how.is

Partner tier of the dns.pizza bot observatory: every network (ASN), named crawler, TLS (JA4) fingerprint and firewall rule seen in the last 7 days, refreshed hourly. The public tier is free at https://dns.pizza/bots.

Live check of one or more URLs: HTTP status, latency, DNS resolve time, resolved IP, TTL, nameservers, TLS days remaining.

How old a domain is: registration date, age in days and years, and whether it was registered in the last 30 days (a common phishing signal).

Is this domain name registered? Asked of the registry over RDAP, with the standard first-year and renewal price when it is free to register.

Whether the addresses behind a domain appear on spam and abuse blocklists.

A, AAAA, MX, NS, TXT and other records for a domain, with resolve timing.

Whether DNSSEC is signed and validates for a domain.

SPF, DKIM and DMARC records and posture for a domain.

Everything about a domain in one call: DNS, WHOIS, TLS, DNSSEC, email auth, security score, blacklist status, plus IP intelligence for its A record.

A letter grade and point score for a domain security posture, with the scored items behind it.

Certificate validity, issuer, protocol and days until expiry for a domain.

Should an agent click, sign in to, or pay this domain? A risk score and verdict (likely_safe / caution / high_risk, or inconclusive when a check could not run) with plain-English reasons, from domain age, spam/abuse blocklists and the HTTPS certificate.

Registrar, creation and expiry dates, nameservers and status codes for a domain.

Network owner (ASN), company, geolocation, privacy flags and abuse contact for an IP address.

Read a web page as clean markdown, with a safety verdict attached: robots.txt honored for your agent, risky sites flagged as untrusted, optional screenshot.

See a web page: a 1280-wide JPEG of any public URL, viewport or full page (capped at 6000 px), with its final URL, HTTP status and title.

Check whether a URL is safe to fetch, read, sign in to or pay before you do: domain age, look-alike, blocklists, HTTPS, robots.txt for your agent and the site's own x402 price.

Has this page changed since your last call, and how much? The first call stores a baseline; later calls return a text diff (2% threshold).

Verify a crawler's identity: is this IP + user-agent really Googlebot, Bingbot, GPTBot or ClaudeBot, an impostor using the name, another bot, or a person?

Verify many crawler visitors (IP + user-agent) in one call: real Googlebot, GPTBot, ClaudeBot or impostor, billed per item.

Find newly registered look-alikes of a brand: typos, look-alike characters, the same name on another TLD, or the brand beside a lure word, new in the zone files in the last 14 days, each with a risk tier and reasons.

Look up the company behind a domain: name, description, category, location, socials, mail/DNS/hosting providers and registration, each with source and confidence.

Check when a domain appeared in the registry zone file, left it, came back or changed nameservers, from daily gTLD and .com/.net zone files. A sudden nameserver move signals a hijack or sale; a brand-new name signals phishing.