nullfault.app

nullfault.app serves a website of its own over HTTPS and under www. It answers on IPv4 only, with a valid TLS certificate and MX records for mail.

1,985,017 other domains share an IP address with it.

The most recent crawl returned the page title “NullFault | Launch-Ready Web App Security Scanner” and 83,776 bytes of HTML.

Domain properties

Property	Value	Explanation
Top-level domain	.app	Statistics for all domains we know under this TLD.
Has website	yes	A website is hosted under the domain, which does not redirect to an external domain.
Has MX-record	yes	The domain has an MX record.
External redirect	no	The domain redirects to another domain.
Redirect to https	yes	The domain redirects to https.
Redirect to www.	yes	The domain redirects to www.domain.
Only with www.	no	The domain can only be reached with the subdomain "www".
Only DNS, no website	no	There are no A or AAAA records in DNS.
IP-Address	only IPv4	Shows whether the domain only has IPv4 or IPv6 or both.
SSL-Certificate	valid	Shows whether the domain has a valid SSL certificate.
Redirects	0	Number of domains that redirect to this domain.
Reverse IP	1,985,017	Number of domains with the same IP(s).

This data through the API

The data on this page is also available as JSON: /lookup for the key facts, /reverseip, /redirect and /similar for the lists, and /dnshistory with Basic and Premium. A free account comes with an API key and 100 calls a day.

curl -X POST https://api.webxtrend.com/v1.0/lookup \
  -H 'Content-Type: application/json' \
  -d '{"token": "YOUR_TOKEN", "query": "nullfault.app"}'

Create a free account Read the API docs

Similar websites

Website	Similarity
vibe-scan.app VibeScan: Free Security Scanner for Lovable, Bolt & Cursor Apps Paste a URL and get a prioritized security report for your AI-built app in about 30 seconds. Includes evidence, fix prompts, and a recheck.	89 %
getleaked.sh GetLeaked — Check If Your Secrets Are Exposed \| API Key & Credential Scanner Free security scanner that checks if your API keys, credentials, and secrets are exposed in public code. Scan any URL in seconds.	89 %
sayver.co Sayver — Security Monitoring for Apps Built with AI Sayver catches security holes and bugs in apps built with Cursor, Lovable, Bolt, and v0. Paste your live URL for a scan in about 60 seconds — plain-English f...	88 %
aphido.dev Aphido — Be the bug to find the bug Security scanner for Lovable, Bolt, and v0 apps. Scan your app URL and get an instant security report with actionable fixes.	88 %
fixprompt.app FixPrompt — Security scanner for AI-built apps Is your Lovable, Bolt, Cursor or v0 app safe? Paste your URL for a free passive security scan: exposed keys, headers and a fix prompt for your AI.	88 %
quickaudit.dev QuickAudit - Free Security Scanner for AI-Generated Apps \| powered by codelake Scan your AI-generated apps for exposed API keys, misconfigured databases, and security vulnerabilities. Free, instant, no signup required.	87 %
clarseal.com Security Scanner for AI-Built Apps \| ClarSeal Is your AI-built app leaking keys or data? Scan a live Lovable, Bolt, Cursor or v0 app for exposed API keys, open admin routes, leaked source maps and weak s...	87 %
gobasepoint.com Basepoint — Find out if your app is hackable Paste your URL. Find out if your app is hackable — before someone else does. The dead-simple security check for people who vibe-code.	86 %
volpen.dev VolPen — Local-first Chrome security testing for AI-built apps Passive vulnerability scanner for web apps. Detects OWASP Top 10, API security issues, and RLS (Row Level Security) problems. Local-first, no telemetry, cons...	86 %
launchlock.dev LaunchLock — Launch-ready security scans for AI-built apps Scan your public URL, get a launch-readiness score with security, SEO, and AEO findings, and copy AI-ready fix prompts before you ship.	86 %
aegyn.dev Aegyn – Supabase Security Scanner for Vibe-Coded Apps Continuous security watchdog for Supabase apps. Plain-English findings for RLS, IDOR and exposed secrets — each with the exact SQL fix. Free plan available.	86 %
patchvex.com PatchVex — Ship secure AI-built apps Free instant web security scanning for AI-built apps, plus VulnPilot — an open-source CLI that ranks vulnerabilities by real-world exploitation, not just sev...	86 %
oversharehq.com Overshare — open-source security scanner for AI-built apps Open-source security scanner for AI-built web apps. Paste a URL or run it in CI on every deploy. Finds exposed API keys, source maps and misconfiguration — h...	86 %
aipentest.app AIPentest — AI Penetration Testing for Modern Web Apps Authorized AI penetration testing for modern web apps. Discover vulnerabilities before attackers do — first finding free, full report from $99.	86 %
sekrd.com Sekrd — Deep security audit for AI-built apps 15 security checks for AI-built apps. Deep Supabase RLS, Firebase rules, CORS, rate limiting, IDOR, and auth flow auditing with site crawling and one copy-pa...	85 %
kalasec.com Kalasec \| Automated Security Scanning Automated website security scanning for founders and SMBs. Paste a URL and get a plain-English A–F report with prioritized fixes — security without a CISO.	85 %
steelsuit.com SteelSuit — Web App Security Testing & Vulnerability Scanner Free web app security testing. SteelSuit scans any site for exposed secrets, misconfigurations, and real vulnerabilities in seconds — including everything AI...	85 %
appsafe.dev AppSafe — Find exposed API keys before attackers do Scan your AI-built app for exposed API keys, missing security headers, and misconfigurations. Get a security report with ready-to-use AI fix prompts.	85 %
ephyra.tech Ephyra — Security scanner for AI-built apps Ephyra finds the dangerous mistakes hiding in your AI-built repo — and gives you a prioritized fix list your coding tool can use right away. Read-only access...	85 %
scanvibe.dev Vibe Scan: Free Vibe Coding Security Scanner \| ScanVibe Free vibe coding security scanner for apps built with Lovable, Bolt or Cursor. Finds exposed API keys, missing Supabase RLS and weak headers in seconds.	85 %

