How is bit.ly?
Looks fine
risk 0/100
Registered 18 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 70 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
70 ms · ends at bitly.com
HTTPS
107 d
left on a Amazon certificate
Age
18 years
registered 2008-05-17
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records5 record types
| A | 67.199.248.11 67.199.248.10 |
|---|---|
| MX | 20 alt2.aspmx.l.google.com 10 aspmx.l.google.com 30 aspmx2.googlemail.com 20 alt1.aspmx.l.google.com 30 aspmx3.googlemail.com |
| NS | ns-1372.awsdns-43.org ns-cloud-c4.googledomains.com ns-276.awsdns-34.com ns-cloud-c3.googledomains.com ns-705.awsdns-24.net ns-1766.awsdns-28.co.uk ns-cloud-c2.googledomains.com ns-cloud-c1.googledomains.com |
| TXT | slack-domain-verification=MkeV937L2HSoy5NFJUcwGD4mo6Qguojp2v8Ny0oX openai-domain-verification=dv-enGte8sEHDo7E13TnxTOPn5k apple-domain-verification=6YYbatV9m7YWHrdw MS=ms11124067 pendo-domain-verification=A9upe8Q9GaiHBImbovsky6UD_tc miro-verification=fac1aeff65bb8e30ec8efd62a6ba02f2ce19a82c rippling-domain-verification=2158fad3c83e3179 anthropic-domain-verification-tzcmah=HSWn0K6bK99Nsdu2zAo6rVUnK v=spf1 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com include:_spf1.mailgun.org include:_spf2.mailgun.org include:_spf.eu.mailgun.org exists:%{i}._spf.mta.salesforce.com -all 2205ECE8B9 yandex-verification: 41b3ec866726729d 9ab819f3-2495-4611-856e-26a99cb9e4ba google-site-verification: zhEwFAQvtUWYInQtt81loDiZmomsEmkAbuRsSSxk1YI atlassian-domain-verification=Th+HeZjMKa3QxX9JqLt67kxMrAsEfB9gz51iuPZYjYbveQXnMLmOBQtqalJXXWmO |
| CAA | {'type': 'CAA', 'critical': 0, 'issuewild': ';'} {'type': 'CAA', 'issue': 'amazon.com', 'critical': 0} {'type': 'CAA', 'iodef': 'mailto:abuse@bit.ly', 'critical': 0} |
RegistrationLibyan Spider Network (int)
| registrar | Libyan Spider Network (int) |
|---|---|
| registered | 2008-05-17 |
| expires | 2032-05-17 |
| last changed | 2022-04-18 |
| owner | Bitly, Inc. |
| country | US |
| nameservers | ns-1372.awsdns-43.org ns-705.awsdns-24.net ns-cloud-c1.googledomains.com ns-cloud-c3.googledomains.com ns-cloud-c2.googledomains.com |
| status | client transfer prohibited client delete prohibited DS automation disabled NS automation disabled |
registered 2008-05-17expires 2032-05-17
HTTPS certificate107 days left
| valid | yes |
|---|---|
| issuer | Amazon |
| covers | bit.ly, www.bit.ly |
| protocol | TLSv1.3 |
issued 2026-07-27expires 2027-02-09
DNSSECinsecure
Domain is not signed with DNSSEC
. → ly → bit.ly
Email authenticationgood
| SPF | pass v=spf1 include:_netblocks.google.com include:_netblocks2.google.com include:_netblocks3.google.com include:_spf1.mailgun.org include:_spf2.mailgun.org include:_spf.eu.mailgun.org exists:%{i}._spf.mta.salesforce.com -all |
|---|---|
| DMARC | warning policy none |
| DKIM | found: google |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 173/205
Basic Security20/40missing: DNSSEC Enabled
Record Security38/45missing: DMARC Record, DKIM Presence
Advanced Security20/25missing: IPv6 Support
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop67.199.248.11Barracuda67.199.248.11UCEPROTECT Level 167.199.248.11SpamCop67.199.248.10Barracuda67.199.248.10UCEPROTECT Level 167.199.248.10
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=bit.ly" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=bit.ly"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on bit.ly.
Reference: /llms.txt.
Watch bit.ly. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days