Evidence before trust
Most domain lookups show you what is true today. We keep what was true yesterday too, so a change in ownership, routing or a certificate is something you can see rather than something you have to take on faith.
Observe
Registration data over RDAP, DNS records, the TLS certificate and the website itself, collected on a schedule.
Preserve
Every meaningful change is kept, with the value it replaced and when we first and last saw it.
Monitor
Tell us where to send alerts and we report what changed, when it changed, and what was there before.
Verify
Owners prove control with one DNS record, which puts a verified badge on their public page.
An unknown supplier emailed us a payment link. What do we know about them?
- How old the domain is, and what it resolves to
- Whether it publishes SPF and DMARC, which most throwaway domains do not
- No account, no CAPTCHA, nothing to install
Tell me when something about my domain needs my attention.
- Expiry and registration status, well before a renewal is missed
- DNS, certificate and website changes you did not make
- Your first domain needs only an email address
Where the evidence comes from
Everything on a domain page is public information, collected the same way any visitor could. We store it so the history exists when someone needs it.
RDAP
The registry that answers for the domain, found through IANA's bootstrap file.
DNS
A, AAAA, MX, NS, TXT, CAA, SOA and the DMARC policy, from public resolvers.
TLS
The certificate presented during the handshake: issuer, validity and the names it covers.
Website
Status, redirects, page title and a fingerprint of the visible text.
What we do not do
- Call a domain safe or fraudulent. We describe what was observed and when. The judgement is yours to make.
- Publish personal details. Registrant contact data is redacted at the registry, and we show it as redacted.
- Overwrite what we saw before. An observation is never edited, only added to.