Question 1

What is Domain Tracker?

Accepted Answer

Domain Tracker is a comprehensive domain intelligence platform that monitors WHOIS registration data, DNS records, SSL certificates, uptime, security threats, email deliverability, SEO metrics, and brand protection. It's designed for domain portfolio managers, web agencies, security teams, and brand owners who need to monitor and protect their web assets.

Question 2

How do I get started with Domain Tracker?

Accepted Answer

See this answer in the FAQ page content.

Question 3

Is there a free tier?

Accepted Answer

Yes! We offer a generous free tier that includes daily credits for monitoring your domains. You can track multiple domains, run scans, and access all core features. Premium plans offer higher limits, priority scanning, and advanced features like brand protection.

Question 4

What domains can I monitor?

Accepted Answer

You can monitor any publicly accessible domain. This includes domains you own, client domains, competitor domains, or any domain you want to keep an eye on. There are no restrictions on which domains you can add to your dashboard.

Question 5

How do I import multiple domains?

Accepted Answer

Use the 'Import' button in the Domain Tracker dashboard. You can upload a CSV file with your domains (one domain per row), and optionally include columns for type, folder, and tags. The system supports importing thousands of domains at once with progress tracking.

Question 6

How does WHOIS monitoring work?

Accepted Answer

Domain Tracker performs native WHOIS lookups using TCP connections to official WHOIS servers (port 43, RFC 3912). This provides accurate, real-time registration data without relying on third-party APIs. We parse and store the data, allowing you to track changes over time.

Question 7

What WHOIS data do you track?

Accepted Answer

We track registrar name, registration date, expiration date, last updated date, nameservers, domain status codes, registrant contact (when not private), admin/tech contacts, and WHOIS privacy status. All changes are logged for historical comparison.

Question 8

How do expiry alerts work?

Accepted Answer

You can configure alerts to notify you when domains are approaching expiration. By default, we alert at 90, 60, 30, 14, and 7 days before expiration. You can customize these thresholds and choose to receive alerts via email or webhook.

Question 9

Why is some WHOIS data showing as 'private' or 'redacted'?

Accepted Answer

Many domain registrars offer WHOIS privacy services that redact personal information from public WHOIS records. This is normal and compliant with GDPR and other privacy regulations. We display whatever information is publicly available in the WHOIS database.

Question 10

How often is WHOIS data refreshed?

Accepted Answer

WHOIS data is refreshed during scheduled scans (configurable from hourly to weekly) or when you manually trigger a scan. Free tier users get daily refreshes, while premium users can configure more frequent checks.

Question 11

What DNS record types do you monitor?

Accepted Answer

We monitor all standard DNS record types including A, AAAA, CNAME, MX, TXT, NS, SOA, CAA, and PTR records. Each record type is tracked separately, and we alert you to any changes.

Question 12

How does DNS change detection work?

Accepted Answer

We periodically resolve DNS records and compare them to previously stored values. When changes are detected (new records, modified values, or deleted records), we log the change and can send you an alert.

Question 13

Can you detect DNS hijacking?

Accepted Answer

Yes. By monitoring nameserver records and comparing resolved IP addresses against expected values, we can detect potential DNS hijacking attempts. Unexpected changes to NS or A records trigger alerts.

Question 14

Do you check DNS propagation?

Accepted Answer

Yes, we can check DNS resolution across multiple global DNS servers to verify propagation status. This helps you confirm that DNS changes have propagated worldwide.

Question 15

What is DNSSEC and do you validate it?

Accepted Answer

DNSSEC (DNS Security Extensions) adds cryptographic signatures to DNS records to prevent tampering. We check whether DNSSEC is enabled and validate the chain of trust to ensure proper configuration.

Question 16

How is the SSL grade calculated?

Accepted Answer

The SSL grade (A+ to F) is based on multiple factors: certificate validity, chain completeness, key size (minimum 2048-bit RSA or 256-bit ECC), signature algorithm, protocol support (TLS 1.2/1.3), HSTS configuration, and absence of known vulnerabilities. An A+ grade requires all best practices including HSTS with long max-age.

Question 17

What's the difference between SSL and TLS?

