Website Infrastructure Scanner
Run a bounded check of a website’s public DNS, registration, redirect path and TLS certificate. The report separates what was observed from what can be inferred and what remains unknown.
Open the Website Ownership MapperEvidence for a review, not a claim of ownership
What it checks
Public DNS records, RDAP registration data, a maximum five-hop redirect path, the final HTTP response and the certificate presented on port 443.
How labels work
Observed means the scanner received the cited public record. Inferred means a strong signal matched the small provider registry. Unknown is used instead of a weak guess.
What stays private
A pasted URL is reduced to its website origin, so its path, query and fragment are not scanned, cached or exported. A completed report may be cached for five minutes to avoid repeating upstream requests, then expires automatically. Analytics contain aggregate event counts only. Mapper projects and the reviewed handoff remain in your browser.
What it cannot prove
Public records cannot show the account owner, administrators, billing control, recovery access, repository ownership or legal ownership. Use the website ownership checklist for the account and recovery checks that public evidence cannot answer.
Safety boundaries
Local names, IP literals, credentials, private destinations and custom ports are rejected. Every redirect is resolved and checked again before a connection is made.
Capacity controls
Every attempt counts toward the visitor limit. Target and global capacity are counted only after public DNS validation, with a launch cap of 500 validated scans per UTC day. Clear wait states are shown without storing raw visitor IP addresses in the scanner datastore.