A high-level scorecard of the domain’s overall risk, trust signals, email defenses, internet exposure, and reputation. Use it as a quick health check — the details behind every line item are in the cards below.

Domain records

DNS records are the public address book and identity papers for a domain. They tell the world where to send mail, which servers are official, and how to verify the domain’s authenticity. Misconfigured records let attackers spoof your email (DMARC/SPF/DKIM), hijack traffic (DNSSEC), or impersonate your brand on look-alike infrastructure.

Ports & Reputation

Every open port is a door to the internet — some are expected (80/443 for the web), others should never be reachable (3389/RDP, 22/SSH on a marketing site). Reputation lookups show whether the domain has been flagged on spam or malware blocklists, which directly impacts email deliverability and customer trust.

TLS & HTTP

TLS protects data in transit and proves visitors are talking to the real site — an expired or weak certificate is an immediate red flag. HTTP security headers tell browsers how to defend against common attacks like clickjacking, cross-site scripting, and downgrade attempts. Detected web technologies reveal the software stack an attacker would target.

Subdomains often host forgotten staging sites, old admin panels, or third-party tools that fall out of patch cycles — they are a favorite entry point for attackers. Knowing every live subdomain (and what runs on it) is the first step in shrinking the attack surface.

Subdomain Probe