Resolve DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA, CAA) using various public resolvers or custom DNS servers

Perform reverse DNS lookups (PTR records) for IPv4 and IPv6 addresses with automatic zone formatting

Check DNS record propagation across multiple public resolvers (Cloudflare, Google, Quad9, OpenDNS)

Analyze SPF records with recursive expansion of includes/redirects and DNS lookup limit tracking

Analyze DMARC policies, check alignment settings, and identify configuration issues

Walk domain label chain to find effective CAA policies for certificate authority authorization

Verify nameserver resolution and analyze SOA record parameters for DNS configuration health

Query DNS records via DoH and report if the AD (Authenticated Data) bit is set for DNSSEC validation

Validate full DNSSEC chain from root to domain with DS/DNSKEY matching and RRSIG verification

Check if IP or domain is listed on spam blacklists for email deliverability troubleshooting

Test if DNS zone transfers are improperly exposed - detect critical security vulnerabilities

Compare DNS resolver speeds across multiple providers to find the fastest for your location

Analyze Start of Authority records to interpret serial number formats and examine DNS zone timing parameters

Iterative trace from root to authoritative nameservers via DNS over HTTPS with path and timing details

Check which NS names require glue records and whether A/AAAA glue records exist for the zone

Resolve include:/redirect= mechanisms and output a flattened SPF record with DNS lookup counts

Analyze HTTP headers and response metadata with custom method and header support

Follow HTTP redirects and trace the full chain with security upgrade detection

Analyze security headers (HSTS, CSP, X-Frame-Options) with grading and recommendations

Test CORS policies with preflight requests and origin validation

Measure HTTP performance timing including DNS, TCP, TLS, and TTFB metrics

Test gzip, brotli, and deflate compression support and measure size differences

Inspect Set-Cookie headers for Secure, HttpOnly, SameSite, and other security attributes

Analyze TLS certificates, view certificate chains, check expiration dates, and examine Subject Alternative Names

Test which TLS protocol versions a server supports and assess overall security posture

Test Application-Layer Protocol Negotiation to see which protocol a server selects (HTTP/2, HTTP/3)

Report if server staples OCSP responses and display basic certificate status information

Probe connectivity with preset cipher lists (modern/intermediate/legacy) and assess security level

Retrieve service banners from SSH, SMTP, HTTP, FTP, and other network services

Analyze TLS/SSL handshake timing breakdown with detailed phase information and certificate exchange

Search Certificate Transparency logs to discover all certificates issued for a domain

Test TCP connectivity to host:port combinations and measure connection latency

Measure HTTP/HTTPS response latency with statistical analysis (median, p95) without raw ICMP

Look up BGP routing information for IP addresses and prefixes, view AS paths, origin AS, and peering data

Test IPv6 and IPv4 connectivity to determine dual-stack capability and protocol preference

Look up IP address geolocation, ISP, and autonomous system information

Check mail server (MX) health including DNS resolution and SMTP port connectivity testing

Analyze SPF records with email deliverability focus and authentication policy evaluation

Check DMARC policies with email deliverability impact analysis and configuration recommendations

Check if mail server supports TLS/STARTTLS encryption and validate certificate security

Test if mail server implements greylisting by analyzing multiple connection attempts

Query domain registration data using RDAP through IANA bootstrap registry with structured JSON responses

Look up IP address allocation and registration data using RDAP through Regional Internet Registries

Query Autonomous System Number allocation and registration data using RDAP through RIR services