tamper[box]

Domains, registration & hosting tools

Understand a domain’s registration and public infrastructure.

Choose a check

Check availability and registry records, then investigate hosting networks, CDN and DNS providers, visible technologies and discovered names. Domain Health gives a broader starting assessment. Public evidence can be incomplete; registration and network ownership do not identify an individual visitor.

Tools in this collection

    • See which services leave clues in a domain's public DNS records.
    • See which services a domain verified through TXT records.
    • Find mail senders named in a domain's SPF record.
    • Cleaning up DNS? Spot verification records you no longer use.
    • Researching a company? See the SaaS tools it signals.

    Identify service verification patterns in TXT records and mail senders named in SPF.

    • Taking over a website? Find the networks serving it.
    • Who hosts a site? See the network behind each address.
    • Moving a site? Confirm it now resolves to the new host.
    • Unknown site in your logs? Find its ASN and country.
    • Follow CNAMEs to the addresses that actually serve it.

    Follow a domain to its addresses and name the network, ASN and country behind each.

  • CDN & Proxy Detector

    Runs on server
    • Find out whether a CDN or proxy sits in front of a website.
    • Is a site behind Cloudflare, Fastly, Akamai or CloudFront?
    • Changes not showing? Check whether a CDN cache is in front.
    • Debugging headers? See which ones a proxy adds.
    • Researching a site's stack? Find its edge provider.

    Is a site behind Cloudflare, Fastly, Akamai or CloudFront? Three signals decide.

  • DNS Provider Lookup

    Runs on server
    • Need to change DNS? Find out which provider runs it.
    • Need to edit DNS? Find out where the zone is hosted.
    • Taking over a domain? See who runs its DNS today.
    • Moving to a new DNS host? Confirm the switch took effect.
    • Mixed nameserver providers? See each one listed.

    Name who runs DNS for a domain from its NS records, and compare nameserver providers.

    • Curious what a website is built with? Look for clues in its pages.
    • Is it WordPress? See which CMS a site runs.
    • See the frameworks and analytics a page loads.
    • Each finding shows the line that gives it away.
    • Researching a competitor? See what they built with.

    Detect the CMS, frameworks and analytics of a site, with the line that gives each away.

  • Subdomain Finder

    Runs on server
    • Find forgotten or unexpected hostnames in public certificate records.
    • Auditing your attack surface? List subdomains from CT logs.
    • Spot hostnames that look internal, like staging or dev.
    • Find forgotten names that still have certificates.
    • Taking over a domain? See every name issued for it.

    List subdomains from Certificate Transparency logs, and flag the ones that look internal.

    • Got a name for your next project? Check whether the domain is available.
    • Got a name idea? See whether the domain is free.
    • Name taken? Check when it expires.
    • Waiting for a domain to drop? See its status codes.
    • Buying a domain? See how old it is first.

    Check if a domain is free; for a registered one, its age, expiry and status codes.

  • WHOIS & RDAP Lookup

    Runs on server
    • Find where a domain is registered and when its registration expires.
    • Domain about to expire? Check the date.
    • Who is the registrar? Find where to transfer from.
    • Transfer blocked? Check the domain's lock statuses.
    • Abuse from an IP? Find the network's abuse contact.

    Read a domain’s registrar, dates, locks, nameservers and DNSSEC from the registry.

  • Domain Health Checker

    Runs on server
    • Taking over a domain? Get a starting list of things to check and fix.
    • Inherited a domain? Get one report on DNS, email and HTTPS.
    • Before a launch, check the basics are in place.
    • Each finding comes with the fix to apply.
    • See which security headers and email records are missing.

    DNS, email authentication, HTTPS and security headers in one report, each with a fix.