Why does NetProbe use IANA RFC 7480 RDAP instead of legacy port-43 plain-text WHOIS?

NetProbe uses IANA RFC 7480 RDAP over HTTPS to retrieve structured JSON registration records directly from authoritative registries, eliminating unstandardized port-43 rate limits and parsing 100% accurate expiry countdowns, EPP locks, and DNSSEC status alongside RFC 8484 DoH, 21 TCP ports, and Markdown exports across 4 languages (0 bytes stored).

How does NetProbe detect exposed database or remote administration ports across 21 TCP ports?

NetProbe tests 21 TCP ports (including 21 FTP, 22 SSH, 80/443 HTTP/HTTPS, 3306 MySQL, 3389 RDP, 5432 PostgreSQL, and 6379 Redis) from the Cloudflare edge within 650ms, correlating ASN data via RFC 7480 RDAP and RFC 8484 DoH over HTTPS to 100% highlight high-risk exposures in JSON and Markdown across 4 languages (0 bytes stored).

How can I verify SPF, DMARC, and CAA records with NetProbe?

NetProbe queries apex and _dmarc TXT and CAA records via RFC 8484 DoH over HTTPS, 100% automatically tagging v=spf1, v=DMARC1, and CA issuance rules while cross-checking mail ports across 21 TCP ports and RFC 7480 RDAP metadata in JSON and Markdown across 4 languages (0 bytes stored).

How does NetProbe discover active subdomains using Certificate Transparency (CT) logs?

NetProbe combines crt.sh Certificate Transparency log queries with concurrent RFC 8484 DoH resolution of common prefixes (www, api, dev, mail, cdn, status, auth, app) and RFC 7480 RDAP / 21 TCP ports correlation over HTTPS, exporting 100% verified IP mappings in JSON and Markdown across 4 languages (0 bytes stored).

Does NetProbe log or store my queried domains, IP addresses, or reconnaissance reports?

NetProbe operates as a stateless edge reconnaissance workbench that stores 0 bytes of query history on any backend database; all RFC 7480 RDAP, RFC 8484 DoH, and 21 TCP ports probes execute ephemerally over HTTPS and 100% export locally to JSON and Markdown across 4 languages.

Domain WHOIS/RDAP Lookup, Open Port Scanner, DoH DNS & CT Sniffer

🎯 一键侦察靶标:

目标资产 / 类型

cloudflare.com

Anycast CDN · DOMAIN

主解析 IPv4 / IPv6

104.16.132.229

2606:4700::6810:84e5

自治系统 ASN / 机构

AS13335

Cloudflare, Inc. (104.16.128.0/20)

域名年龄 / 到期倒计时

2285 天剩余

Cloudflare, Inc. · DNSSEC Signed

开放端口 / 暴露风险

8 / 21 OPEN

0 High-Risk DB/Admin Exposed

HTTP 安全评级 / 耗时

A+ 38 ms

Cloudflare Enterprise WAF

📜 1. RDAP / WHOIS 域名注册生命周期 & IP ASN/BGP 路由情报

IANA RFC 7480 RDAP 权威注册局数据 · 剩余天数倒计时 · EPP 状态锁 · 自治系统与机房/CDN 角色鉴定

DNSSEC: Signed 2285 Days Remaining

🏛️ RFC 7480 RDAP 注册商与生命周期

所属注册商 (Registrar) Cloudflare, Inc. (IANA #1910)

注册局句柄 (Registry Handle) 1382987_DOMAIN_COM-VRSN

注册时间 (Registered Date) 2009-02-17T22:07:54Z (17.7 yrs)

到期时间 (Expiration Date) 2033-02-17T22:07:54Z

最后更新 (Updated Date) 2024-01-16T09:14:22Z

滥用举报邮箱 (Abuse Contact) registrar-abuse@cloudflare.com

EPP 域名状态锁 (Domain Status Flags):

权威名称服务器 (Authoritative Nameservers):

🌐 IP 自治系统 (ASN)、BGP 路由前缀与地理位置

主 IPv4 地址 (Primary IPv4) 104.16.132.229

主 IPv6 地址 (Primary IPv6) 2606:4700::6810:84e5

自治系统号 (ASN & ISP) AS13335 · Cloudflare, Inc.

