Domain Analyzer

What is a domain analyzer?

A domain analyzer is a tool that examines a website’s technical and structural elements. When you enter a domain name, it fetches data about the site’s security, hosting, ownership, and more. This can help you understand what a website is, who owns it, and how it operates.

What information does the tool provide?

The domain analyzer collects a wide range of data:

• Security details: It checks for security headers like HSTS and CSP, and analyzes the TLS certificate, including issuer and expiry date.
• DNS and DMARC: It retrieves DNS records, DMARC, CAA, and DNSSEC information.
• Registration data: It provides the domain’s registration date, registrar, expiry, and registry status.
• Server and hosting: It identifies the server location, hosting provider, and network (ASN).
• Website structure: It analyzes the homepage, including title, description, word count, headings, and detected platform fingerprints like WordPress.
• Schema.org types: It lists the types of schema.org data published on the site.
• Robots.txt and sitemap: It checks robots.txt rules and sitemap size, including AI crawler blocking.
• Redirect and canonicalization: It details redirect and canonicalization behavior.
• Error handling: It shows what the domain returns for a URL that does not exist.
• Third-party resources: It lists third-party hosts, cookies, and trackers.
• Common pages: It verifies the existence of about, contact, privacy, and terms pages at their usual paths.

What will the tool not tell me?

The domain analyzer does not provide traffic estimates, domain authority scores, or keyword rankings. These metrics cannot be determined by simply inspecting a domain. The tool focuses on measurable data like security, hosting, and technical setup.

What if a site blocks the check?

If a site blocks automated requests, the tool will still produce a report. This report will be labeled as blocked and will not include data derived from the page content. However, it will still show certificate, DNS, registration, and robots.txt details because these are served to everyone.

How does the tool handle privacy?

Building a report involves querying the domain registry over RDAP and an IP geolocation service. This process respects privacy by only accessing publicly available information. The location shown is where the responding server sits, which for sites behind a CDN is the CDN edge, not the company’s physical location.

What does it mean when a site is labeled as blocked?

A blocked label means the tool was unable to access the site’s content due to security measures like Cloudflare’s interstitial or a 403 error. Despite this, the report still provides valuable information about the site’s security, DNS, and registration.

How often is the data updated?

Reports are cached for 14 days. This means the data you see reflects the site’s status at the time the report was generated. For the most current information, you can regenerate the report after 14 days.

Why use a domain analyzer?

Using a domain analyzer helps you understand the technical aspects of a website. This can be useful for:

• Evaluating the security of a site before visiting.
• Investigating the ownership and hosting of a domain.
• Understanding how a site handles redirects and error pages.
• Identifying third-party resources and trackers used by a site.
• Checking for the existence of common pages like privacy policies.

### Table: What the Tool Measures Directly vs. What It Does Not Provide

| **Measured Directly** | **Not Provided** |
|————————————————|——————————————-|
| HTTP status and response time | Traffic estimates |
| TLS certificate, issuer, expiry, subdomains | Domain authority or ranking scores |
| Security headers (HSTS, CSP, etc.) | Keyword data |
| DNS records, DMARC, CAA, DNSSEC | |
| Registration data (date, registrar, expiry) | |
| Server location, hosting provider, ASN | |
| Homepage structure (title, description, etc.) | |
| Detected platform fingerprints | |
| Published schema.org types | |
| Robots.txt rules, sitemap size | |
| Redirect and canonicalization behavior | |
| Error handling for non-existent URLs | |
| Third-party hosts, cookies, trackers | |
| Existence of common pages (about, contact, etc.)| |

###
### How Often Is the Domain Report Refreshed?

When you use our free domain analysis tool, you might wonder how up-to-date the information is. The tool caches reports to ensure quick access and to manage server load efficiently. Typically, a domain report is refreshed every 7 to 14 days. This interval balances the need for current data with the practicalities of resource management. Caching also helps in providing a consistent user experience, as it reduces the variability in load times and ensures that the information you receive is stable over short periods.

However, there are exceptions. If a domain undergoes significant changes, such as a change in ownership or a major security incident, the tool may refresh the report more frequently. This ensures that users have access to the most relevant information when it matters most. Additionally, users can manually request a refresh if they believe the cached data is outdated. This manual refresh feature is particularly useful for domains that are frequently updated or for users who need the latest data for research purposes.

### What Does the Registration Date Tell Me?

The registration date of a domain can provide valuable insights, but it is important to understand its limitations. The date indicates when the domain was first registered with a domain registrar. This can give you an idea of the domain’s age, which might be useful for assessing the credibility or experience of a website. For instance, an older domain could suggest a more established presence on the internet.

However, the registration date does not tell you everything. It does not indicate when the website actually went live or when significant content updates occurred. A domain could be registered years ago but only recently have content published. Additionally, the registration date does not reveal any information about the purpose or nature of the website. For example, a domain registered recently could be for a new business, or it could be a rebranded version of an older site. Therefore, while the registration date is a useful piece of information, it should be considered alongside other data points for a comprehensive understanding.

### What Does the Security Headers Count Mean?

Security headers are a crucial part of a website’s defense against various online threats. The security headers count in our tool provides a simple metric to evaluate a domain’s security posture. This count reflects the number of security-related HTTP headers the website has implemented. Common security headers include Content-Security-Policy, X-Content-Type-Options, and Strict-Transport-Security, among others.

A higher count generally indicates a more robust security configuration, as the website is employing multiple layers of protection against common vulnerabilities. For instance, a site with a high security headers count is likely better protected against cross-site scripting (XSS) attacks and content injection. However, the count alone does not provide a complete picture. The quality and configuration of these headers are equally important. A website with fewer, but well-configured, security headers might be more secure than one with many poorly implemented headers.

It is also worth noting that the absence of certain security headers does not necessarily mean a site is insecure. Some headers are more critical than others, and the overall security of a site depends on a variety of factors, including server configuration, software updates, and user access controls. Therefore, while the security headers count is a useful indicator, it should be interpreted in the context of other security measures.

Frequently asked questions

13 domains analysed on this site.