How is t.co?
Not sure yet
risk 10/100
On no blocklists we checked, valid HTTPS, the site answered 200 in 58 ms.
Why
02050100
finecarefulhigh risk
- +10Could not read the domain's registration record.
- ·Could not check registration; retry before trusting this domain.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
58 ms
HTTPS
39 d
left on a Let's Encrypt certificate
Age
?
creation date not reported
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records3 record types
| A | 162.159.140.229 |
|---|---|
| NS | a.r06.twtrdns.net a.u06.twtrdns.net b.r06.twtrdns.net b.u06.twtrdns.net c.r06.twtrdns.net c.u06.twtrdns.net d.r06.twtrdns.net d.u06.twtrdns.net |
| TXT | 1nfb08f5jkpy0flhn6lwml2vk7x34hrd 1z8q6j6wymwb6bh0t3q28tp7vsbgnh6d 48qgbs8f2v055y997kpf4cx2302fzfs2 v=spf1 -all |
Registrationregistrar not reported
HTTPS certificate39 days left
| valid | yes |
|---|---|
| issuer | Let's Encrypt |
| covers | t.co |
| protocol | TLSv1.3 |
issued 2026-09-06expires 2026-12-05
DNSSECinsecure
Domain is not signed with DNSSEC
. → co → t.co
Email authenticationfair
| SPF | pass v=spf1 -all |
|---|---|
| DMARC | pass policy reject |
| DKIM | none of 1 common selectors |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade B · 145/205
Basic Security10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security30/45missing: CAA Records, DKIM Presence
Advanced Security10/25missing: Mail Server Configuration, IPv6 Support
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 5 lookups
SURBL MultidomainURIBL MultidomainSpamCop172.66.0.227Barracuda172.66.0.227UCEPROTECT Level 1172.66.0.227
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=t.co" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=t.co"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on t.co.
Reference: /llms.txt.
Watch t.co. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days