Tools
The same checks as on the site, except the domain is already yours — pick it from the list instead of typing it.
Domain and DNS
- Domain passportWhose domain it is, paid until when, what the site and email are doing
- DNS diagnosticsEvery record on every NS separately, and the differences between them
- Record propagationWhether a record change has spread across resolvers
- DNSSEC checkThe signature chain and how long the signatures hold
- IDN converterCyrillic ↔ punycode and a check for mixed alphabets
- Email checkMX, SPF, DKIM, DMARC and TLS on the mail servers
- SPF generator and checkBuild a record from questions, or check the one you have
- DMARC generator and checkThe same for DMARC, with every parameter explained
- Email header analysisWhere a message travelled and whether the sender checks passed
- BlocklistsWhether the domain or mail IP has landed on a blocklist
Certificates and keys
- Certificate checkValidity, chain, issuer and the state of the certificate
- TLS vulnerabilitiesProtocol versions, ciphers and known server vulnerabilities
- CSR generatorA request and key for somebody else’s server — computed in your tab
- CSR and certificate decoderWhat a request or certificate actually says
- Key and certificate — a pair?Whether the key matches the certificate — before you restart the server
- Password generatorA random password from the browser’s randomness source
The four tools below run in your browser: the request, the key and the password go nowhere — not to us, not to anyone else.
Site and watching
- Site availabilityResponse code and time from three points, and the redirect chain
- Headers and redirectsSecurity headers, HSTS and where the redirect chain leads
- Look-alike domainsLook-alike names and homoglyphs aimed at your brand
- My IPYour IPv4 and IPv6, provider and autonomous system
- Bulk actionsCheck a whole batch of domains in one operation
Worth knowing
We do not store check results
A tool shows the state as of this minute and leaves no trace in the account. A history of states is monitoring, a separate product.
The checks are public
The same pages are open without signing in, and anyone can see the result for your domain. Nothing from your account goes into them.
A one-off check is not watching
A tool answers when you open it. For a broken certificate or a vanished record to reach you at night, the domain has to be under monitoring.