Scan a website and keep the evidence

A scan stores a full-page screenshot, the readable page text, and the raw HTML source of the URL you gave it. Alongside that it records the hosting provider, the IP address, the registrar, the nameservers and the mail setup of the domain. Everything is kept under one link.

Scam pages disappear fast, often within hours of going live. Once the page is gone, so is your proof. A snapshot keeps what the page looked like at the moment you found it, which is what a hosting provider, a registrar or a lawyer will ask for.

No. Every scan started from this page is public, and anyone who has the link can open it. Scans also show up in the search below. Do not scan pages behind a login, and do not scan anything holding personal data.

Snapshots are permanent. The link keeps working, so you can put it in a report or an abuse complaint and it still resolves months later.

If the same URL was scanned publicly within the last two hours, your scan reuses that capture instead of loading the page again. You still get your own permanent link, but the evidence comes from the earlier capture, so the snapshot shows when the page was actually fetched rather than when you pressed the button. The result page states that plainly and links to the scan that did the fetching.

Some sites answer a capture with a bot challenge or a block page. The scan still stores what it could read about the domain, so the hosting and registrar data is there even when the screenshot is not. Try the URL again a little later, or scan a different page on the same domain.

Yes. The captured HTML is never executed. You see it as escaped source code in a text box, and the page text as plain markdown. Nothing from the scanned site runs in your browser.

Yes. Open the snapshot and use the Print report button at the top. It prints a clean black-and-white version with the screenshot, the capture time, the hosting provider, the IP, the registrar and the nameservers, plus the permanent link so anyone reading the printout can open the original. Print to PDF if you need to attach it to an email or a filing.

Every stored file has a SHA-256 checksum, and the record itself is signed by us. Anyone can download a file, hash it, and check the signature against our published public key, without an account and without asking us first. What that establishes: the record was issued by nebty, and neither the record nor the files have changed since. What it does not establish: the time of the capture, because we hold the signing key and the clock, so our timestamp is our own statement rather than proof. Only an external timestamp authority (RFC 3161) would close that gap, and we do not use one today. It also does not establish that the site showed this content to anybody else. A page can look different depending on the country it is loaded from, which is why the snapshot records that country under "Captured from", and it can differ per visitor or per A/B test group. Snapshots made before signing existed carry no signature at all, and the result page says so instead of pretending otherwise.

Yes. Email us at info@nebty-id.com with the link or the scan ID and we will remove it. There is no self-service delete, because a snapshot that anyone could erase would be worth little as evidence. Tell us if the scan captured personal data or a page behind a login and we will treat it as urgent.