TANAW Website Intelligence

Website and domain intelligence · A HUB Likha product

Understand any website.

Tanaw is website and domain intelligence in your browser. Enter a domain and it reads public DNS, registration, network and certificate records, then returns a structured technical profile with the evidence and source behind every line.

Free while in beta. Runs in your browser - Tanaw operates no scanning backend and never sends a request to the site you analyze.

Try
  • DNS
  • Registration
  • Network & ASN
  • Certificates
  • Email authentication
  • Provider clues
tanaw.hublikha.com/domains/example.com
Resolves to192.0.2.10
Announcing networkExample network
Serving platformNo DNS-level clue
DNS providerExample DNS
EmailNo MX records
RegistrarReserved example
Every panel in a profile names its source and the moment it was observed. Illustration of the layout - run a lookup for live records.

Two surfaces, one system

What Tanaw can read, and from where.

A web page cannot read another site's page - that is a browser security boundary, not a limitation Tanaw will engineer around. So the split is explicit, and neither surface pretends to know what it cannot.

tanaw.hublikha.com

Domain intelligence, from public records

  • DNS - A, AAAA, CNAME, NS, MX, TXT, CAA, SOA, and whether this resolver validated DNSSEC
  • Registration - registrar, registration and expiry dates, and every EPP status code explained in plain language
  • Network - resolved addresses, announcing ASN and prefix, reverse name, approximate network location
  • Certificates - issuers and validity windows from public Certificate Transparency logs
  • Email authentication - SPF parsed to its policy and lookup count, DMARC to its enforcement level
  • Provider clues - the CDN, host, DNS and mail platforms a CNAME, NS or MX record actually names
Browser extension

Page intelligence, computed locally

  • Technology - 150+ signatures across CMS, frameworks, analytics and AI SDKs, each with its evidence
  • Security - directive-level CSP analysis, HSTS, framing, CORS, cookie flags, mixed content, SRI
  • SEO - title and description pixel budgets, canonical correctness, indexability, JSON-LD
  • Performance - observed Core Web Vitals with the elements responsible
  • Accessibility - WCAG-mapped rules including real contrast computation
  • Privacy - trackers grouped by the organization receiving the data, fingerprinting detection

Computed from data the browser already has. No page content leaves your machine.

The axis marks what each surface can observe, not a security boundary Tanaw enforces.

Evidence before assertion

A finding you cannot check, is a rumour.

Tanaw does not report a conclusion without the record that produced it. Each provider clue names the exact CNAME, NS, MX or SPF entry it came from, its confidence, and the source that answered.

The same discipline applies to what Tanaw cannot establish. When a CDN announces the address, the origin server is genuinely invisible from outside - so the profile says the origin is not identifiable instead of naming the proxy as the host.

Conclusion

Public siteYour Website

high confidence
Supporting record

A192.0.2.10

Evidence channel · provenance

Public DNS · A lookup, answered by the domain's authoritative nameservers

Illustrative specimen - not a live result.

Example evidence anatomy Illustrative - not a live result.

Every other clue in a profile is disclosed the same way - conclusion first, then its record and channel:

  • DNS provider Example DNS high

    Why Tanaw says this

    NSns1.example.net

    Evidence channelPublic DNS · NS record

  • Email provider Example Mail high

    Why Tanaw says this

    MX 1mx1.example.org

    Evidence channelPublic DNS · MX record

  • Authorized to send email Example Mailer medium

    Why Tanaw says this

    SPFinclude:mailer.example.com

    Evidence channelPublic DNS · TXT record

Browser extension

The page in front of you, in under a second.

The extension turns the tab you are already viewing into a structured local report: twelve report areas, evidence-backed findings, local Saved scans, and exports to an Evidence Pack, JSON, HTML or Markdown.

Add to Chrome - free Analyze a domain instead

On the Chrome Web Store. Works in Chrome and Chromium browsers at version 116 or later.

Chapter 1 · Tanaw 0.5.4 Store submission

A real Security report from Tanaw 0.5.4

One click reads the current tab. This frame is captured from the exact Tanaw 0.5.4 build submitted to Chrome Web Store review and shows real Security findings inside the report shell.

Chapter 2 · Local analysis and provenance

Where every value comes from

Each value is computed in the browser from headers, markup and timing the tab already exposes. The evidence that produced each finding stays attached through export.

  • Zero network calls in the default configuration
  • No account required
  • Evidence source stays attached to the finding
Tanaw extension panel
Tanaw 0.5.4 Security view showing severity, score and browser/runtime evidence in the current report shell.
Tanaw 0.5.4 Store submission Real product imagery from the exact 0.5.4 Store submission. Store availability follows Google review and rollout. Local analysis · provenance Every value computed in the browser from what the tab already exposes - no request to a Tanaw server.

Privacy model

There is no Tanaw scanning backend.

When you analyze a domain here, the lookups leave your browser and go straight to the named providers. No Tanaw server sees the query, because no Tanaw server is involved. Nothing is written to a cookie, to local storage, or to a database - close the tab and the profile is gone.

Only the domain name, and the IP addresses it resolves to, are ever sent. Any path or query you paste is discarded before the first lookup.

Read the full privacy disclosure →
Tanaw never contacts the analyzed site Every fact comes from public DNS, registry and certificate-log records - not from probing the target.
No account for analysis Lookups and exports work signed out. There is nothing to sign in to.
Not a vulnerability scanner No port scanning, no path probing, no brute-force subdomain enumeration. Passive public records only.
Coming next What Tanaw is building next

These are the next capabilities on Tanaw's roadmap. They stay clearly marked here until they are ready instead of appearing early as simulated features.

  • Account-backed snapshotsCloud-owned observations available beyond one browser profile. Local snapshot exports and explicitly saved scans already stay on your device today.
  • Synced history and diffDurable account-backed observations that can be compared over time; device-local saved-scan history already works without an account.
  • MonitoringScheduled checks for certificate expiry and DNS changes, with alerts that link to evidence.
  • Subdomain intelligencePassive and ownership-verified only. No enumeration on an anonymous page.

Return to the instrument

Understand another website.

No account, no install, no request to the site you are looking at.

Open the lookup Add to Chrome