Skip to content

Inspect a domain

One scan returns the registrar and expiry, TLS certificate, known subdomains, DNS records, hosting provider, HTTP headers, SPF, and DMARC behind any public domain.

Checks one public domain. No port scan, no signup, nothing stored.

What this returns

Registration

Registrar, creation and expiry dates, domain age, status codes, and DNSSEC, read from RDAP.

TLS

The live certificate: issuer, validity window, days to expiry, and the names it covers.

Hosting

Web, DNS, and mail hosts identified separately from network data, nameservers, and MX: often three different companies.

DNS

A, AAAA, NS, MX, TXT, CAA, and DMARC records.

Subdomains

Hostnames discovered passively from Certificate Transparency logs, with a live-resolution check.

Headers

HTTPS and HTTP status, redirects, server, and content type.

Mail

MX routing plus SPF and DMARC presence.

Surprises in the records?

We untangle domain, DNS, and mail setups as part of system work: one clean map of what runs where, then the fixes.

Questions about the Domain Info Lookup

What does the domain lookup show?

Registrar and expiry date, DNSSEC, the TLS certificate, subdomains from Certificate Transparency logs, the DNS records, HTTP headers, and SPF and DMARC. Hosting is reported per role: who serves the website, who runs DNS, and who handles mail.

Is this a WHOIS lookup?

It uses RDAP, the protocol that replaced WHOIS for generic top-level domains. RDAP returns the same registration data in a structured format. Since the GDPR, most registries no longer publish the owner's name or address.

Why does it show Cloudflare instead of my hosting provider?

When a site sits behind a proxy such as Cloudflare, Fastly, or Akamai, every public signal describes the proxy. The origin host cannot be seen from outside, and the report says so instead of guessing.

Why is the registrar not the company I bought the domain from?

Many resellers register domains through wholesale registrars such as Tucows, Key-Systems, or Ascio. Public records show the wholesale registrar; the reseller you pay usually does not appear.

Does it scan ports?

No. The lookup uses public DNS, RDAP, certificate logs, and HTTP requests to the site. It runs no port scans and no traceroute.

Contact

What eats your team's time?

Two or three sentences are enough. Philipp reads every message himself and usually replies within two business days.

Philipp Kant

Philipp Kant
Software & AI Architect, Krefeld

What is it about?

Opens your email app with the message to philipp@kant.dev, ready to send. You see everything before it goes out. Privacy policy

  • No sales call unless you ask for one.
  • No newsletter, no automated follow-ups.
  • Your message goes to one inbox: philipp@kant.dev.

Rather talk? Pick a 30-minute slot

Or write directly: philipp@kant.dev