DechoNet

DechoNet checks domains, links and pages from the outside, using only public information, and explains what it finds. Seen. Remembered. Signed.

What you can ask:

• An overall security score and grade for a domain, with the fixes that matter most (DNS, TLS certificate, HTTP security headers, email authentication, registration data, network) — passive, public lookups only.
• Whether a page is fine to log in, pay, submit a form or download on: phishing signals, where card fields are hosted, and hidden text addressed to AI agents. Every answer lists what was not checked.
• Whether a link from a text message or email shows phishing signals: redirects and shorteners are followed to the real destination, which is compared with the brand it imitates.
• What should stay true about your domain (HTTPS works, a header is present, DMARC policy, certificate days left), confirmed from the outside now and every day, with where to fix what does not hold.
• A single check for any one area: DNS and propagation, certificate and TLS, email authentication, response headers, registration, network, subdomains, look-alike domains.
• What changed on a domain since DechoNet last looked, and reporting a page or MCP server that looks malicious so DechoNet checks it itself.

Domain, host and IP results come with a signed observation record that anyone can verify against DechoNet's public key.

Who it is for: site owners, developers, IT and security staff, people building AI agents, and anyone who received a suspicious link.

Limits: DechoNet reads public data only. Ports are checked only on request. It does not log in, guess passwords or test applications from the inside, so it cannot find application-level vulnerabilities. A result without warning signs is not a guarantee; it is a snapshot at the time shown. A report alone never changes a verdict. Tools that save something (monitoring, expectations, reports) are marked as such in their annotations; all others only read.