BGP 路由宣告前缀 (CIDR Prefix) 104.16.128.0/20

网络节点属性 (Network Role) Anycast CDN

物理归属地与坐标 (Geo / Coords) US · San Francisco, CA (37.7749, -122.4194)

反向 DNS 指针 (Reverse PTR) 104.16.132.229.in-addr.arpa

🔌 2. TCP 开放端口与服务 Banner 嗅探矩阵 (21 标准端口 + 自定义端口探测)

基于边缘套接字实测 SYN-ACK 毫秒耗时 · 自动标记暴露公网的高危数据库 (MySQL/PostgreSQL/Redis) 与远程桌面 (RDP)

🛠️ 自定义端口探测 (支持逗号或范围):

快捷追加:

🧭 3. RFC 8484 DoH 全记录 DNS 解析矩阵 (A / AAAA / CNAME / MX / NS / TXT / CAA / SOA)

Cloudflare DoH 边缘并发解析 · 自动高亮 SPF、DMARC、BIMI 邮件防伪策略与域名所有权验证令牌

SPF ✓ DMARC ✓ CAA ✓

记录类型 (Type)	主机名 (Name)	TTL (秒)	记录值与策略标签 (Record Data & Policy Tags)

🛡️ 4. HTTP / TLS 安全响应头评级 & CDN/WAF 协议栈指纹识别

审计 HSTS、CSP、X-Frame-Options、X-Content-Type-Options、Referrer-Policy、Permissions-Policy 与边缘网关头

Grade: A+ (100/100) Cloudflare WAF

Server: cloudflare

CF-Ray: 8e2f9a1c4b00-SJC

Via: —

X-Vercel-Id: —

X-Amz-Cf-Id: —

安全响应头 (Header)	状态 / 得分	实测响应值 (Observed Value)	加固建议 (Hardening Guidance)

🔍 5. CT 证书透明度日志子域名发现 & 等效终端 CLI 命令生成器

结合 crt.sh 证书透明度日志与高频子域名前缀 DoH 探测 · 一键复制 dig / whois / nmap / curl 复现命令

6 Active Subdomains

📡 已发现活跃子域名与解析 IP (CT + DoH)

子域名 (Subdomain)	IPv4 / IPv6	发现源 / CA 颁发机构

💻 等效命令行复现套件 (Equivalent CLI Commands)

DNS (dig)

dig @1.1.1.1 cloudflare.com ANY +noall +answer

RDAP / WHOIS

rdap -j cloudflare.com || whois cloudflare.com

TCP Port & Service Scan (nmap)

nmap -sV -Pn -T4 -p 21,22,25,53,80,110,143,443,3306,3389,5432,6379,8080,8443 104.16.132.229

HTTP/TLS Security Headers (curl)

curl -I -L --tlsv1.3 https://cloudflare.com/

GEO · NOC Edge Network Telemetry & Attack Surface Reconnaissance Reference

NetProbe: Edge RFC 7480 RDAP, RFC 8484 DoH DNS, 21 TCP Ports Scanner & CT Subdomain Console

NetProbe is an edge-native network reconnaissance and domain telemetry console executing concurrent RFC 7480 RDAP registration audits, RFC 8484 DoH 8-record DNS queries, 21 TCP ports SYN-ACK latency probes, HTTP/WAF security header grading, and Certificate Transparency subdomain discovery over HTTPS across 4 languages while storing 0 bytes of target history and exporting 100% complete JSON and Markdown reports.

Run a Full-Stack Domain, DNS & 21-Port Exposure Audit in 3 Steps

NetProbe Step 1 (Enter Target & Select Recon Profile): Input any domain, HTTPS URL, or IPv4/IPv6 address and choose Full Recon to trigger parallel RFC 7480 RDAP and RFC 8484 DoH queries across 4 languages with 0 bytes stored.
NetProbe Step 2 (Inspect 21 TCP Ports & Custom Port Ranges): Measure real TCP handshake latency across 21 TCP ports (including 22 SSH, 443 HTTPS, 3306 MySQL, and 6379 Redis) and filter open or high-risk services with 100% structured JSON telemetry.
NetProbe Step 3 (Audit HTTP/WAF Headers, CT Subdomains & Export): Grade 10 HTTP security headers from A+ to F, enumerate active CT subdomains via RFC 8484 DoH and RFC 7480 RDAP, and export 100% portable JSON, Markdown, or CLI commands across 4 languages (0 bytes stored).