// docs / domains
Duminii
A duminiu hè a verified hostname voi own. Verifying once unlocks active probes, scheduled re-scansioni, è live threat monitoring on that hostname.
Verifying a duminiu
Add a hostname at Dashboard → Duminii. Pick one of two verification methods:
- DNS TXT — add a record at
_fixvibe.<hostname>cù u token noi generate. We re-resolve it da our server, not yours, so SPF / DMARC settings don't interfere. Typical propagation: 1-5 minutes; noi re-check ogni 30 seconds per 10 minutes. - HTTP file — host a small text file at
/.well-known/fixvibe-verification.txtwith the token. FixVibe checks it over HTTPS before enabling domain-gated features.
Verifications sò re-checked daily by u domain-reverify cron. If a previously-verified duminiu stops resolving u token (e.g. voi removed u DNS record), u verification hè revoked è active scansioni against it drop back à verify_required until voi re-add it.
Scheduled re-scansioni Pro+
The Pro plan can re-scan a verified domain at ≥3h cadence; the Unlimited plan at ≥6h. Open Dashboard → Domains → Schedule, enable the toggle, pick a cadence:
- 3 hours — available on Pro
- 6h, 12h, daily, every 2 days, weekly — available on Pro and Unlimited
When a scheduled run is due, FixVibe queues a fresh scan for the verified domain and records the run. The scan inherits your domain authorization until you disable the schedule or revoke active authorization.
On completion, u scansione-completed email goes out using u scheduled_scan_email preference (manage at Account → Settings).
Live threat detection Unlimited+
U pianu Unlimited surveglia autumaticamente ogni duminiu verificatu per trè signali trà e scani prugrammate:
- Certificate transparency — ogni 30 minutes noi query crt.sh per novu certs containing u vostru hostname o any subdomain. New certs fire a
new_certificateallarme. - DNS diff — ogni 30 minutes noi resolve A, AAAA, MX, TXT, NS, CNAME è compare against u last snapshot. Changes fire a
dns_changeallarme. - Threat-intel — ogni hour noi check Spamhaus DBL è URLhaus per listings of u apex hostname. Listings fire a
threat_intel_listingallarme.
View and dismiss alerts at Dashboard → Domains → [domain] → Monitor. Email notifications follow the threat_alert_email preference.
Snapshot retention
Monitor snapshots auto-prune after 7 days, except u most recent baseline per (duminiu, signal-type) pair — that one stays regardless of age so u next diff hè correct. Dismissed allarmi purge after 90 days.
Trigger da API o MCP
Domain management remains dashboard-only for launch. After a domain is verified and explicitly authorized, REST API and MCP can start scans against it according to your plan:
curl -X POST https://fixvibe.app/api/v1/scans \
-H "Authorization: Bearer fxv_..." \
-H "content-type: application/json" \
-d '{"target":"https://example.com"}'