Domeenota

Domeenii mirkaneessuu

Hostname Dashboard → Domains irratti dabali. Mala mirkaneessaa lama keessaa tokko filadhu:

• DNS TXT — galmee _fixweb.<hostname> irratti token nuti uumnu dabali. Nuti server keenya irraa deebinee resolve goona, kan kee irraa miti; kanaaf qindaa'inni SPF / DMARC hin gufachiisu. Yeroo babal'achuu idilee: daqiiqaa 1-5; daqiiqaa 10f sekondii 30tti si'a tokko irra-deebinee ilaalla.
• HTTP file — faayilii barruu xiqqaa /.well-known/fixweb-verification.txt irratti token waliin host godhi. Nuti karaa request SSRF-guarded HTTPS irratti fetch goona.

Mirkaneessoonni cron domain-reverify tiin guyyaa guyyaan irra-deebi'anii ilaalamu. Domeeniin duraan mirkanaa'e token resolve gochuu yoo dhaabe (fakkeenyaaf galmee DNS haquudhaan), mirkaneessi ni haqama, active scans isa irratti gara verify_required deebi'u hanga deebitee dabaltutti.

Irra-deebii sakatta'iinsaa saganteeffame Pro+

Karoorri Pro domain mirkanaa'e ≥3h cadence-tti irra deebi'ee skanuu danda'a; karoorri Unlimited ≥1h-tti. Dashboard → Domains → Sagantaa bani, toggle banuu, cadence filadhu:

• Sa'aatii 1 — karoora Unlimited qofa irratti argama
• 3h, 6h, 12h, guyyaa guyyaan, guyyaa 2tti si'a tokko, torban torbaniin

Cron tick hundarratti (daqiiqaa 15tti si'a tokko) scheduler schedules yeroon isaanii ga'e fudhata, optimistic compare-and-swap next_run_at irratti isaan claim godha (akka crons lama double-enqueue hin gooneef), lakkoofsa fayyadama scan kee dabala, passive scan haaraa enqueues godha. Scan sun attestation mirkaneessa domeenii kee dhaala; run hundaaf irra-deebitee hin attest gootu; kanaaf schedule dhaabuun haqi.

Yeroo xumuramu, email scan-completed filannoo scheduled_scan_email fayyadamuun ni baha (Account → Settings irratti Account → Settings irraa to'adhu).

Hordoffii balaawwan yeroo-dhiyoo Unlimited+

Karoorri Unlimited skaaniilee saganteeffaman gidduutti domain mirkanaa'e hunda mallattoo sadii'iif ofumaan ilaalcha:

• Certificate transparency — daqiiqaa 30tti si'a tokko crt.sh irratti certs haaraa hostname kee ykn subdomain kamiyyuu of keessaa qaban gaafanna. Certs haaraan alert new_certificate kakaasu.
• DNS diff — daqiiqaa 30tti si'a tokko A, AAAA, MX, TXT, NS, CNAME resolve goona, snapshot dhumaa waliin madaalla. Jijjiiramni alert dns_change kakaasa.
• Threat-intel — sa'aatii sa'aatiin hostname apex Spamhaus DBL fi URLhaus keessatti tarreeffameeraa ilaalla. Tarreeffamni alert threat_intel_listing kakaasa.

Alerts signature content-hash irratti dedupe godhu; kanaaf jijjiirama walfakkaataa irra-deebiin arguun deebisee hin kakaasu. Alerts Dashboard → Domains → [domain] → Monitor irratti ilaali / dismiss godhi. Beeksisoonni email filannoo threat_alert_email hordofu.

Turtii snapshots

Monitor snapshots guyyoota 7 booda ofumaan haqamu, garuu baseline isa haaraa lamaan (domain, signal-type) tokkoof yoo ta'e ni hafa; inni tokko umurii isaa osoo hin ilaaliin hafa akka diff itti aanu sirrii ta'uuf. Alerts dismissed guyyoota 90 booda ni qulqullaa'u.

API ykn MCP irraa jalqabi

Bulchiinsi domeenii yeroo ammaa UI-only dha; mirkaneessa ykn jijjiirama schedule'f API surface hin jiru. Domeenii duraan mirkanaa'e irratti API dhaan scan jalqabuuf POST /api/v1/scans fayyadami:

curl -X POST https://fixweb.app/api/v1/scans \
  -H "Authorization: Bearer fxw_..." \
  -H "content-type: application/json" \
  -d '{"target":"https://example.com"}'