Accepted Answer

SSL (Secure Sockets Layer) is the predecessor to TLS (Transport Layer Security). Modern secure connections use TLS 1.2 or TLS 1.3, but 'SSL' is still commonly used as a general term. We check for proper TLS configuration and flag deprecated SSL versions as security risks.

Question 18

How do you check the certificate chain?

Accepted Answer

We validate the complete certificate chain from the server's leaf certificate through any intermediate certificates to a trusted root CA. Missing intermediates or broken chains cause trust errors in browsers, which we flag.

Question 19

What is HSTS and why does it matter?

Accepted Answer

HSTS (HTTP Strict Transport Security) tells browsers to always use HTTPS for your domain. This prevents downgrade attacks and protects users. We check for the HSTS header, its max-age value, and whether the domain is in the HSTS preload list.

Question 20

Can I monitor Let's Encrypt certificates?

Accepted Answer

Absolutely! Let's Encrypt certificates are fully supported. Since they have 90-day validity periods, our expiry alerts are especially useful for ensuring timely renewal.

Question 21

What blacklists do you check?

Accepted Answer

We check domains against 100+ blacklists including Spamhaus, SURBL, URIBL, Google Safe Browsing, PhishTank, and various spam and malware databases. If your domain appears on any blacklist, we alert you immediately.

Question 22

How does reputation scoring work?

Accepted Answer

Reputation scores are calculated based on multiple threat intelligence sources, blacklist presence, historical data, and behavioral analysis. A low reputation score indicates the domain may be associated with spam, malware, or phishing.

Question 23

What security headers do you analyze?

Accepted Answer

We check for Content-Security-Policy (CSP), X-Frame-Options, X-Content-Type-Options, X-XSS-Protection, Referrer-Policy, and Permissions-Policy. Each header is evaluated against best practices and recommendations are provided.

Question 24

How does brand protection work?

Accepted Answer

Our brand protection feature monitors Certificate Transparency (CT) logs for new certificates containing your brand name or similar variations. We use advanced algorithms to detect typosquatting, homoglyph attacks, and other impersonation attempts, alerting you to potential phishing sites.

Question 25

Can you detect phishing pages?

Accepted Answer

Yes. Through brand protection monitoring, we detect newly registered domains that may be impersonating your brand. We analyze the content for credential harvesting forms, brand imagery, and other phishing indicators.

Question 26

How often do you check uptime?

Accepted Answer

Check frequency is configurable based on your plan. Free users get checks every 15-60 minutes, while premium users can configure checks as frequent as every minute. More frequent checks mean faster detection of outages.

Question 27

From where are uptime checks performed?

Accepted Answer

We perform uptime checks from multiple geographic locations to ensure accurate results and detect regional outages. This helps distinguish between global outages and localized network issues.

Question 28

What counts as 'down'?

Accepted Answer

A site is considered down if it returns an HTTP error code (5xx), times out after 30 seconds, has connection refused, or returns an invalid/empty response. We retry failed checks before alerting to avoid false positives.

Question 29

How do I calculate my uptime percentage?

Accepted Answer

Uptime percentage is calculated as (total time - downtime) / total time  100. For example, 99.9% uptime allows for approximately 8.76 hours of downtime per year. We track and display this automatically in your dashboard.

Question 30

What email records do you check?

Accepted Answer

We check SPF (Sender Policy Framework), DKIM (DomainKeys Identified Mail), and DMARC (Domain-based Message Authentication, Reporting & Conformance) records. These are essential for email deliverability and preventing spoofing.

Question 31

Why is my SPF record showing warnings?

Accepted Answer

Common SPF issues include: too many DNS lookups (limit is 10), overly permissive rules (+all), missing include statements for your email providers, or syntax errors. We provide specific recommendations for each issue.

Question 32

How do I set up DMARC?

Accepted Answer

DMARC is configured via a TXT record at _dmarc.yourdomain.com. Start with a 'p=none' policy for monitoring, then gradually move to 'quarantine' and finally 'reject' as you verify your email sources. We can help identify your legitimate email sources.

Question 33

What's a good DMARC policy?

Accepted Answer

The ideal DMARC policy is 'p=reject' which tells receiving servers to reject emails that fail authentication. However, you should start with 'p=none' to collect reports and identify all legitimate email sources before enforcing stricter policies.

