FixWeb

// docs / domains

Domains

A domain is a verified hostname you own. Verifying once unlocks owner-depth scans, scheduled re-scans, and live website monitoring on that hostname.

Domain a fhíorú

Cuir hostname leis ag Dashboard → Domains. Roghnaigh ceann de dhá mhodh verification:

  • DNS TXT — cuir record ag _fixweb.<hostname> leis an token a ghineann muid. Re-resolve muid é ónár bhfreastalaí, ní ó do cheannsa, mar sin ní chuireann socruithe SPF / DMARC isteach air. Propagation tipiciúil: 1-5 nóiméad; re-check muid gach 30 soicind ar feadh 10 nóiméad.
  • HTTP file — hostáil text file beag ag /.well-known/fixweb-verification.txt leis an token. Fetch muid thar HTTPS tríd an request path SSRF-guarded.

Déantar verifications a re-check go laethúil ag an cron domain-reverify. Má stopann domain a bhí verified roimhe seo an token a resolve (m.sh. bhain tú an DNS record), revoked an verification agus titeann active scans ina choinne ar ais go verify_required go dtí go gcuireann tú leis arís é.

Ath-scans sceidealta Pro+

Is féidir leis an bplean Pro fearann fíoraithe a athscanadh ag rithim ≥3h; an plean Unlimited ag ≥1h. Oscail Painéal → Fearainn → Sceideal, lasc an toggle, roghnaigh rithim:

  • 1 uair an chloig — ar fáil ar an bplean Unlimited amháin
  • 3h, 6h, 12h, go laethúil, gach 2 lá, go seachtainiúil

Gach cron tick (gach 15 min) tógann an scheduler schedules atá due, claims iad trí optimistic compare-and-swap ar next_run_at (ionas nach ndéanann dhá chrons double-enqueue), méadaíonn sé do scan-usage counter, agus enqueues sé scanadh éighníomhach úr. Oidhreachtann an scanadh do domain-verification attestation — ní dhéanann tú re-attest in aghaidh run — mar sin díchumasaigh an schedule chun revoke a dhéanamh.

Ar chríochnú, seoltar an email scan-completed leis an preference scheduled_scan_email (bainistigh ag Account → Settings).

Braite beo bagairtí Unlimited+

Déanann an plean Unlimited monatóireacht uathoibríoch ar gach fearann fíoraithe le haghaidh trí chomhartha idir scananna sceidealta:

  • Certificate transparency — gach 30 nóiméad ceistímid crt.sh le haghaidh certs nua ina bhfuil do hostname nó aon subdomain. Lasann certs nua alert new_certificate.
  • DNS diff — gach 30 nóiméad resolve muid A, AAAA, MX, TXT, NS, CNAME agus cuirimid i gcomparáid leis an snapshot deireanach iad. Lasann athruithe alert dns_change.
  • Threat-intel — gach uair an chloig seiceáilimid Spamhaus DBL agus URLhaus le haghaidh listings den apex hostname. Lasann listings alert threat_intel_listing.

Dedupes alerts ar content-hash signature ionas nach lasann an t-athrú céanna arís nuair a aimsítear arís é. Féach / dismiss alerts ag Dashboard → Domains → [domain] → Monitor. Leanann email notifications an pref threat_alert_email.

Coinneáil snapshots

Auto-prune monitor snapshots tar éis 7 lá, ach amháin an baseline is déanaí in aghaidh péire (domain, signal-type) — fanann an ceann sin beag beann ar aois ionas go mbeidh an chéad diff eile ceart. Purge dismissed alerts tar éis 90 lá.

Trigger ó API nó MCP

Tá domain management UI-only faoi láthair — níl aon API surface do verification ná athruithe schedule. Chun scanadh a thosú i gcoinne domain atá verified cheana trí API, úsáid POST /api/v1/scans:

curl
curl -X POST https://fixweb.app/api/v1/scans \
  -H "Authorization: Bearer fxw_..." \
  -H "content-type: application/json" \
  -d '{"target":"https://example.com"}'
Domains — Docs · FixWeb