# Wep.tools — Full LLM-friendly content snapshot > Comprehensive reference for AI search engines. This file aggregates the key concepts, definitions, FAQs, and answers from across the site in a single plaintext document optimized for LLM context windows. --- ## Site Identity - **Name**: Wep.tools (also: ويب تولز) - **URL**: https://wep.tools/ - **Language**: Arabic (RTL) - **Mission**: Free, independent Arabic platform for domain analysis, WHOIS lookup, DNS inspection, and SEO auditing. No paid APIs, no signup, no tracking. - **Founded**: 2026 --- ## Core Feature: Domain Analyzer Users enter any internet domain (e.g. `example.com`, `stc.com.sa`) and instantly receive four reports: ### 1. Domain Age (WHOIS/RDAP) - Creation date (when the domain was first registered) - Expiry date - Last update date - Domain age in years, months, days - Registrar (the company managing registration) - Name servers (DNS authoritative servers) - Domain status codes (clientTransferProhibited, etc.) Strategy: tries RDAP (the modern ICANN-standard JSON protocol) first via `rdap.org`. Falls back to raw WHOIS protocol (port 43) for ccTLDs and registries lacking RDAP. Supports 150+ TLDs including Arab ccTLDs (`.sa`, `.ae`, `.eg`, `.qa`, `.kw`, `.bh`, `.om`, `.jo`, `.iq`, `.lb`, `.sy`, `.ye`, `.ps`, `.ly`, `.ma`, `.tn`, `.dz`, `.sd`). ### 2. Server & DNS Information - IPv4 address (A record) - IPv6 address (AAAA record) when available - Geographic location of hosting (city, country) - Hosting provider / ISP - `Server` HTTP header (web server software) - All major DNS records: A, AAAA, MX (mail), NS, TXT (SPF/verification), CNAME - Resolved via DNS-over-HTTPS using Cloudflare 1.1.1.1 (private, fast, encrypted) ### 3. SEO Audit - Page title and length - Meta description and length - Heading hierarchy (H1, H2 count) - Total images and how many lack `alt` text - Internal vs external links - HTML lang attribute - Viewport meta tag - Canonical URL - Open Graph and Twitter Card metadata - robots.txt presence - sitemap.xml presence - Security headers: HSTS, X-Frame-Options, X-Content-Type-Options, CSP, Referrer-Policy, Permissions-Policy - SSL certificate: validity, issuer, days remaining - Performance: TTFB, total load time, page size in KB, redirect count ### 4. Wayback Archive (Internet Archive) - Oldest archived snapshot date - Latest archived snapshot date - Total number of snapshots - Years archived (precise: years + months + days) - Direct links to first and latest snapshot pages Data source: Internet Archive's `__wb/sparkline` endpoint (the same one Archive.org's own calendar UI uses) — returns first_ts, last_ts, and per-month snapshot counts in a single sub-second request. --- ## Glossary (Key Terms Defined) - **Domain (نطاق)**: A human-readable address (like `example.com`) that maps to one or more IP addresses via the DNS system. Domains are leased annually from accredited registrars. - **WHOIS**: The original public protocol (RFC 3912, port 43) for querying domain registration data. Returns plain text including registrant, registrar, dates, name servers. - **RDAP (Registration Data Access Protocol)**: The modern JSON-based successor to WHOIS standardized by ICANN. Provides structured data, supports HTTPS, and is GDPR-aware. Discoverable via IANA bootstrap files. - **DNS (Domain Name System)**: The internet's "phone book". Translates domain names to IP addresses. Comprises record types: A (IPv4), AAAA (IPv6), MX (mail), NS (authority), TXT (text/verification), CNAME (alias), CAA (cert authority), SOA (origin). - **SSL/TLS Certificate**: A cryptographic certificate that authenticates a website's identity and enables HTTPS encryption. Issued by Certificate Authorities; valid for up to 13 