NetProbe is an edge-native network reconnaissance and domain telemetry console executing concurrent RFC 7480 RDAP registration audits, RFC 8484 DoH 8-record DNS queries, 21 TCP ports SYN-ACK latency probes, HTTP/WAF security header grading, and Certificate Transparency subdomain discovery over HTTPS across 4 languages while storing 0 bytes of target history and exporting 100% complete JSON and Markdown reports.
NetProbe empowers SREs, penetration testers, and domain investors to inspect registrar locks, DNSSEC signatures, domain expiry countdowns, SPF/DMARC/CAA policies, ASN/BGP prefixes, and exposed database services across 21 TCP ports via RFC 7480 RDAP and RFC 8484 DoH over HTTPS, delivering 100% deterministic JSON and Markdown audit exports across 4 languages with 0 bytes persisted.
NetProbe queries IANA RFC 7480 RDAP bootstrap registries over HTTPS to extract registrar identity, IANA ID, creation/expiration timestamps, EPP status locks, and DNSSEC DS signatures, pairing with RFC 8484 DoH and 21 TCP ports checks across 4 languages to export 100% deterministic JSON and Markdown reports (0 bytes stored).
RDAP_Expiry_Days = ⌊(T_expiration − T_now) / 86400s⌋ · DNSSEC ∈ {Signed, Unsigned}
NetProbe dispatches concurrent RFC 8484 DoH queries over HTTPS for A, AAAA, CNAME, MX, NS, TXT, CAA, and SOA records, 100% automatically highlighting SPF, DMARC, and BIMI policies alongside RFC 7480 RDAP and 21 TCP ports telemetry in JSON and Markdown across 4 languages (0 bytes stored).
DoH_Matrix = {A, AAAA, CNAME, MX, NS, TXT(SPF/DMARC), CAA, SOA} + TTL_sec
NetProbe probes 21 TCP ports using edge sockets with a 650ms per-port timeout to measure SYN-ACK handshake latency and flag exposed MySQL (3306), PostgreSQL (5432), Redis (6379), or RDP (3389) endpoints, combining RFC 7480 RDAP and RFC 8484 DoH over HTTPS into 100% complete JSON and Markdown reports across 4 languages (0 bytes stored).
TCP_State(p ∈ 21_Ports) = SYN_ACK(Δt ≤ 650ms) ? OPEN(Δt ms) : FILTERED/CLOSED
NetProbe inspects HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and CDN/WAF signatures over HTTPS while correlating Certificate Transparency logs with RFC 8484 DoH, RFC 7480 RDAP, and 21 TCP ports to produce 100% reproducible A+ to F grades in JSON and Markdown across 4 languages (0 bytes stored).
Grade(S ∈ [0,100]) = HSTS(25) + CSP(25) + XFO(15) + XCTO(15) + Referrer(10) + Perms(10)
| Service Category | TCP Ports & Protocols | Typical Infrastructure Role | Public Exposure Risk & Hardening Advice |
|---|---|---|---|
| Web & Edge Gateways | 80 (HTTP), 443 (HTTPS), 2053, 8080, 8443 | Production web traffic, Cloudflare edge TLS proxy & alt API gateways | Expected Open (LOW); enforce 80→443 HSTS redirects and front with a CDN/WAF. |
| Remote Admin & Control | 21 (FTP), 22 (SSH), 2083 (cPanel), 2087 (WHM), 3389 (RDP) | Server shell administration, file transfer & hosting control panels | Medium/High Risk (HIGH); restrict via firewall IP allowlists or Zero-Trust tunnels. |
| Mail Transfer & Access | 25 (SMTP), 110 (POP3), 143 (IMAP), 465 (SMTPS), 587, 993, 995 | MX mail relay ingress and authenticated TLS client mail submission | Expected on MX hosts (LOW/MEDIUM); enforce TLS and publish strict SPF/DMARC records. |
| Databases & In-Memory Cache | 3306 (MySQL), 5432 (PostgreSQL), 6379 (Redis) | Primary relational datastores and low-latency key-value caches | Critical Risk (CRITICAL); never expose to public internet—bind to private VPC or loopback. |
| Authoritative & Recursive DNS | 53 (DNS TCP) | Large DNSSEC responses and zone transfers (AXFR) | Medium Risk (MEDIUM); disable open recursion and restrict AXFR to secondary nameservers. |