DechoNet

Description

From the marketplace listing

DechoNet checks domains, links and pages from the outside, using only public information, and explains what it finds. Seen. Remembered. Signed. What you can ask: - An overall security score and grade for a domain, with the fixes that matter most (DNS, TLS certificate, HTTP security headers, email authentication, registration data, network) — passive, public lookups only. - Whether a page is fine to log in, pay, submit a form or download on: phishing signals, where card fields are hosted, and hidden text addressed to AI agents. Every answer lists what was not checked. - Whether a link from a text message or email shows phishing signals: redirects and shorteners are followed to the real destination, which is compared with the brand it imitates. - What should stay true about your domain (HTTPS works, a header is present, DMARC policy, certificate days left), confirmed from the outside now and every day, with where to fix what does not hold. - A single check for any one area: DNS and propagation, certificate and TLS, email authentication, response headers, registration, network, subdomains, look-alike domains. - What changed on a domain since DechoNet last looked, and reporting a page or MCP server that looks malicious so DechoNet checks it itself. Domain, host and IP results come with a signed observation record that anyone can verify against DechoNet's public key. Who it is for: site owners, developers, IT and security staff, people building AI agents, and anyone who received a suspicious link. Limits: DechoNet reads public data only. Ports are checked only on request. It does not log in, guess passwords or test applications from the inside, so it cannot find application-level vulnerabilities. A result without warning signs is not a guarantee; it is a snapshot at the time shown. A report alone never changes a verdict. Tools that save something (monitoring, expectations, reports) are marked as such in their annotations; all others only read.