Public trust-signal triage

Read the visible trust surface for a domain.

ThreatScope Check reads public DNS, email, web delivery and registration signals and returns a bounded, point-in-time interpretation with supporting evidence.

Public signals only. Not a vulnerability scan, audit or assurance rating. Read the method.

Run a check

Check a domain

Enter a domain to run a live public-signal snapshot.

ThreatScope Check v3.2

ThreatScope Check does not intentionally maintain lookup history. Privacy notice.

Try an example:

What this check means - and what it does not claim

What it provides

A point-in-time reading of visible public trust signals, with findings, collection coverage and exact supporting evidence available for review.

What it does not establish

It does not prove that a domain is safe, trustworthy, malicious or compromised, and it is not a penetration test, formal audit, compliance certification or risk rating.

Snapshot results

Run a check to see findings, coverage and supporting evidence.

The result will appear here.

At a glance

Result target

Attention state Informational

Conclusion

Result conclusion

Coverage

Evidence envelope

What deserves attention

Priority findings

Only findings that drive the bounded public assessment appear here. Supporting context remains in Evidence.

What was observed

Observed public trust surface

Four stable assessment areas, read as one surface. Each zone keeps bounded interpretation and evidence coverage separate.

Evidence Inspect evidence and sources Review collection states, supporting signal values and public sources behind this snapshot. Expand

Evidence state

What each collection path returned

These labels come directly from public evidence contract 1.0; the UI does not infer collection state from posture.

Supporting signal values

Signal values show the public observations interpreted by the assessment and supporting-context layers.

Public sources

Sources show the public systems and derived collection paths used in this check.

Method Method and limits See how the four-area public method works and what constrains this reading. Expand

Method & limits

What this tool does and cannot show

This check runs live public checks across four assessment areas and keeps supporting context separate. Read the full method page.

Coverage

Assessment-area detail

Coverage describes completeness across each stable assessment area.

Limitations

What may constrain interpretation

Limitations explain what may narrow, soften or qualify the reading.

Assessment areas

What this check is organised around

Visible signals are interpreted through four stable public assessment areas.

Export Copy or export this snapshot Take away a factual plain-English summary or the exact JSON response. Expand

Shareable summary

Plain-English export

Exact JSON response

Raw export

JSON payload

Related public-interest work

Move from one domain to governance or broader observed context.

ThreatScope Check is the point-in-time instrument. These related resources support governance action and longitudinal .au observation.

Governance and practical guidance

Domain Governance Baseline

Assess ownership, renewal, DNS, email authentication, monitoring and accountability, then use practical guides to address identified gaps.

Explore the baseline and guides

Observation and research

.au Domain Observatory

Explore how public DNS, registration, mail and infrastructure signals appear across an observed panel of .au domains and change over time.

Explore the .au Domain Observatory