Question 34

How does the credit system work?

Accepted Answer

Credits are used for domain scans and monitoring operations. Each action (WHOIS lookup, SSL check, security scan, etc.) costs a certain number of credits. Free users receive daily credits that refresh, while premium users get larger allocations and faster refresh rates.

Question 35

What happens if I run out of credits?

Accepted Answer

See this answer in the FAQ page content.

Question 36

Can I cancel anytime?

Accepted Answer

Yes, you can cancel your subscription at any time. Your premium features will remain active until the end of your billing period. There are no cancellation fees or long-term commitments.

Question 37

Do you offer team/enterprise plans?

Accepted Answer

See this answer in the FAQ page content.

Question 38

Is there a refund policy?

Accepted Answer

We offer a 14-day money-back guarantee for first-time subscribers. If you're not satisfied with the service, contact support within 14 days of your first payment for a full refund.

Question 39

Do you have an API?

Accepted Answer

Yes! We provide a REST API for programmatic access to all monitoring data. You can add domains, trigger scans, retrieve results, and configure alerts via API. API access is included in premium plans with rate limits based on your tier.

Question 40

Can I set up webhooks for alerts?

Accepted Answer

Yes, you can configure webhook URLs to receive real-time notifications when alerts trigger. Webhooks support custom payloads and can integrate with Slack, Discord, PagerDuty, or any service that accepts HTTP POST requests.

Question 41

How do you handle rate limiting on WHOIS servers?

Accepted Answer

We implement intelligent rate limiting and caching to respect WHOIS server policies. Queries are distributed across time, and results are cached appropriately. This ensures reliable data while avoiding blocks.

Question 42

Is my data secure?

Accepted Answer

Yes. All data is encrypted in transit (TLS 1.3) and at rest. We follow security best practices including regular audits, access controls, and secure development practices. Your domain data is never shared with third parties.

Question 43

Can I export my data?

Accepted Answer

Yes, you can export all your domain data at any time in CSV, JSON, or PDF format. We believe in data portability - your data belongs to you.

Frequently asked
questions.

Getting Started

WHOIS Monitoring

DNS Tracking

SSL Certificates

Security Features

Uptime Monitoring

Email Deliverability

Pricing & Billing

Technical Questions

Still have questions?

Contact support

Feature guide

Get started

Ready to monitor
your domains?

Frequently askedquestions.

Getting Started

What is Domain Tracker?+

How do I get started with Domain Tracker?+

Is there a free tier?+

What domains can I monitor?+

How do I import multiple domains?+

WHOIS Monitoring

How does WHOIS monitoring work?+

What WHOIS data do you track?+

How do expiry alerts work?+

Why is some WHOIS data showing as 'private' or 'redacted'?+

How often is WHOIS data refreshed?+

DNS Tracking

What DNS record types do you monitor?+

How does DNS change detection work?+

Can you detect DNS hijacking?+

Do you check DNS propagation?+

What is DNSSEC and do you validate it?+

SSL Certificates

How is the SSL grade calculated?+

What's the difference between SSL and TLS?+

How do you check the certificate chain?+

What is HSTS and why does it matter?+

Can I monitor Let's Encrypt certificates?+

Security Features

What blacklists do you check?+

How does reputation scoring work?+

What security headers do you analyze?+

How does brand protection work?+

Can you detect phishing pages?+

Uptime Monitoring

How often do you check uptime?+

From where are uptime checks performed?+

What counts as 'down'?+

How do I calculate my uptime percentage?+

Email Deliverability

What email records do you check?+

Why is my SPF record showing warnings?+

How do I set up DMARC?+

What's a good DMARC policy?+

Pricing & Billing

How does the credit system work?+

What happens if I run out of credits?+

Can I cancel anytime?+

Do you offer team/enterprise plans?+

Is there a refund policy?+

Technical Questions

Do you have an API?+

Can I set up webhooks for alerts?+

How do you handle rate limiting on WHOIS servers?+

Is my data secure?+

Can I export my data?+

Still have questions?

Contact support

Feature guide

Get started

Ready to monitoryour domains?

Frequently asked
questions.

Ready to monitor
your domains?