Domain Analyzer

Why should I check a website before entering my card details?

Before you enter your credit card information or other sensitive data on a website, it’s crucial to ensure that the site is legitimate and secure. Our free domain analyzer helps you do just that by providing a comprehensive report on the website’s security, infrastructure, and other important factors. This can help you avoid scams, protect your financial information, and ensure a safe online experience.

What does the domain analyzer check?

Our domain analyzer performs a thorough examination of the website, including:

• HTTP status and response time: Checks if the site is up and how quickly it responds.
• TLS certificate and expiry: Verifies the site’s SSL/TLS certificate and its expiration date.
• Security headers: Identifies whether six key security headers are set to protect against common web vulnerabilities.
• DNS and DMARC/CAA/DNSSEC records: Examines the domain’s DNS records, including DMARC, CAA, and DNSSEC for enhanced security.
• Registration details: Provides the registration date and registrar information from RDAP.
• Server location and network: Shows where the server is located and the network it is on.
• Homepage analysis: Analyzes the homepage’s title, description, word count, and headings.
• Platform fingerprints: Detects platform fingerprints to identify the technology stack used by the website.
• Schema.org types: Identifies the types of schema.org data published on the site.
• Robots.txt rules: Checks the robots.txt file, including whether GPTBot and ClaudeBot are blocked.
• Sitemap size: Reports on the size of the sitemap.
• Redirect behaviour: Analyzes the site’s redirect behaviour.
• Third-party hosts and cookies: Lists third-party hosts and cookies used by the site.
• Existence of key pages: Checks for the existence of about, contact, privacy, and terms pages.

How do I read the domain analyzer report?

The report is designed to be easy to understand, with clear labels and explanations for each section. Here’s a quick guide:

• HTTP Status: Look for a 200 status code, indicating the site is up. Other codes may suggest issues.
• TLS Certificate: Ensure the certificate is valid and not expired.
• Security Headers: More headers generally mean better security.
• DNS Records: Check for DMARC, CAA, and DNSSEC to ensure the domain is protected against email spoofing and other threats.
• Registration Details: Verify the registration date and registrar information for legitimacy.
• Server Location: Be wary of sites hosted in high-risk countries.
• Platform Fingerprints: Familiarize yourself with the technology stack to ensure it aligns with the site’s purpose.
• Robots.txt: Check if the site allows search engine bots, which can indicate its visibility and accessibility.
• Third-Party Hosts and Cookies: Be aware of third-party services used by the site, as they may have access to your data.
• Key Pages: The existence of about, contact, privacy, and terms pages can indicate a more trustworthy site.

What won’t the domain analyzer tell me?

While our domain analyzer provides valuable insights, it does not offer:

• Traffic estimates: Information on the site’s visitor numbers or popularity.
• Authority or ranking scores: Metrics like Domain Authority or PageRank.
• Keyword data: Insights into the keywords the site ranks for.

These aspects are not relevant to assessing the site’s security and legitimacy, which is the primary purpose of our tool.

What does it mean if a site is blocked?

If a site blocks automated requests, our tool will still provide a report, but it will be labeled as “blocked.” This means that no content was taken from the page, although certificate, DNS, registration, and robots.txt facts are still shown. This is important to note, as it indicates the site may be actively trying to prevent analysis, which could be a red flag.

Who uses the domain analyzer?

Our tool is used by a wide range of individuals and organizations, including:

• Consumers: Who want to verify the legitimacy of a site before making a purchase.
• Businesses: That need to assess the security of their own sites or those of partners.
• Researchers: Who are studying web security and infrastructure.
• Cybersecurity Professionals: Who use it as part of their security assessments.

Is my privacy protected when using the domain analyzer?

Yes, your privacy is important to us. We do not collect or store any personal information when you use our tool. The reports are public and cached for 14 days, but they do not contain any data that can be traced back to you. Building a report involves querying the domain registry and an IP geolocation service, but this information is not linked to your identity.

FAQ

Frequently asked questions

74 domains analysed on this site.