how.is

Partner tier of the dns.pizza bot observatory: every network (ASN), named crawler, TLS (JA4) fingerprint and firewall rule seen in the last 7 days, refreshed hourly. The public tier is free at https://dns.pizza/bots.

Everything about a domain in one call: DNS, WHOIS, TLS, DNSSEC, email auth, security score, blacklist status, plus IP intelligence for its A record.

Should an agent click, sign in to, or pay this domain? A risk score and verdict (likely_safe / caution / high_risk, or inconclusive when a check could not run) with plain-English reasons, from domain age, spam/abuse blocklists and the HTTPS certificate.

A, AAAA, MX, NS, TXT and other records for a domain, with resolve timing.

Registrar, creation and expiry dates, nameservers and status codes for a domain.

How old a domain is: registration date, age in days and years, and whether it was registered in the last 30 days (a common phishing signal).

Is this domain name registered? Asked of the registry over RDAP, with the standard first-year and renewal price when it is free to register.

Certificate validity, issuer, protocol and days until expiry for a domain.

Whether DNSSEC is signed and validates for a domain.

SPF, DKIM and DMARC records and posture for a domain.

A letter grade and point score for a domain security posture, with the scored items behind it.

Whether the addresses behind a domain appear on spam and abuse blocklists.

Network owner (ASN), company, geolocation, privacy flags and abuse contact for an IP address.

Live check of one or more URLs: HTTP status, latency, DNS resolve time, resolved IP, TTL, nameservers, TLS days remaining.

See a web page: a 1280-wide JPEG of any public URL, viewport or full page (capped at 6000 px), with its final URL, HTTP status and title.

Has this page changed since your last call, and how much? The first call stores a baseline; later calls return a text diff (2% threshold).

Read a web page as clean markdown, with a safety verdict attached: robots.txt honored for your agent, risky sites flagged as untrusted, optional screenshot.

Check whether a URL is safe to fetch, read, sign in to or pay before you do: domain age, look-alike, blocklists, HTTPS, robots.txt for your agent and the site's own x402 price.

Look up the company behind a domain: name, description, category, location, socials, mail/DNS/hosting providers and registration, each with source and confidence.

Verify a crawler's identity: is this IP + user-agent really Googlebot, Bingbot, GPTBot or ClaudeBot, an impostor using the name, another bot, or a person?

Verify many crawler visitors (IP + user-agent) in one call: real Googlebot, GPTBot, ClaudeBot or impostor, billed per item.

Check when a domain appeared in the registry zone file, left it, came back or changed nameservers, from daily gTLD and .com/.net zone files. A sudden nameserver move signals a hijack or sale; a brand-new name signals phishing.

Find newly registered look-alikes of a brand: typos, look-alike characters, the same name on another TLD, or the brand beside a lure word, new in the zone files in the last 14 days, each with a risk tier and reasons.