Websites whose start page offers something similar, found by comparing the text of their start pages, across languages. Near-identical copies, parking pages and error pages are left out. The full list of up to 100 comes through the API: similar websites.

Last SSL certificate

Issuer	Let's Encrypt
Valid from	8/17/2026
Valid to	11/15/2026
Time until expiry	27 days

Last successful crawl

Title	NullFault \| Launch-Ready Web App Security Scanner
Description	Run a free, read-only security scan before launch. NullFault finds leaked secrets, exposed configs, missing headers, public endpoints, and risky app defaults.
Content-Length	83,776 bytes

Title and description as published by the page itself in its own <title> and <meta name="description"> tags.

DNS history

IPv4 address	Last updated
216.198.79.1	6/26/2026

Mail server	Priority	Last updated
inbound-smtp.us-east-1.amazonaws.com	10	6/26/2026

Name server	Last updated
dns1.registrar-servers.com	6/26/2026
dns2.registrar-servers.com	6/26/2026

The five most recent states of each record type. The full history comes through the API: DNS history.

Most recent redirect domains

No domains found.

Reverse IP neighbours

216.198.79.1 1,985,017 domains · here since 9/23/2026

Domain	On this IP since
zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz.uk	10/9/2026
zzzzzly.online	9/22/2026
zzzzrakesh.me	9/19/2026
zzzznayu.ru	9/19/2026
zzzzdevelopment.com	10/13/2026
zzzzas.app	10/12/2026
zzzz.yt	9/19/2026
zzzz.lt	9/15/2026
zzzxc.com	10/9/2026
zzztools.com	9/20/2026
zzzsunny.space	9/13/2026
zzzril.art	9/22/2026
and 1,985,004 more

Sharing an address does not always mean sharing a server: on a CDN or a large hosting platform, millions of unrelated domains answer on the same few addresses. We measured how far that goes in Half the web sits on 276 IP addresses. The complete list of neighbours, also for an IP address, comes through the API: reverse IP lookup.

Dive into our data, search now!