Investigate any domain or IP
WHOIS and RDAP registration, DNS and email security, IP ownership and ASN, every subdomain in certificate logs, security headers, and a live check from 6 regions. One search.
Try statance.com · 1.1.1.1 · github.com
Registration
Registrar, created, updated and expiry dates, status codes, nameservers and DNSSEC, from RDAP or WHOIS.
DNS & email
A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records, plus SPF, DMARC, MTA-STS and common DKIM selectors.
IP & network
Who owns the IP, the network range, ASN and its name, country, abuse contact and reverse DNS.
Subdomains
Every hostname that has appeared in a public TLS certificate, from Certificate Transparency logs.
Website
Status, redirect chain, response time, server and CDN hints, and a security headers grade.
Is it down?
Run a live HTTP check from US West, US East, Western and Eastern Europe, Asia Pacific and Oceania.
Questions
Where does this data come from?
Registration data comes from RDAP, the official successor to WHOIS, with a fallback to classic WHOIS for domains whose registry has no RDAP service (such as .nz). DNS is resolved through Cloudflare 1.1.1.1, network ownership and ASNs come from the regional internet registries and Team Cymru, and subdomains and certificates come from public Certificate Transparency logs (crt.name and crt.sh). City-level location, connection type and proxy details come from IP2Location LITE, plus the Tor Project’s exit list and the open-source X4BNet VPN and datacenter lists.
Why are some registration fields missing?
Many registries hide registrant details for privacy (GDPR), and some only publish dates and nameservers. What we show is what the registry publishes.
How are subdomains found?
Every publicly trusted TLS certificate is logged in Certificate Transparency logs. We list the hostnames those certificates were issued for, which reveals subdomains that ever had HTTPS — including ones not linked anywhere.
What is the security headers grade?
We check the homepage for six headers that protect visitors: Strict-Transport-Security, Content-Security-Policy, X-Content-Type-Options, X-Frame-Options, Referrer-Policy and Permissions-Policy. Six present is an A; none is an F.
How fresh are the results?
Results are cached for up to six hours. The "check from 6 regions" test always runs live.
Can I get alerted when something changes?
Yes — create a free Statance account to monitor the site’s uptime from multiple regions, its SSL certificate expiry and its DNS records, with alerts by email, Slack, Discord and more.
Get alerted when it breaks
Monitor uptime from 6 regions, SSL expiry and DNS changes. Free for 10 monitors.