FixWeb

// docs / domains

Àwọn domain

A domain is a verified hostname you own. Verifying once unlocks owner-depth scans, scheduled re-scans, and live website monitoring on that hostname.

Fífìdí domain múlẹ̀

Ṣàfikún hostname ní Dashboard → Domains. Yan ọ̀kan nínú ọ̀nà ìjẹ́rìí méjì:

  • DNS TXT — ṣàfikún record ní _fixweb.<hostname> pẹ̀lú token tí a generate. A tún resolve láti server wa, kì í ṣe tiẹ, nítorí náà SPF / DMARC settings kò ní dabaru. Propagation deede: ìṣẹ́jú 1-5; a tún ń ṣàyẹ̀wò ní gbogbo 30 ìṣẹ́jú-aaya fún ìṣẹ́jú 10.
  • HTTP file — host text file kékeré ní /.well-known/fixweb-verification.txt pẹ̀lú token náà. A fetch nípasẹ̀ HTTPS lórí request path tí SSRF ń ṣọ́.

Àwọn verification ni domain-reverify cron máa ń tún ṣàyẹ̀wò lojoojúmọ́. Bí domain tí a ti fìdí rẹ múlẹ̀ bá dáwọ́ resolving token dúró (fún àpẹẹrẹ, o yọ DNS record náà), verification náà máa revoked, active scans sí i yóò sì padà sí verify_required títí o fi tún ṣàfikún rẹ.

Scheduled re-scans Pro+

Eto Pro le tun ṣayẹwo agbegbe ti a fọwọsi ni iyara ≥3h; eto Unlimited ni ≥1h. Ṣii Dashboard → Awọn agbegbe → Iṣeto, mu toggle ṣiṣẹ, yan iyara:

  • Wakati 1 — wa nikan lori eto Unlimited
  • 3h, 6h, 12h, daily, every 2 days, weekly

Ní cron tick kọ̀ọ̀kan (gbogbo 15 min) scheduler máa gba schedules tó yẹ, claim wọn nípasẹ̀ optimistic compare-and-swap lórí next_run_at (kí crons méjì má bà a double-enqueue), increment scan-usage counter rẹ, ó sì enqueue passive scan tuntun. Scan náà jogún domain-verification attestation rẹ — o kò tún attest fún run kọ̀ọ̀kan — nítorí náà pa schedule láti revoke.

Nígbà tí ó bá parí, email scan-completed máa jáde ní lílo preference scheduled_scan_email (ṣàkóso ní Account → Settings).

Ìwárí ewu láàyè Unlimited+

Eto Unlimited n ṣe abojuto laifọwọyi gbogbo agbegbe ti a fọwọsi fun awọn ami mẹta laarin awọn ayewo ti a ṣeto:

  • Certificate transparency — gbogbo ìṣẹ́jú 30 a query crt.sh fún certs tuntun tó ní hostname rẹ tàbí subdomain eyikeyi. Certs tuntun ń dá alert new_certificate sílẹ̀.
  • DNS diff — gbogbo ìṣẹ́jú 30 a resolve A, AAAA, MX, TXT, NS, CNAME, a sì fi wé snapshot tó kẹ́yìn. Àwọn ayípadà ń dá alert dns_change sílẹ̀.
  • Threat-intel — gbogbo wákàtí a ṣàyẹ̀wò Spamhaus DBL àti URLhaus fún listings ti apex hostname. Listings ń dá alert threat_intel_listing sílẹ̀.

Alerts dedupe lórí content-hash signature kí rí ayípadà kan náà lẹ́ẹ̀kansi má bà a fire lẹ́ẹ̀kansi. Wo / dismiss alerts ní Dashboard → Domains → [domain] → Monitor. Ìkìlọ̀ email ń tẹ̀ lé pref threat_alert_email.

Ìpamọ́ snapshot

Monitor snapshots máa auto-prune lẹ́yìn ọjọ́ 7, àyàfi baseline tuntun jù lọ fún pair (domain, signal-type) — èyí máa dúró láìka ọjọ́ orí rẹ, kí diff tó tẹ̀lé lè péye. Alerts tí a dismiss máa purge lẹ́yìn ọjọ́ 90.

Bẹ̀rẹ̀ láti API tàbí MCP

Ìṣàkóso domain wà ní UI nìkan báyìí — kò sí API surface fún verification tàbí schedule changes. Láti bẹ̀rẹ̀ scan sí domain tí a ti fìdí rẹ múlẹ̀ nípasẹ̀ API, lo POST /api/v1/scans:

curl
curl -X POST https://fixweb.app/api/v1/scans \
  -H "Authorization: Bearer fxw_..." \
  -H "content-type: application/json" \
  -d '{"target":"https://example.com"}'
Àwọn domain — Docs · FixWeb