The domain analyzer inspects any public domain and reports what it actually serves:
DNS and mail records, the TLS certificate, response headers, homepage metadata, detected
technology, structured data, and its robots.txt crawl policy including named AI crawlers.
Every figure is measured live at the moment you run it. Nothing is estimated and no
third-party SEO API sits behind it.
What does it check?
Each report covers nine areas, and each one is an observation rather than a score:
- Response — HTTP status, scheme, time to first byte, page size and compression.
- Technology — platform, framework and analytics fingerprints found in the markup and headers.
- Homepage metadata — title, meta description, H1, canonical, Open Graph, heading and image counts.
- TLS certificate — issuer, validity window, days remaining and the hostnames it covers.
- Security headers — HSTS, CSP, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy.
- DNS — A and AAAA records, reverse DNS, name servers, MX and SPF.
- robots.txt — whether one exists, declared sitemaps, and blanket crawl rules.
- AI crawler policy — whether GPTBot, ClaudeBot, PerplexityBot, Google-Extended, CCBot and others are allowed or blocked.
- Structured data — the schema.org types published on the homepage.
Why does this tool contact the server?
The other tools on this site run entirely in your browser because they can: formatting
JSON or decoding a JWT needs no network access. This one is different by necessity. A browser
cannot resolve DNS records, complete a TLS handshake against another host, or fetch a
third-party robots.txt — the same-origin policy forbids it. So the domain you enter is sent to
our server, which performs those lookups and returns the result.
Which third parties does the server contact?
Three, and only for the domain you asked about:
- The domain itself — its homepage, robots.txt, and a TLS handshake on port 443.
- The domain registry, over RDAP — this returns the registration and expiry dates. RDAP is the registries’ own successor to WHOIS, so the answer is authoritative rather than scraped.
- An IP geolocation service — to turn the resolved IP address into a hosting country and network operator. This lookup is made over plain HTTP on the free tier, and carries only the target’s public IP address.
Nothing about you is sent to any of them. They receive the domain or IP being analysed, not your address, and the site runs no analytics on tool pages.
That has a consequence worth stating plainly: the resulting report is a public page
at /website/<domain>/, and the domain you look up is stored. Only information
the domain already serves publicly to any visitor appears there. If you own a domain and want
its report removed, email us and it will be.
What this tool does not tell you
There is no traffic estimate, no authority score and no ranking data here, because none of
that can be measured by looking at a domain directly — it can only be modelled, and a modelled
number presented without its method is worse than no number. What you get is the observable
truth about a domain at one moment in time.
Response time is a single measurement from one server in one location. Treat it as a rough
signal, not a benchmark. Technology detection reads public fingerprints, so a site behind a CDN
or rendering entirely server-side will show less than it actually runs.
How often are reports refreshed?
A report is re-analysed when someone looks the domain up again and the stored result has
aged past the refresh window. Until then the cached report is served, so repeat lookups are
instant and cost nothing.