Domain Analyzer

Is This Shopping Site Legit or a Scam?

Before you enter your credit card details on a new shopping site, use a domain analyzer. It checks if the site is newly registered and poorly secured. These are common signs of scam sites. The tool reveals:

• Registration date and registrar
• Security headers like HTTPS and HSTS
• SSL certificate validity
• Email security settings (DMARC)

Newly registered domains with missing security features are risky. Use the analyzer before shopping.

How Can I Verify a Website’s Security?

Protecting your data starts with verifying website security. A domain analyzer checks multiple security aspects:

• TLS/SSL Certificate: Valid certificate and issuer
• Security Headers: Checks for HSTS, CSP, and other protections
• DNS Security: DNSSEC and CAA records
• Subdomains: Lists subdomains listed in the certificate

These checks help identify insecure sites that could expose your information.

What Website Information Does the Analyzer Provide?

The tool gathers detailed information about any website:

• Server location and hosting provider
• IP address and network (ASN)
• Homepage title, description, and headings
• Detected platform (e.g., WordPress, Angular)
• Published schema.org types
• Robots.txt rules and AI crawler blocking
• Sitemap details
• Third-party hosts, cookies, and trackers
• Existence of about, contact, privacy, and terms pages

This information helps you understand how a website operates and who runs it.

What Won’t the Domain Analyzer Tell Me?

While the analyzer provides valuable insights, it has limitations:

The analyzer focuses on security and ownership, not performance metrics or search engine optimization.

What if a Site Blocks the Check?

Some websites block automated requests. If a site returns a Cloudflare interstitial or a 403 error to bots, the analyzer will still produce a report. However, the report will be labeled as blocked. It will show:

• TLS certificate details
• DNS records
• Registration information
• Robots.txt rules

Content-based information will be unavailable. This labeling helps you understand why certain data is missing.

Is My Privacy Protected When Using the Analyzer?

Yes, your privacy is protected. The analyzer only queries publicly available information. Building a report involves:

• Contacting the domain registry via RDAP
• Using an IP geolocation service

No personal data is collected or stored. The reports are public and cached for 14 days. This caching helps improve performance but does not compromise your privacy.

How Do I Interpret the Results?

Understanding the results requires some knowledge of web technologies. Here are some tips:

• High Security: Multiple security headers, valid SSL, DNSSEC, and DMARC
• Poor Security: Missing security headers, expired SSL, missing DNS security
• Legitimacy Indicators: Old registration date, known hosting providers, detailed contact information
• Red Flags: New registration, unusual hosting locations, missing contact pages

Use these guidelines to assess the trustworthiness of any website.

How Often is the Report Refreshed?

Our free domain-analysis tool generates reports by scanning a website’s publicly available data and cross-referencing it with multiple databases. However, it’s important to understand that these reports are not generated in real-time. Instead, they are refreshed periodically to ensure the information remains as current as possible without overloading our servers or the target websites with constant requests.

The frequency of report updates can vary depending on several factors, including the domain’s popularity and the rate of change in its data. On average, reports are refreshed every 24 to 48 hours. This means that if a website undergoes significant changes shortly after you run a check, those updates may not be reflected in the report immediately. For most users, this refresh rate provides a good balance between accuracy and performance.

It’s also worth noting that once a report is generated, it is cached to improve load times for subsequent users. This caching mechanism helps reduce the strain on our servers and ensures that you can access the information quickly. However, if you suspect that a website has undergone significant changes, you can always run a new analysis to get the most up-to-date report.

What Does the Registration Date Tell Me?

One of the key pieces of information provided by our tool is the domain’s registration date. This date can offer some insights into the website’s history and credibility. For instance, if a shopping or deals site contacts you and you find that it was registered very recently, this could be a red flag. Scammers often create new domains to avoid detection and then abandon them quickly after conducting fraudulent activities.

However, it’s important to understand that the registration date is not a definitive indicator of a website’s legitimacy. A newer domain could be a legitimate business that is just starting out, while an older domain could have been compromised and repurposed for malicious activities. Therefore, while the registration date is a useful piece of information, it should be considered alongside other factors such as the website’s content, design, and contact information.

In summary, the registration date can help you gauge the website’s age and potentially its credibility, but it should not be the sole basis for your judgment. Always look for additional signs of trustworthiness before making any decisions.

What Does the Security Headers Count Mean?

Another important aspect analyzed by our tool is the presence of security headers in the website’s HTTP response. Security headers are a type of HTTP header that web applications use to ensure the security of their users. They help protect against various types of attacks, such as cross-site scripting (XSS) and clickjacking.

The security headers count indicates how many of these protective measures the website has implemented. A higher count generally suggests that the website is taking steps to protect its users from common web vulnerabilities. However, the mere presence of security headers does not guarantee complete security. The quality and configuration of these headers also play a crucial role.

For example, a website might have a high security headers count but misconfigured headers that render them ineffective. Conversely, a website with a lower count might have well-configured headers that provide robust protection. Therefore, while the security headers count is a useful indicator, it should be interpreted in conjunction with other security measures and your own risk assessment.

In practice, a higher count is generally better, but it’s essential to understand that security is a multi-faceted issue that cannot be fully evaluated by a single metric. Use this information as part of a broader evaluation of the website’s security posture.

Frequently asked questions

12 domains analysed on this site.