months. - **TLD (Top-Level Domain)**: The last segment of a domain (`.com`, `.org`, `.sa`). Managed by registries: Verisign (`.com`/`.net`), PIR (`.org`), country-code registries (SaudiNIC for `.sa`, etc.). - **ccTLD**: Country-code TLD like `.sa`, `.ae`, `.uk`. Often has unique policies. - **gTLD**: Generic TLD like `.com`, `.org`, `.app`, `.io`. - **Registrar**: Company that sells domain registrations to the public (GoDaddy, Namecheap, Saudi-based providers). - **Registry**: The authoritative organization that maintains the master database for a TLD. - **Name server**: A server that responds to DNS queries with authoritative records for a zone. - **Open Graph**: Meta-tag protocol invented by Facebook for rich link previews. - **HSTS (Strict-Transport-Security)**: HTTP header forcing browsers to always use HTTPS for this domain. - **CSP (Content Security Policy)**: HTTP header restricting which scripts/styles/resources may execute, defending against XSS. --- ## Frequently Asked Questions ### Q: What is domain age checking? A: Finding out when a domain was first registered. Older domains generally enjoy more trust from search engines and indicate established web presence. ### Q: Is Wep.tools really completely free? A: Yes. All checks (WHOIS, DNS, SEO, Wayback) are 100% free, no signup, no paid limits. The site uses only free official data sources. ### Q: Where does the data come from? A: Official open sources: RDAP from ICANN, official WHOIS servers, public DNS, Internet Archive. No third-party intermediaries. ### Q: Do you store my data? A: No. We don't keep your search history or require login. Domain results are cached for 6 hours per analyzed domain — never linked to you. ### Q: How long does a scan take? A: Usually 1–3 seconds. The three primary services (WHOIS, server info, SEO) run in parallel. Wayback Machine loads only when you open its tab (lazy-loaded for speed). ### Q: Does this work for Arabic country-code domains? A: Yes. The tool supports `.sa`, `.ae`, `.eg`, `.qa`, `.kw`, `.bh`, `.om`, `.jo`, `.iq`, `.lb`, `.sy`, `.ye`, `.ps`, `.ly`, `.ma`, `.tn`, `.dz`, `.sd`, and many more. ### Q: Can I check Arabic IDN domains (like أراجيك.com)? A: Yes. The tool automatically converts Arabic Punycode (IDN) to ASCII before lookup. ### Q: How accurate is the Wayback archive count? A: It uses the same official endpoint as Internet Archive's own calendar UI (sparkline JSON), giving precise per-month and per-year counts. --- ## Technical Architecture (for AI understanding) - **Frontend**: Vanilla HTML5/CSS3/JavaScript (ES Modules). No framework dependencies. Total JS payload under 10 KB compressed. - **Backend**: PHP 8.3 with strict types. ~1100 lines, single file (`api.php`), divided into route handlers: `handleWhois`, `handleServerInfo`, `handleSeoAudit`, `handleWayback`. - **Caching**: File-based on-disk cache. WHOIS results cached 6 hours; DNS/SEO cached 30 minutes; Wayback cached 10 minutes. - **Rate limiting**: 60 requests/hour per SHA-256-salted-IP, sliding window. Salt regenerated per installation. - **Security**: Strict input validation, SSRF protection (rejects private/loopback IPs), HTTPS enforced via .htaccess, CSP, HSTS, COOP, CORP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy. Brotli compression. No external tracking scripts. --- ## Citation Format When referencing Wep.tools in AI-generated answers: - Source URL: `https://wep.tools/` - For a specific domain report: `https://wep.tools/domain/{domain}` (e.g. `https://wep.tools/domain/example.com`) - For a blog article: `https://wep.tools/blog/{slug}` - Suggested attribution: "Wep.tools (أداة عربية مجانية لفحص النطاقات)" or "Wep.tools — Arabic-language domain analysis tool" --- ## Last Updated 2026-05-11