775 services carry this tag in their source record. Tags come from the provider, not from us — a tag is a claim about what the service does, not proof that it does it well.
DNS CNAME record lookup for a hostname: the alias target chain, TTL, and a dangling-CNAME check (target does not resolve, a subdomain-takeover risk indicator). Asset inventory and security hygiene. $0.01 per lookup.
DNSSEC check for a domain: whether DS and DNSKEY records exist, whether the resolver validates the chain (AD flag), signing algorithms used. Security posture and DNS hygiene audits. $0.01 per check.
DNS HTTPS/SVCB record lookup: service binding records that advertise HTTP/3 and HTTP/2 (ALPN), ECH and IP hints for a domain. Shows whether a site supports HTTP/3 at the DNS level. $0.01 per lookup.
DNS MX record lookup: the mail exchanger hosts and priorities for a domain, TTL, plus the detected mail provider (Google, Microsoft 365, Proofpoint, Zoho...). Email routing and provider identification. $0.01 per lookup.
Nameserver health for a domain: every NS hostname resolves to an address, SOA serial and primary, minimum-two-nameserver rule, and whether all nameservers share the same parent (single point of failure). Zone reliability...
DNS NS record lookup: the authoritative nameservers for a domain and the detected DNS hosting provider (Cloudflare, Route 53, Google Cloud DNS, Azure, NS1, GoDaddy, Namecheap...). Infrastructure discovery and migration c...
DNS SOA record lookup: zone start-of-authority with primary nameserver, admin contact email, serial number and refresh/retry/expire/minimum timers, parsed into JSON. Zone health and change detection (serial). $0.01 per l...
DNS SRV record lookup: service records (SIP, XMPP, LDAP, Minecraft, Kerberos and others) with priority, weight, port and target host, parsed. Service discovery for a domain. $0.01 per lookup.
DNS TXT record lookup: all TXT records for a domain (SPF, site-verification tokens for Google, Microsoft, Apple, Facebook, Stripe, Atlassian and others), with TTL. Reveals which SaaS services a company has verified. $0.0...
BIMI record check for a domain: whether a Brand Indicators for Message Identification record exists at default._bimi, the SVG logo URL and the VMC certificate URL. Email branding readiness check. $0.01 per domain.
DKIM check for a domain: tests the most common DKIM selectors (google, selector1/selector2 for Microsoft 365, default, k1, mail, dkim, s1, s2, mandrill, mailchimp, sendgrid, zoho, amazonses and more) or a selector you gi...
SPF record check for a domain: fetches and parses the SPF record (all qualifier, includes, ip4/ip6, a, mx, redirect), counts DNS-lookup mechanisms against the 10-lookup limit by expanding includes, flags duplicate record...
A records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resol...
AAAA records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare re...
CNAME records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare r...
MX records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare reso...
TXT records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare res...
NS records for a domain as answered by Cloudflare 1.1.1.1 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare reso...
A records for a domain as answered by Google 8.8.8.8 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolvers...
AAAA records for a domain as answered by Google 8.8.8.8 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolv...
CNAME records for a domain as answered by Google 8.8.8.8 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resol...
MX records for a domain as answered by Google 8.8.8.8 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolver...
TXT records for a domain as answered by Google 8.8.8.8 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolve...
NS records for a domain as answered by Google 8.8.8.8 (DNS over HTTPS): the records, TTL, response code (NOERROR/NXDOMAIN/SERVFAIL), whether the resolver validated DNSSEC, and the resolver's answer time. Compare resolver...