23 Services from how.is

Verifies whether an IP address and user-agent belong to a legitimate known crawler (Googlebot, Bingbot, GPTBot, ClaudeBot), an impostor, another bot, or a human

Finds newly registered look-alike domains of a brand (typos, homoglyphs, lure words, other TLDs) from the last 14 days of zone files, each with a risk tier and signals.

Performs a live multi-signal check on up to 10 URLs, returning HTTP status, latency, DNS resolve time, resolved IP, TTL, nameservers, TLS certificate days remaining, and server info.

Given a domain name, returns a structured company card including name, description, category, location, social profiles, DNS/mail/hosting providers, and domain registration details with source attribution and confidence scores.

Returns a comprehensive domain intelligence report in one call: DNS, WHOIS, TLS, DNSSEC, email authentication, security score, blacklist status, and IP intelligence for the domain's A record.

Returns a letter grade and numeric score for a domain's security posture, broken down by scored security categories.

Returns TLS certificate validity, issuer, protocol, cipher, and days until expiry for a given domain.

Returns ASN, network owner, company, geolocation, privacy flags, carrier, and abuse contact for a given IPv4 or IPv6 address.

Fetches a web page and returns it as clean markdown with a safety verdict, robots.txt compliance, and an optional screenshot

Returns the full zone-file change history for a domain: when it appeared, disappeared, reappeared, and changed nameservers, from daily gTLD and .com/.net zone file scans.

Retrieves and evaluates SPF, DKIM, and DMARC DNS records for a domain, returning an overall email authentication posture score and recommendations.

Returns a risk score, verdict (likely_safe/caution/high_risk/inconclusive), and plain-English reasons for a domain based on age, spam/abuse blocklists, and HTTPS certificate validity.

Captures a 1280px-wide JPEG screenshot of any public URL, returning the image, final URL, HTTP status, and page title

Runs a multi-signal safety pre-flight check on a URL before an agent fetches, reads, signs in, or pays — returning a verdict, risk score, robots.txt compliance, HTTPS validity, blocklist hits, domain age, lookalike detection, and x402 pricing.

Batch-verify up to 100 crawler visitors (IP + user-agent + optional TLS fingerprint) to determine if each is a real known bot (Googlebot, GPTBot, ClaudeBot, etc.) or an impostor, billed per item.

Checks whether a domain name is registered by querying the registry over RDAP, returning availability status and first-year/renewal pricing when registrable.

Fetches A, AAAA, MX, NS, TXT and other DNS records for a domain along with resolve timing.

Checks whether DNSSEC is signed and validates correctly for a given domain, including chain of trust and DS/DNSKEY records.

Returns registrar, creation/expiry dates, nameservers, and status codes for a given domain via WHOIS/RDAP.

Returns the registration date, age in days/years, and newly-registered flag for a given domain name.

Monitors a public URL for content changes, storing a baseline on first call and returning a text diff with change percentage on subsequent calls.

Checks whether the IP addresses behind a domain appear on spam and abuse blocklists.

Returns the full partner-tier dataset of bot network traffic seen in the last 7 days: every ASN, named crawler, TLS/JA4 fingerprint, and firewall rule, refreshed hourly.