How the check works

Our check is passive. It only looks at information every domain publishes to the whole internet, the same things email providers and web browsers read every day. It never logs in, guesses passwords, scans ports or tries to break anything.

What it does

• Reads public DNS records (SPF, DKIM, DMARC, MX, DNSSEC) through Cloudflare and Google public DNS.
• Visits your home page once over https:// and once over http://, the same way a browser does. It reads the response headers and the security certificate, and ignores the page content.
• Looks up your domain's public registration expiry date with the official registry (RDAP).

Website owners

If you see NextPointScanner/1.0 in your logs, someone used our free tool to check your domain. Each domain is checked at most once every 10 minutes, no matter how many people ask, and each visit is a single page request.