Domain Analyzer

Why should I check a website before uploading my files?

Before you upload your files to a converter, downloader, or editor site, it’s important to ensure the site is secure and trustworthy. Uploading files to an unsafe site can lead to data breaches, malware infections, or unauthorized access to your information. A domain analyzer helps you assess these risks by providing detailed information about the site’s security measures, hosting provider, and other technical aspects.

What security details does the tool check?

The domain analyzer examines several key security features:

• HSTS: Checks if the site uses HTTP Strict Transport Security to enforce secure connections.
• CSP: Verifies the presence of a Content Security Policy to mitigate cross-site scripting and other attacks.
• X-Frame-Options: Determines if the site is protected against clickjacking by restricting how the site can be framed.
• X-Content-Type-Options: Ensures the site protects against MIME type sniffing attacks.
• Referrer-Policy: Checks if the site controls the information sent in the Referer header.
• Permissions-Policy: Examines if the site defines which browser features it can use.

What technical aspects does the tool analyze?

The tool provides insights into various technical aspects of the website:

• TLS Certificate: Details about the site’s SSL/TLS certificate, including issuer, expiry, and the subdomains it covers.
• DNS Records: Information about the site’s DNS records, including DMARC, CAA, and DNSSEC.
• Server Location: The geographical location of the server hosting the site, which can indicate the site’s proximity to users.
• Hosting Provider: The company providing hosting services for the site.
• Network (ASN): The Autonomous System Number, which identifies the network the site is on.

What platform information does it provide?

The domain analyzer detects platform fingerprints such as WordPress or Angular, giving you an idea of the technology stack the site is built on. This can be useful for understanding the site’s capabilities and potential vulnerabilities.

What does the tool tell me about the site’s content?

The tool analyzes the site’s homepage to provide information about its structure and content:

• Title and Description: The main title and description of the site, which are important for SEO and user understanding.
• Word Count: The number of words on the homepage, which can indicate the site’s complexity.
• Headings: The use of headings (H1, H2, etc.) to structure the content.
• Schema.org Types: The types of structured data the site publishes, which can enhance search engine understanding of the site’s content.

What about the site’s policies and accessibility?

The tool checks for the existence of important pages at their usual paths:

• About, Contact, Privacy, and Terms: These pages are crucial for understanding the site’s purpose, contacting the owners, and knowing your rights and responsibilities.
• robots.txt: The rules in the robots.txt file, which dictate how search engines and other bots interact with the site. The tool also checks if AI crawlers like GPTBot and ClaudeBot are blocked.
• Sitemap: The size of the sitemap, which can indicate the site’s size and organization.
• Redirect and Canonicalization Behavior: How the site handles redirects and canonical URLs, which can affect SEO and user experience.
• 404 Response: What the site returns for a URL that does not exist, which can indicate the site’s error handling.

What won’t the tool tell me?

It’s important to understand the limitations of the domain analyzer. The tool does not provide:

• Traffic Estimates: Information about the number of visitors or page views.
• Authority or Ranking Scores: Metrics like Domain Authority or search engine rankings.
• Keyword Data: Insights into the keywords the site ranks for or uses.

These aspects cannot be measured by inspecting a domain and are only modelled by other tools.

What if a site blocks the check?

If a site blocks automated requests, such as through a Cloudflare interstitial or a 403 response to bots, the tool still produces a report. The report is labelled as blocked and does not include any information derived from the page content. However, certificate, DNS, registration, and robots.txt facts are still shown because these are served to everyone.

Is my privacy protected?

Yes, the tool prioritizes privacy. Building a report involves querying the domain registry over RDAP and an IP geolocation service. The location shown is where the responding server sits, which for a site behind a CDN is the CDN edge and not the company. The reports are public and cached for 14 days.

How does the tool work?

When you enter a domain name, the server contacts that domain and generates a report page. This process involves several steps, including:

• RDAP Query: Retrieves registration data from the domain registry.
• IP Geolocation: Determines the server’s location and hosting provider.
• Site Inspection: Analyzes the site’s content and configuration.
• Security Analysis: Checks for various security features and vulnerabilities.

Frequently asked questions

11 domains analysed on this site.