Domain registration data — owner, registrar, creation date, expiry, name servers
A, AAAA, MX, NS, TXT, CNAME, SOA records + common subdomain brute-forcing
Nmap-powered scanner with service/version detection and security warnings
SSL/TLS certificate — issuer, expiry, cipher strength, SANs, TLS version
Checks SPF, DKIM, and DMARC DNS records — returns a security_score, rating, and actionable recommendations for missing or weak configurations
Web server, CMS, JS frameworks, CDN, and analytics
Query crt.sh Certificate Transparency logs for a domain and extract certificate, subdomain, and wildcard information
Autonomous System Number (ASN) and network ownership lookup via Team Cymru WHOIS — identifies ASN, BGP prefix, organization, registry, country, and allocation date for domains or IP addresses (no API key required)
Check if an IP is flagged as malicious via AbuseIPDB (api key requied)
Runs all core tools in parallel and returns combined result
Analyzes HTTP security headers — checks HSTS, CSP, X-Frame-Options, and more with severity ratings and misconfiguration details
Search NVD for known CVEs by software name and version (no API key required)
+4 more tools listed on main page