Home/Security

Security & Trust Architecture

At DomainChecker.app, engineered by Wordkraft AI LLP, security and privacy are built into our foundation. We maintain zero-logging guarantees to completely protect your search ideas from front-running.

1. Zero Search Query Retention (Anti-Front-Running)

Traditional domain search portals and registrars often log user queries, exposing high-value domain ideas to automated bots that front-run or register them before you can complete checkout. DomainChecker.app maintains an absolute ephemeral lookup model: search stems are parsed in volatile RAM only to resolve availability and are never saved to disk, databases, or forwarded to third-party brokers.

Zero query databases • Ephemeral execution

2. Direct Recursive Nameserver Resolution

Instead of scraping registrar search APIs that can be intercepted or rate-limited, our resolver cluster directly queries authoritative TLD root nameservers via UDP/TCP protocols (RFC 1034 & RFC 1035) and ICANN Registration Data Access Protocol (RDAP, RFC 7480). This ensures 100% verified status without third-party data tampering.

RFC 7480 RDAP Compliant • Root NS Verification

3. DNSSEC Signature Verification

We inspect DNSSEC (Domain Name System Security Extensions) resource records (DS, RRSIG, DNSKEY) across all supported top-level domains. This cryptographically confirms that domain responses have not been spoofed, hijacked by man-in-the-middle cache poisoning, or rerouted by malicious intermediaries.

Cryptographic Chain-of-Trust Validation

4. Client-Isolated Local Storage

When you bookmark favorite domains or toggle theme settings, all data is retained exclusively in your browser’s HTML5 `localStorage` on your local device. We do not require account signups, do not track device fingerprints, and never send your bookmarked domain portfolios to remote analytics servers.

No user tracking cookies • Local-only storage
Vulnerability Disclosure

Responsible Security Disclosure

If you discover a security vulnerability or anomalous behavior within DomainChecker.app or our DNS resolver fleet, please report it immediately to our security response team at Wordkraft AI LLP. We practice coordinated responsible disclosure and pledge not to initiate legal action against researchers acting in good faith.