Chrome extension

The Chrome extension checks the domain of the open page in one click; signed in, it shows status and incidents from your organization.

On this page

Chrome extension

The extension checks the domain of the open page on click. At the top of the popup you pick what: the overall check with a score (website, email, DNS and domain, open points sorted by the points they earn) or a single check such as SPF, DMARC, DKIM, MX, SSL/TLS, IPv6, DNS, DNSSEC, name servers, CAA, blacklists, MTA-STS, BIMI, security.txt, HTTP headers or reachability. Your choice stays the next time you open it. Without an account the same free checks run as on the website, with the same hourly limit.

Every open point and the link below the result lead to the result page of that check on domainwarn.com or domainwarn.de (by browser language) – with all details, records and recommendations. The result there comes from the cache, so the check does not run again.

  1. Click “Sign in with DomainWarn” in the popup or in the extension settings. A DomainWarn window opens; if you are already signed in in the browser, you land straight on the confirmation.
  2. Pick the organization and decide whether the extension may only read or also add domains and start checks. Owners, admins and members can grant write access; viewers sign in read-only, client accounts not at all.
  3. Confirm with “Sign in”. The window closes and the extension is signed in.

Signed in, the popup shows below the result whether the domain is monitored in your organization, its state per area and open incidents, plus “Check now”, “Open in dashboard” and, for new domains, “Add”. Checks then use the quota of your organization and account (300 per hour each) instead of the hourly limit per IP.

The extension gets its own token “Chrome-Erweiterung” that is valid for 180 days and is listed under Settings → API like any other, but does not count towards the limit of 20 tokens; there is one per person and organization, and signing in again replaces it; sign-in and revocation appear in the audit log. “Sign out” in the extension revokes it right away. The extension never sees your password: it receives a one-time code valid for two minutes and exchanges it, together with a secret only it knows (PKCE), for the token. If you run DomainWarn yourself, enter the API address in the extension settings under “Advanced”; a manual token can still be stored there as well.

See also: Chrome extension · Get it in the Chrome Web Store · Domain check