Domain Security Check

Inspect public DNS, web availability, redirects, TLS, hosting signals, parking indicators, and optional registration details.

Public hosts only. Private, internal and local destinations are refused, and so are redirects to them.

Single domain Bulk domains

One domain, with every option below, including Shodan, available on this tab.

Schemes and paths are accepted and reduced to the hostname. Lines starting with # are ignored. Shodan is not available on this tab — switch to Single domain for exposed-services lookup.

Registration lookup

Include registration details (RDAP) Look up registration for every domain

RDAP adds registrar, creation, expiry and status where a registry publishes them. Both are on by default because that registration detail is usually the point of the scan. Registries rate-limit RDAP, so a run with it enabled for every domain takes noticeably longer than one without — turn the second option off to limit RDAP to parked, blocked or unreachable candidates and get a faster scan.

Exposed services

Look up exposed ports and services (Shodan)

Off by default — this uses a shared, limited monthly quota, so it is only offered for a single domain at a time, never a bulk run. Data from Shodan (shodan.io).

Exposed services (Shodan) is only available on the Single domain tab.

Certificate history

Look up certificate history (Certificate Transparency)

Off by default — this uses a shared, rate-limited service, so it is only offered for a single domain at a time, never a bulk run. It lists the certificates still valid for the domain that public Certificate Transparency logs hold. Certificate Transparency data from SSLMate Certificate Search

Certificate history is only available on the Single domain tab.

Up to 100 unique domains per run. Domain names are sent to public DNS, website and — when you enable them — RDAP, Shodan and SSLMate services. A finished scan is held in memory for 30 minutes so the table and its downloads agree, then dropped; nothing is written to disk and nothing is logged.

Results appear here once the check completes.

About this check

DNS resolution uses DNS-over-HTTPS. Availability, redirect, TLS and hosting signals come from direct requests to each domain; parking and for-sale indicators are heuristics over the response, not a registry statement. Registration details, when enabled, come from RDAP — the registry-published successor to WHOIS.