Help
Three ways to start and the questions we get most. Anything else: support@dechonet.com.
Getting started
Check something once
No sign-up. Pick a tool and enter a domain or link. Not sure where to start? The full diagnostic checks DNS, SSL, HTTP, mail and registration in one go and gives a score.
Watch your domain every day
Sign up for monitoring with your email (no password), add a domain and prove you own it with the TXT record shown. From then on we check daily and mail you only when something changes. The free plan covers 1 domain; new accounts try Starter for 30 days (nothing is charged).
Use it from an AI agent or a script
There is an MCP server (remote URL or npm package) and an HTTP API. Both work without a key; with a key, limits are counted per key instead of per IP.
Reading results
Why do results never say "safe"?
We only see what is visible from outside, so we cannot vouch that something is safe. The phishing check answers danger, suspicious, unreachable, official site or no risk signals. "No risk signals" means we found no evidence in what we could see.
My result differs from another tool or my own machine.
DNS, certificates and HTTP responses depend on where you look from. Most checks run from a foreign edge (Cloudflare); Korean sites that drop foreign connections are checked from Seoul. A change you just made may show late because of DNS caching. SSL results show a stored result of up to 24 hours first. Methodology & accuracy →
I think a verdict is wrong.
Send the address you checked and the verdict you saw to support@dechonet.com. When we fix a misjudgement we bump the rules version and log the measurement on the methodology page.
Security monitoring
I added the TXT record but verification fails.
DNS changes take minutes, sometimes hours, to show. Check with the DNS lookup tool that the TXT value is visible first. Keep the record after verifying — the exposure check uses it to confirm ownership too. DNS lookup →
The sign-in email did not arrive.
Check your spam folder. The link works once within 30 minutes. Company mail scanners may open links in advance, so after clicking you press one more button on the page to sign in.
Can I monitor someone else's domain?
No. Only domains whose ownership you have proven. Agencies managing client domains can add the TXT record in the client's DNS, or use bulk checks for a one-off look without ownership.
Too many or too few alert emails.
The first state we see becomes the baseline; after that we send one combined email on days something changed, plus a summary on the 1st of each month. The link at the bottom of each email turns them off.
How do I get a paid plan?
Payments are not open yet. Request a plan from the account page after signing up and we open it free until payments start. Pricing →
What happens to my data if I leave?
Press "Delete account" on the account page: your email, domains and alert settings are deleted at once (no recovery).
API & MCP
Are there rate limits?
Public tools allow 60 requests per minute per client (IP) by default; heavier tools (SSL/HTTP, phishing, exposure and others) allow fewer. Over the limit you get 429. If many people share one IP, create an API key so limits count per key.
Where do I get an API key and how do I send it?
Create one on the monitoring account page and send the header "Authorization: Bearer <key>". A wrong or revoked key is refused with 401 rather than treated as anonymous.
Can I use it commercially?
Free use is for non-commercial purposes. To use it in your company's work or product, get in touch. Terms →
Privacy
Do you store the message I paste?
No. Text pasted into the phishing check is not stored. The targets checked (domains, links) and results are kept for a fixed period for statistics and change comparison. Privacy policy →
What is different about institutional mail accounts?
Accounts signed up with a public-sector mail address sign in with a 6-digit code and get the Business plan free until the end of the year.
Contact
Questions and bug reports: support@dechonet.com · Security issues: please follow the disclosure page.