Security & Intelligence Checks
SkopeonLabs runs 45 checks across 7 categories. Each check is documented below: what it inspects, why it matters, and the technical standards behind it.
SkopeonLabs synthesizes intelligence across 40+ security vectors. Analysis and remediation stay in your hands.
All checks
IP Info
The IP address the domain currently resolves to
SSL Certificate
Certificate issuer, validity dates and the chain of trust
DNS Records
A, AAAA, MX, NS, CNAME and other records held for the domain
Crawl Rules
The crawl rules the site publishes for search engines and AI crawlers
Headers
Every HTTP response header the server sends back
Quality Metrics
Lighthouse scores for performance, accessibility, SEO and best practice
Server Location
Where in the world the server is physically hosted
Associated Hosts
Other hostnames Shodan has seen on the same IP address
Redirect Chain
The full chain of redirects before the final page loads
TXT Records
TXT records, including domain verification and policy entries
Server Status
Whether the site is up, and how quickly it responded
Open Ports
Which common ports are open and reachable on the host
Traceroute
The network path packets travel to reach the server
Carbon Footprint
Estimated CO2 from the data needed to load the page
Server Info
Operating system, ASN and the network the host sits on
Vulnerabilities
CVEs Shodan links to the services running on the host
Whois Lookup
Registrar, registration dates and nameservers, from WHOIS
Domain Info
Ownership and contact details published against the domain
DNSSEC
DNSSEC records proving DNS answers have not been tampered with
CAA Records
Which certificate authorities may issue certificates for the domain
HSTS
Whether browsers are told to only ever connect over HTTPS
DNS Server
Which nameservers answer for the domain, and their IP addresses
Tech Stack
Frameworks, analytics and services the site is built with
Sitemap
The pages a site lists in its own sitemap
Security.txt
The security.txt file, and who it says to contact about vulnerabilities
Linked Pages
Internal and external links found in the page's anchor tags
Email Configuration
MX, SPF, DKIM and DMARC records for sending and receiving mail
Firewall
Which web application firewall, if any, sits in front of the site
HTTP Security
Protective headers such as CSP, X-Frame-Options and nosniff
Mixed Content & SRI
Insecure resources on the page, and third-party scripts without SRI
Archive History
How the site has changed over time, via the Wayback Machine
Global Ranking
Tranco rank, if the site is in the global top million
Block Detection
Whether privacy, malware and parental-control resolvers block the site
Malware & Phishing
Whether the site appears on common malware and phishing lists
Data Breaches
Known data breaches of the site, as recorded by Have I Been Pwned
Trackers & Third Parties
Analytics, ad trackers and other third parties the page loads
TLS Connection
The TLS versions accepted, and the cipher and details of a live handshake
TLS Security Audit
SSL Labs' grade for the server's TLS configuration
TLS Client Compatibility
Whether Chrome, Safari, Java and older Android can still connect
Screenshot
A full-page render of the site, as a browser sees it
Subdomains
Subdomains that have appeared in public Certificate Transparency logs
IP Blacklist & Abuse
Abuse confidence score, blacklist status, and incident reports via AbuseIPDB