Network & domains
DNS, TLS certificates, WHOIS/RDAP, uptime checks, robots.txt and sitemaps.
DNS lookup
GET /api/dnsLive DNS lookup for a domain: returns name, type and records[].
try in playground →HTTP check
POST /api/http-checkCheck any public URL: status code, latency, final URL after redirects, and response headers.
try in playground →Fetch JSON
POST /api/fetch-jsonFetch a public URL and return its JSON response body as parsed JSON, with the final URL after redirects and the content.
try in playground →TLS certificate
POST /api/tls-certInspect the TLS certificate of any public host: subject, issuer, validity window, days remaining, SANs, and SHA-256.
try in playground →Domain WHOIS (RDAP)
POST /api/whoisDomain registration data via RDAP (the structured WHOIS successor): registrar, creation/expiry dates, status.
try in playground →Robots.txt check
POST /api/robots-checkFetch a site's robots.txt and answer: may this user-agent crawl this path?
try in playground →Sitemap reader
POST /api/sitemapFetch and parse a sitemap.xml (or sitemap index): returns up to 500 URLs with lastmod, or the child sitemaps.
try in playground →A2A Agent Card fetch
POST /api/a2a-card-fetchDiscover and fetch a site's A2A (Agent2Agent protocol) Agent Card - tries /.well-known/agent-card.json then.
try in playground →DNS lookup
POST /api/dns-lookupResolve any DNS record type for a host: A, AAAA, MX, TXT, CNAME, NS, SOA, CAA, SRV, PTR.
try in playground →DNS propagation check
POST /api/dns-propagationResolve the same DNS record against 4 public resolvers (Google, Cloudflare, Quad9, OpenDNS) in parallel; surface.
try in playground →SPF check
POST /api/spf-checkFetch and validate a domain's SPF record (RFC 7208).
try in playground →DMARC check
POST /api/dmarc-checkFetch and validate a domain's DMARC policy at _dmarc.<domain> (RFC 7489).
try in playground →DKIM key lookup
POST /api/dkim-lookupFetch and parse a DKIM public-key record at <selector>._domainkey.<domain> (RFC 6376).
try in playground →Email deliverability check
POST /api/email-deliverabilityEnd-to-end email-auth report for a domain: SPF + DMARC + DKIM (probes common selectors automatically) + MX records +.
try in playground →Certificate transparency search
POST /api/cert-transparencySearch public Certificate Transparency logs for every cert issued to a domain.
try in playground →HTTP headers + security analysis
POST /api/http-headersFetch a URL and return every response header plus a security analysis: HSTS, CSP, X-Frame-Options.
try in playground →Tech stack detection
POST /api/tech-stackDetect the technology stack of a public website: CDN, web server, language/runtime, frontend framework (Next.js, Nuxt.
try in playground →ASN + IP geolocation
POST /api/asn-infoLook up the Autonomous System (ASN), prefix, country, registry, and allocation date for an IPv4 address.
try in playground →Gravatar existence check
POST /api/gravatar-checkCheck whether an email address has a Gravatar: hashes the normalized email (MD5, pure CPU - the raw address is never.
try in playground →