudflare Web Analytics, Cloudflare, Cloudflare Turnstile and 2 other technologies. Its email security grade is B. Its SSL certificate is issued by Google Trust Services and is valid for 81 more days.
- Domain age
- 13.0 yrs
- Technologies
- 5
- Email security
- B
- SSL days left
- 81
Registration
| Registrar | 1API GmbH |
|---|---|
| IANA ID | 1387 |
| Registered | November 13, 2013 |
| Expires | November 13, 2034 |
| Updated | September 10, 2026 |
| Status | client transfer prohibited |
| Name servers | leah.ns.cloudflare.com, rob.ns.cloudflare.com |
| DNSSEC | Signed |
DNS records
| Type | Value | TTL |
|---|---|---|
| A | 104.16.123.33 | 292 |
| A | 104.16.124.33 | 292 |
| MX | mxa.mailgun.org 10 | 300 |
| MX | mxb.mailgun.org 10 | 300 |
| NS | rob.ns.cloudflare.com | 86400 |
| NS | leah.ns.cloudflare.com | 86400 |
| CAA | iodef 0 mailto:[email protected] | 300 |
| CAA | issue 0 ; | 300 |
| CAA | issue 0 comodoca.com | 300 |
| CAA | issue 0 digicert.com; cansignhttpexchanges=yes | 300 |
| CAA | issue 0 letsencrypt.org | 300 |
| CAA | issue 0 pki.goog; cansignhttpexchanges=yes | 300 |
| CAA | issue 0 ssl.com | 300 |
| CAA | issuewild 0 comodoca.com | 300 |
| CAA | issuewild 0 digicert.com; cansignhttpexchanges=yes | 300 |
| CAA | issuewild 0 letsencrypt.org | 300 |
| CAA | issuewild 0 pki.goog; cansignhttpexchanges=yes | 300 |
| CAA | issuewild 0 ssl.com | 300 |
| TXT | ALIAS for haveibeenpwned.azurewebsites.net | 300 |
| TXT | google-site-verification=aby67ZMcCdhQErk_d7cWepRI0wyUU5fknvGAqX8goS4 | 300 |
| TXT | keybase-site-verification=ImeAFts_XWPcJ4XKyCC-nGZekutZ-ks1WpqvlL6EcOM | 300 |
| TXT | v=spf1 include:mailgun.org include:sendgrid.net include:mail.zendesk.com -all | 300 |
| AAAA | 2606:4700::6810:7c21 | 120 |
| AAAA | 2606:4700::6810:7b21 | 120 |
Technology stack
SSL certificate
| Valid | Valid |
|---|---|
| Issuer | US, WE1, Google Trust Services |
| Expires | January 31, 2027 |
| Days remaining | 81 |
| Protocol | TLSv1.3 |
| Names | haveibeenpwned.com, cache.haveibeenpwned.com |
Email security
- warnSPF uses 8 of the 10 allowed DNS lookups. Adding another service may break it.
- warnNo MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
- warnNo TLS-RPT record, so you won't hear about failed encrypted deliveries.
- goodSPF record found.
- goodSPF ends with -all: servers you have not listed are rejected (hard fail).
- goodDMARC policy is reject: mail that fails authentication is blocked.
- goodDMARC aggregate reports are sent to mailto:[email protected].
- goodDKIM keys found (selector: s1, s2).
- good2 MX record(s) found. Mail is handled by Mailgun.
- goodBIMI record found: supporting inboxes can show your brand logo.
Homepage metadata
| Title | Have I Been Pwned: Check if your email address has been exposed in a data breach |
|---|---|
| Description | Have I Been Pwned (HIBP) is a data breach search and notification service used by security teams, developers, and MSPs worldwide. Search tens of billions of breached records, monitor corporate domains via API, and get alerted when new breaches appear. |
| Language | en |
| Canonical | https://haveibeenpwned.com/ |
| Structured data | SoftwareApplication |
| Indexable | Yes |
| Word count | 268 |
About haveibeenpwned.com
Who is the registrar of haveibeenpwned.com?
haveibeenpwned.com is registered with 1API GmbH (IANA ID 1387).
When does haveibeenpwned.com expire?
The current registration of haveibeenpwned.com expires on November 13, 2034. It was first registered on November 13, 2013.
What technology does haveibeenpwned.com use?
We detected 5 technologies on haveibeenpwned.com, including Cloudflare Web Analytics, Cloudflare, Cloudflare Turnstile, Content Security Policy, HSTS.
Does haveibeenpwned.com protect its email with SPF and DMARC?
haveibeenpwned.com scores 87/100 (grade B) for email security. SPF uses 8 of the 10 allowed DNS lookups. Adding another service may break it. No MTA-STS: mail sent to you can be downgraded to an unencrypted connection.
What are the name servers of haveibeenpwned.com?
haveibeenpwned.com uses rob.ns.cloudflare.com, leah.ns.cloudflare.com.