How is tinyurl.com?
Looks fine
risk 0/100
Registered 25 years ago, on no blocklists we checked, valid HTTPS, the site answered 200 in 206 ms.
Why
02050100
finecarefulhigh risk
- ·Nothing in the checks added risk.
Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
200
206 ms
HTTPS
38 d
left on a Google Trust Services certificate
Age
25 years
registered 2002-01-27
Blocklists
0
listings across 5 lists
Everything we looked at
DNS records6 record types
| A | 104.18.111.161 104.17.112.233 |
|---|---|
| AAAA | 2606:4700::6812:6fa1 2606:4700::6811:70e9 |
| MX | 5 alt2.aspmx.l.google.com 10 aspmx2.googlemail.com 5 alt1.aspmx.l.google.com 10 aspmx3.googlemail.com 1 aspmx.l.google.com |
| NS | liberty.ns.tinyurl.com constitution.ns.tinyurl.com freedom.ns.tinyurl.com revolution.ns.tinyurl.com |
| TXT | facebook-domain-verification=6nzev667vdzi0ht45dp76uk1gki9wp malcolm-domain-verification=rVLCUs6CQuNL5h2ZYSd0bLQASS16WMTnbupE google-site-verification=koRGOiDnSuSNELGLaRqlhmyrKy7NGt58rV-rFHpN668 brave-ledger-verification=8a5bd9de6adbb2eb6dcc6a703e15aaab10bbb2da95896df14977148b0ce8c6d8 atlassian-domain-verification=Yp8nBgqtatID18UEVvPMs0qisMJ2CmcJR2/Fuau6X9lixfs4MJ0zDJFQ5Daxcoam atlassian-domain-verification=ZbfgGSH1vw9DeOVXGXb24Vab0WyFZWYM4IQ3rAYl2UqH0Nu/LGyWtluxw7ikUyvz have-i-been-pwned-verification=dweb_0c1gcbtkpyognw624f8y040u atlassian-sending-domain-verification=c71f72ec-1650-472b-97d8-5e51f6ef8756 anthropic-domain-verification-3vdhz1=UPC4e20lOLBzUiBsVLgXSfj4H v=spf1 include:_spf.google.com include:spf.mandrillapp.com include:sendgrid.net -all |
| CAA | {'type': 'CAA', 'critical': 0, 'issuewild': 'comodoca.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'digicert.com; cansignhttpexchanges=yes'} {'type': 'CAA', 'issue': 'letsencrypt.org', 'critical': 0} {'type': 'CAA', 'issue': 'digicert.com; cansignhttpexchanges=yes', 'critical': 0} {'type': 'CAA', 'critical': 0, 'issuewild': 'sectigo.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'ssl.com'} {'type': 'CAA', 'critical': 0, 'issuewild': 'pki.goog; cansignhttpexchanges=yes'} {'type': 'CAA', 'critical': 0, 'issuewild': 'letsencrypt.org'} {'type': 'CAA', 'issue': 'comodoca.com', 'critical': 0} {'type': 'CAA', 'issue': 'sectigo.com', 'critical': 0} {'type': 'CAA', 'issue': 'pki.goog; cansignhttpexchanges=yes', 'critical': 0} {'type': 'CAA', 'issue': 'ssl.com', 'critical': 0} |
RegistrationTucows Domains Inc.
| registrar | Tucows Domains Inc. |
|---|---|
| registered | 2002-01-27 |
| expires | 2035-01-27 |
| last changed | 2025-11-19 |
| owner | TinyURL, LLC |
| nameservers | constitution.ns.tinyurl.com freedom.ns.tinyurl.com liberty.ns.tinyurl.com revolution.ns.tinyurl.com |
| status | client transfer prohibited client update prohibited |
registered 2002-01-27expires 2035-01-27
HTTPS certificate38 days left
| valid | yes |
|---|---|
| issuer | Google Trust Services |
| covers | tinyurl.com, *.tinyurl.com |
| protocol | TLSv1.3 |
issued 2026-09-04expires 2026-12-03
DNSSECinsecure
Domain is not signed with DNSSEC
. → com → tinyurl.com
Email authenticationexcellent
| SPF | pass v=spf1 include:_spf.google.com include:spf.mandrillapp.com include:sendgrid.net -all |
|---|---|
| DMARC | pass policy reject |
| DKIM | found: google, s1, s2 |
Whether mail claiming to be from this domain can be checked as genuine.
Security scoregrade A · 175/205
Basic Security10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security45/45missing: DKIM Presence
Advanced Security25/25
Domain Reputation50/50
Threat Detection45/45missing: Domain Age Check
Blocklists0 listings · 8 lookups
SURBL MultidomainURIBL MultidomainSpamCop104.17.112.233Barracuda104.17.112.233UCEPROTECT Level 1104.17.112.233SpamCop104.18.111.161Barracuda104.18.111.161UCEPROTECT Level 1104.18.111.161
Green: clean. Red: listed. Grey: the list did not answer.
Ask it yourself
Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.
curl "https://how.is/v1/domain/trust?domain=tinyurl.com" \
-H "Authorization: Bearer $HOWIS_KEY"
# or pay per call in USDC (x402), no key: the 402 tells your agent the price
curl -i "https://how.is/v1/domain/profile?domain=tinyurl.com"
MCP: add https://how.is/mcp to Claude, Codex or Cursor
(one-line install) and ask for domain_trust on tinyurl.com.
Reference: /llms.txt.
Watch tinyurl.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.
Watch — $1 / 30 days