Free › DomainTrust MCP
Free · passive OSINT
DomainTrust MCP.
Give it a domain. Get a plain-English Website Trust Report.
What it checks
Public signals, one report.
Everything is gathered passively from public information. Nothing is probed or attacked.
Domain and DNS
WHOIS age and expiry, nameservers, MX, TXT and CAA records, and basic DNS posture.
Email security
SPF, DMARC and common DKIM selector records, to spot gaps that allow spoofing.
Website signals
HTTPS, SSL certificate details, redirects, detected technologies and common browser security headers.
Subdomains
Certificate transparency data to surface exposed subdomains that may need review.
The report
A score, a rating and next steps.
- Add the missing browser security headers.
- Review the exposed subdomains.
A sample, to show the format.
Who it is for
Anyone who wants to check a site.
Small businesses
Vet a supplier before you pay or share data.
Writers and researchers
Check a source is what it claims to be.
Marketers
Review the health of your own site.
Cyber students
Learn passive OSINT without touching exploit tools.
Consultants
A fast first look at a client domain.
Questions about setup? sos@obisec.com
Keep learning.
Free lessons today. Certified courses when you are ready.