FixWeb

// docs / domains

Domains

A domain is a verified hostname you own. Verifying once unlocks owner-depth scans, scheduled re-scans, and live website monitoring on that hostname.

Ịnyocha domain

Tinye hostname na Dashboard → Domains. Họrọ otu n'ime ụzọ verification abụọ:

  • DNS TXT — tinye record na _fixweb.<hostname> tinyere token anyị generate. Anyị na-re-resolve ya site na server anyị, ọ bụghị nke gị, ya mere SPF / DMARC settings agaghị egbochi. Propagation nkịtị: nkeji 1-5; anyị na-re-check kwa 30 sekọnd maka nkeji 10.
  • HTTP file — host obere text file na /.well-known/fixweb-verification.txt tinyere token ahụ. Anyị na-fetch site na HTTPS n'ụzọ request SSRF-guarded.

A na-re-check verifications kwa ụbọchị site na cron domain-reverify. Ọ bụrụ na domain e nyochara mbụ akwụsị resolving token (dịka ọmụmaatụ ị wepụrụ DNS record), a na-revoke verification ahụ, active scans megide ya na-alaghachi na verify_required ruo mgbe ị tinyere ya ọzọ.

Scheduled re-scans Pro+

Atụmatụ Pro nwere ike inyocha ngalaba nkwadoro ọzọ na cadence ≥3h; atụmatụ Unlimited na ≥1h. Mepee Dashboard → Domains → Schedule, mee toggle ka ọ rụọ ọrụ, họrọ cadence:

  • 1 awa — dị naanị na atụmatụ Unlimited
  • 3h, 6h, 12h, daily, every 2 days, weekly

Na cron tick ọ bụla (kwa 15 min) scheduler na-eburu schedules ruru oge, claim ha site na optimistic compare-and-swap na next_run_at (ka crons abụọ ghara double-enqueue), increment scan-usage counter gị, wee enqueue passive scan ọhụrụ. Scan ahụ na-eketa domain-verification attestation gị — ị naghị re-attest kwa run — ya mere gbanyụọ schedule iji revoke.

Mgbe ọ gwụchara, email scan-completed na-apụ site na preference scheduled_scan_email (jikwaa na Account → Settings).

Live threat detection Unlimited+

Atụmatụ Unlimited na-ele ngalaba ọ bụla nkwadoro maka mgbaàmà atọ n'etiti nyocha ahaziri:

  • Certificate transparency — kwa nkeji 30 anyị na-ajụ crt.sh maka certs ọhụrụ nwere hostname gị ma ọ bụ subdomain ọ bụla. Certs ọhụrụ na-ebute alert new_certificate.
  • DNS diff — kwa nkeji 30 anyị na-resolve A, AAAA, MX, TXT, NS, CNAME ma tụnyere snapshot ikpeazụ. Mgbanwe na-ebute alert dns_change.
  • Threat-intel — kwa awa anyị na-ele Spamhaus DBL na URLhaus maka listings nke apex hostname. Listings na-ebute alert threat_intel_listing.

Alerts na-dedupe na content-hash signature ka ịchọpụta otu mgbanwe ọzọ ghara re-fire. Lee / dismiss alerts na Dashboard → Domains → [domain] → Monitor. Email notifications na-eso pref threat_alert_email.

Snapshot retention

Monitor snapshots na-auto-prune mgbe ụbọchị 7 gachara, ewezuga baseline kachasị ọhụrụ kwa pair (domain, signal-type) — nke ahụ na-anọ n'agbanyeghị afọ ya ka diff na-esote bụrụ ezi. Dismissed alerts na-purge mgbe ụbọchị 90 gachara.

Kpalite site na API ma ọ bụ MCP

Domain management dị ugbu a na UI-only — enweghị API surface maka verification ma ọ bụ schedule changes. Iji malite scan megide domain e nyochara site na API, jiri POST /api/v1/scans:

curl
curl -X POST https://fixweb.app/api/v1/scans \
  -H "Authorization: Bearer fxw_..." \
  -H "content-type: application/json" \
  -d '{"target":"https://example.com"}'
Domains — Docs · FixWeb