What is SiteSpecter?

SiteSpecter is a website security intelligence tool that helps you analyze domains for potential security risks. It aggregates publicly available information to provide a comprehensive security overview without requiring you to visit potentially dangerous sites directly.

Key Features

• Domain Overview: Registration details, domain age, and basic security assessment
• Security Scorecard: Consolidated letter grades across multiple security categories
• RDAP/WHOIS: Domain registration and ownership information
• DNS Records: A, MX, TXT, and other DNS configuration details
• Email Security: SPF, DKIM, DMARC, and other email authentication analysis
• Web Headers: HTTP security headers analysis (CSP, HSTS, etc.)
• SSL/TLS: Certificate details and validity
• Threat Intelligence: Integration with AlienVault OTX for known threat data
• HTML Risk Analysis: Detection of potentially suspicious patterns in page content
• AI Analysis: AI-powered summary and recommendations

Intended Uses

SiteSpecter is designed for legitimate security purposes, including:

• Investigating suspicious links: Safely analyze URLs from emails or messages before visiting them
• Security research: Evaluate websites as part of authorized security investigations
• Analyzing your own domains: Assess your organization's security posture and identify improvements
• Vendor & partner assessments: Evaluate the security posture of business partners, vendors, or third-party services
• Educational purposes: Learn about web security concepts and common threat indicators

Getting Started

1. Enter a domain name (e.g., example.com) in the input field
2. Check the Terms of Service agreement box
3. Click Analyze to run the security analysis
4. Review the results across the various tabs
5. Optionally, use the AI Analysis tab for an AI-generated summary

For full legal terms, please review the Terms of Service.

1. Open Source Intelligence (OSINT) Tool

SiteSpecter is an Open Source Intelligence (OSINT) tool that aggregates and analyzes publicly available information about domains. This tool:

• Only accesses publicly available data sources (WHOIS/RDAP records, DNS records, SSL certificates, public threat intelligence databases)
• Fetches publicly accessible web content in the same manner as any web browser or search engine crawler
• Does not bypass any authentication, access controls, or security measures
• Does not store, redistribute, or share any fetched content
• Processes all data server-side to protect users from direct exposure to potentially malicious content

2. Acceptable Use

SiteSpecter is intended solely for legitimate security research purposes. By using this tool, you agree to:

• Use SiteSpecter only to analyze domains you have authorization to investigate
• Use the tool for defensive security research, threat analysis, and educational purposes
• Not use this tool to facilitate any illegal activities, harassment, or malicious purposes
• Not attempt to circumvent rate limits or abuse the service

3. Legal Basis for Data Collection

The information gathered by SiteSpecter is obtained through methods that are legally equivalent to:

• Visiting a website and viewing its source code (publicly served HTML)
• Performing a WHOIS lookup (public domain registration records)
• Querying public DNS servers (public DNS records)
• Connecting to a server and viewing its SSL certificate (publicly presented certificates)
• Querying public threat intelligence APIs (publicly available security data)

No content is stored permanently, cached beyond the immediate analysis session, or redistributed.

4. Rate Limits

To ensure fair access for all users and prevent abuse:

• Client-side rate limiting is enforced (5 requests per 30 seconds)
• Excessive or automated requests may result in temporary blocks
• AI analysis features are subject to additional rate limits

5. No Warranty / Disclaimer

SiteSpecter is provided "AS IS" without warranty of any kind. We make no guarantees about:

• The accuracy, completeness, or reliability of analysis results
• The availability or uptime of the service
• The suitability of results for any particular purpose

Analysis results should be considered informational only and verified through additional sources before taking action.

6. Assumption of Risk

By using SiteSpecter, you acknowledge and agree that:

• You assume all risk and liability for your use of this tool and any actions taken based on its output
• You are solely responsible for ensuring your use complies with all applicable laws and regulations
• The operators of SiteSpecter shall not be liable for any damages, losses, or consequences arising from your use of this tool
• You will not hold the operators responsible for any false positives, false negatives, or inaccuracies in the analysis

7. Data Privacy

SiteSpecter respects your privacy:

• No user accounts or personal information is collected
• Analysis history is stored locally in your browser only
• Analyzed domains are sent to third-party services (RDAP, OTX, Claude AI) for processing
• No server-side logs of user activity are maintained
• Fetched web content is processed in memory only and not permanently stored

8. Third-Party Services

SiteSpecter integrates with external services including:

• RDAP/WHOIS servers for domain registration data
• AlienVault OTX for threat intelligence
• Anthropic Claude for AI-powered analysis

Use of these services is subject to their respective terms and privacy policies.

9. Modifications

We reserve the right to modify these terms at any time. Continued use of SiteSpecter constitutes acceptance of any changes.

Before using SiteSpecter, please review and accept our Terms of Service.

Key Points:

• OSINT Tool: This tool only uses publicly available information (WHOIS, DNS, SSL certs, public HTML)
• No Storage: Fetched content is processed in memory only and never stored or redistributed
• Server-Side Processing: All requests are made server-side to protect you from direct exposure
• Authorized Use Only: Only analyze domains you have permission to investigate
• Security Research: Use for defensive security, threat analysis, and education
• No Warranty: Results are informational and provided "as is"
• Your Responsibility: You assume all risk for actions based on results

Read the full Terms of Service