Website profiles · Technology insights · Alternatives

jwt.io No paid content found

Categories: Development

Tags: jwtjwt payloadjwt headerjwt signaturejson web tokenjwt debuggerjwt encoderjwt decoderjwt verification

JSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS).

Visit website

Updated: 2026-09-03 16:37 Language: English (default) Access: Normal

Profile views 14 Outbound visits 6
jwt.io Full homepage screenshot

Website Overview

An established domain and managed infrastructure suggest continuity of operations and may support dependable delivery, although neither guarantees service quality. Several search or sharing settings need attention. Together they may make snippets, preview images or preferred URLs less consistent across platforms.

Domain and Registration

Registered in 2014, this domain has about 12 years of history. That suggests continuity, although ownership and purpose may have changed. The registrar, MarkMonitor Inc., specializes in corporate domain and brand management, suggesting attention to domain asset protection. Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain uses the common .io extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by Cloudflare, indicating managed DNS hosting. MX records point to the Proofpoint email service. No CNAME was found; the observed records resolve directly to addresses. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used.

TLS and Certificates

The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued within the Google Trust Services cloud or CDN ecosystem. The certificate's total validity is about 90 days, consistent with a short renewal cycle.

HTTP and Browser Security

X-Powered-By exposes backend information: Next.js. The response lacks these common security headers: CSP, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, clickjacking protection. The cf-ray response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers. The Server header identifies cloudflare without an exact version.

Technology Stack Analysis

The public page identifies Next.js, Cloudflare, Vercel without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

The meta description has 216 characters and may be shortened in search results. The canonical URL points to another host: https://jwt.io. Search engines may consolidate indexing signals there. Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 24 characters, within a common display range.

Hosting and Email

DNSCloudflare
HostingVercel
EmailProofpoint
Location Location unknown 104.18.32.191

Pages, Search and Sharing

Meta descriptionJSON Web Token (JWT) is a compact URL-safe means of representing claims to be transferred between two parties. The claims in a JWT are encoded as a JSON object that is digitally signed using JSON Web Signature (JWS).
Canonical URLhttps://jwt.io
LanguageEnglish (default)
Twitter Cardsummary_large_image

Social Sharing Preview

9 fields

robots.txt (opens in a new tab)

1 rules
All bots 1 allowed · 0 disallowed
  • Allow/

Sitemaps

1

Registration details RDAP / WHOIS

RegistrarMarkMonitor Inc.
Registered2014-01-19
Expires2027-01-19
Domain statusclientDeleteProhibited https://icann.org/epp#clientDeleteProhibited、clientTransferProhibited https://icann.org/epp#clientTransferProhibited、clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Nameserverscarrera.ns.cloudflare.com、jaime.ns.cloudflare.com
DNSSECunsigned

DNS records

TypeNameValueTTLPriority
Ajwt.io104.18.32.191300—
Ajwt.io172.64.155.65300—
AAAAjwt.io2a06:98c1:3101::ac40:9b41300—
AAAAjwt.io2a06:98c1:310b::6812:20bf300—
MXjwt.iomxa-00553301.gslb.pphosted.com360010
MXjwt.iomxb-00553301.gslb.pphosted.com360010
NSjwt.iocarrera.ns.cloudflare.com86400—
NSjwt.iojaime.ns.cloudflare.com86400—
TXTjwt.iogoogle-site-verification=GQkcab37IZnqQ2FOiFUhF6lnnPJNsLS3UHmpnXG8Qh4300—
TXTjwt.iov=spf1 -all300—
DMARC_dmarc.jwt.iov=DMARC1; p=reject; rua=mailto:[email protected]; ruf=mailto:[email protected]; pct=100;18000—

TLS and certificates

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectjwt.io
IssuerGoogle Trust Services
Valid until2026-10-30T02:26 · Remaining when checked: 56 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HeaderValue
content-typetext/html; charset=utf-8
cache-controlprivate, no-cache, no-store, max-age=0, must-revalidate
servercloudflare
strict-transport-securitymax-age=63072000

Identified technologies

Next.jsCloudflareVercel

Recent Updates

Related questions

More questions →

No related questions yet.

User reviews (0)