How is bol.com?
Looks fine
risk 0/100
Registered 29 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 475 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
475 ms
HTTPS
30 d
left on a Let's Encrypt certificate
Age
29 years
registered 1997-12-19
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records5 record types
| A | 79.170.100.62 |
|---|---|
| MX | 10 pro-mail-mx-003.bol.com 10 pro-mail-mx-004.bol.com |
| NS | ns-cloud-c4.googledomains.com ns-cloud-c2.googledomains.com ns-cloud-c1.googledomains.com ns-cloud-c3.googledomains.com |
| TXT | jamf-site-verification=YSBtYnCOMx_StMMd9v4Jag miro-verification=6481d8fb7d0a4c76c9247bd1357ad12275eb5df7 atlassian-domain-verification=qja4taTJdbIsec2dDapRlfHQ9aVoagPM9NNQhqtf6mosVthUada2eIHVBvOavB8d yI4CjFremeRILZz0hq69qQ+Peif++nUh+rUcU+2rI5whLjvSEBwa0uVrIXHve5DaiZNR4IJCmg9HoOaL8G7vEQ== dropbox-domain-verification=mrq43csxwfv7 v=spf1 ip4:185.14.169.192/27 ip4:185.14.168.192/27 ip4:185.14.168.0/27 ip4:185.14.171.64/28 ip4:185.14.171.80/28 ip4:185.14.168.64/27 ip4:91.194.0.0/26 include:spf1.bol.com include:spf.protection.outlook.com -all autodesk-domain-verification=WXcvEPa0neUYFznZf7VJ docusign=2391f023-cb58-4367-9285-9168007b3348 bv-domain-verification=8d9bd4a1eec6dbaa4aeaf6e415023126bd70b3bb7601e8cce590f04ec3ecc2d9 teamviewer-sso-verification=8f82ce6dec464d6a919cd91b44522ffb docusign=837af1f7-16f8-4082-af71-e3e93aaf3e83 google-site-verification=b29v9e4M_R0JbhbWF3Z1OKCJyKyFG2WWznLBZstmc0o MS=ms69858635 google-site-verification=HPcKu0g7W4T--dUqF8YLAdbs9aMxVZEqr9iRPqF1VxQ apple-domain-verification=2hTppDkURROP8SgX duna-domain-verification-xb9p5g=vHDOPJjSjsmU0z1I5d9aL5WSd google-site-verification=weUk-X03vju7fHFVPKkmd41QTZ9WTZufRMp_0Hc3_no docker-verification=c1a61b3c-598f-47b0-824d-f8fc46de1814 adobe-idp-site-verification=37d9adcf-fdfe-4135-9ba7-f4c4851881be docusign=ba572dac-d5db-430f-9c34-21a6192693e5 facebook-domain-verification=tizfmjk9p1z8o476jg4yyluaaxi4hi |
| CAA | {'type': 'CAA', 'iodef': 'mailto:abuse@bol.com', 'critical': 0} {'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'thawte.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'geotrust.com'} {'type': 'CAA', 'issue': 'geotrust.com', 'critical': 0} {'type': 'CAA', 'issue': 'thawte.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'} {'type': 'CAA', 'issue': 'globalsign.com', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'awstrust.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'globalsign.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com'} {'type': 'CAA', 'issue': 'awstrust.com', 'critical': 0} {'type': 'CAA', 'issue': 'digicert.com', 'critical': 0} |
RegistrationNom-iq Ltd. dba COM LAUDE
| registrar | Nom-iq Ltd. dba COM LAUDE |
|---|---|
| registered | 1997-12-19 |
| expires | 2026-12-18 |
| last changed | 2025-11-18 |
| nameservers | ns-cloud-c1.googledomains.com ns-cloud-c2.googledomains.com ns-cloud-c3.googledomains.com ns-cloud-c4.googledomains.com |
| status | client delete prohibited client transfer prohibited client update prohibited |
registered 1997-12-19expires 2026-12-18
HTTPS certificate30 days left
| valid | yes |
|---|---|
| issuer | Let's Encrypt |
| covers | bol.com |
| protocol | TLSv1.3 |
issued 2026-08-30expires 2026-11-28
DNSSECsecure
Domain is properly signed — chain validated by an independent validating resolver
. → com → bol.com
Email authenticationexcellent
| SPF | pass v=spf1 ip4:185.14.169.192/27 ip4:185.14.168.192/27 ip4:185.14.168.0/27 ip4:185.14.171.64/28 ip4:185.14.171.80/28 ip4:185.14.168.64/27 ip4:91.194.0.0/26 include:spf1.bol.com include:spf.protection.outlook.com -all |
|---|---|
| DMARC | pass policy quarantine |
| DKIM | found: selector1, selector2 |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 170/205
Basic Security10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security45/45missing: DKIM Presence
Advanced Security20/25missing: IPv6 Support
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop79.170.100.62Barracuda79.170.100.62UCEPROTECT Level 179.170.100.62
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=bol.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=bol.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on bol.com.
Reference: /llms.txt.
Watch bol.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days