# NetProbe (域网嗅探台) — Edge WHOIS/RDAP, DoH DNS Matrix, 21-Port TCP Service Sniffer & Subdomain Recon Console

> NetProbe is a stateless, edge-native network reconnaissance and domain lifecycle auditing workbench running on Cloudflare Workers. NetProbe executes RFC 7480 RDAP domain lifecycle queries, RFC 8484 DoH 8-record DNS resolution, 21 TCP ports SYN-ACK latency and banner sniffing, HTTP/TLS security header grading (A+ to F), and Certificate Transparency (CT) subdomain enumeration across 4 languages while storing 0 bytes of user query history.

## Key Capabilities & Technical Specifications
- **RFC 7480 RDAP Lifecycle & DNSSEC Intelligence**: Queries IANA RDAP bootstrap endpoints for registrar, IANA ID, creation/update/expiration dates, remaining days countdown, DNSSEC signature status (`Signed` / `Unsigned`), EPP status flags (`clientTransferProhibited`, etc.), nameservers, and abuse contacts.
- **RFC 8484 DoH 8-Record DNS Matrix**: Queries `A`, `AAAA`, `CNAME`, `MX`, `NS`, `TXT` (highlighting `SPF`, `DMARC`, `BIMI`, and domain verification tokens), `CAA`, and `SOA` records with TTL and edge latency.
- **IP ASN, BGP & Geolocation Telemetry**: Extracts primary IPv4/IPv6, ASN (`AS13335`), ISP/Organization, BGP CIDR prefix, country/city coordinates, reverse DNS (`PTR`), and network role (`Anycast CDN`, `Cloud Datacenter`, `Public DNS Resolver`, `Enterprise Transit`).
- **21-Port TCP Open Port & Service Risk Sniffer**: Probes 21 standard TCP ports (`21`, `22`, `25`, `53`, `80`, `110`, `143`, `443`, `465`, `587`, `993`, `995`, `2053`, `2083`, `2087`, `3306`, `3389`, `5432`, `6379`, `8080`, `8443`) plus custom ports with 650ms timeouts, classifying `OPEN`, `FILTERED/CLOSED`, and `RESTRICTED` states and flagging exposed MySQL/PostgreSQL/Redis/RDP risks.
- **HTTP/TLS Security Header Grader & CT Subdomain Sniffer**: Audits HSTS, CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, and Permissions-Policy for an `A+` to `F` grade, fingerprints CDN/WAF stacks, discovers active subdomains via `crt.sh` + DoH prefix probing, and exports JSON, Markdown, and CLI commands (`dig`, `whois`, `nmap -sV`, `curl -I`).

## Canonical Entry Points
- [NetProbe Recon Console (Auto-detected Locale)](https://whois.llmland.io/): Main interactive domain, DNS, port, and subdomain reconnaissance workbench.
- [Recon Protocols & Security Audit Guide (FAQ)](https://whois.llmland.io/faq/): RFC 7480 RDAP, RFC 8484 DoH, 21-port risk matrix, and FAQ.
- [Simplified Chinese (简体中文)](https://whois.llmland.io/zh-Hans/) · [中文协议指南与常见问题 (FAQ)](https://whois.llmland.io/zh-Hans/faq/)
- [Traditional Chinese (繁體中文)](https://whois.llmland.io/zh-Hant/) · [繁體協定指南與常見問題 (FAQ)](https://whois.llmland.io/zh-Hant/faq/)
- [English](https://whois.llmland.io/en/) · [English Recon Guide & FAQ](https://whois.llmland.io/en/faq/)
- [Japanese (日本語)](https://whois.llmland.io/ja/) · [日本語プロトコルガイド・FAQ](https://whois.llmland.io/ja/faq/)

## Machine-Readable Resources
- [Full Technical Specification & Multilingual Reference (llms-full.txt)](https://whois.llmland.io/llms-full.txt)
- [XML Sitemap](https://whois.llmland.io/sitemap.xml)

## Related Open-Source Projects & Companion Tools
- [Rings.rs](https://rings.rs/): Serverless browser-to-browser encrypted P2P mesh network without central servers or public IPs.
- [LispM.ai](https://lispm.ai/): A hacker-grade AI agent Lisp Machine running inside GNU Emacs.
- [Tama](https://tama.llmland.io/): Zero-mistake Tamagotchi evolution charts across 43 models and 1,852 item codes.
- [IPGuard](https://ipguard.llmland.io/): Client-side residential IP purity, dual-ISP native ASN check, and 10-channel WebRTC/DNS leak audit.
- [Clipkeep](https://xdown.llmland.io/): Save public X (Twitter) 1080p MP4 videos and GIFs without login or watermarks.
- [ScoreCraft](https://score.llmland.io/): Zero-upload audio-to-score transcription for humming, piano grand staff, and guitar fingerstyle TAB.
- [StegoVault](https://stegovault.llmland.io/): 100% client-side PNG, WAV, and MP4 encrypted steganography and CTF forensic workbench.
- [GeoPulse](https://geopulse.llmland.io/): Audit AI search citability, Schema.org @graph, GPTBot/ClaudeBot rules, and llms.txt in 5 seconds.
- [SlimCodec](https://compress.llmland.io/): 100% local PNG-8 quantization, 4:1 IMA ADPCM audio compression, and video shrinking studio.
- [InkStudio](https://ink.llmland.io/): Extract handwritten signatures, red seals over black text, and calligraphy to transparent PNG/SVG.
- [LiveScreen](https://livescreen.llmland.io/): Convert videos into native iOS Live Photos (.livp) for smooth press-and-hold dynamic lock screens.
- [BeadStudio](https://bead.llmland.io/): Convert photos and pixel art into MARD, Perler, Artkal fuse bead and DMC cross-stitch blueprints.
- [SonicMesh](https://sonicmesh.llmland.io/): Transmit encrypted text, voice, and files across air-gapped devices using only speakers and microphones.
- [BinPulse](https://bin.llmland.io/): Verify ISO/IEC 7812 card BIN issuer tiers, Luhn checksums, and global E.164/MVNO/VoIP phone prefixes.
- [AddrForge](https://addr.llmland.io/): Generate realistic 16-country street addresses, 5 US 0%-tax state ZIP+4 billing profiles, and test identities.
- [AvatarFest](https://avatar.llmland.io/): One-click festive avatar decorator with 8 holiday themes and 40+ vector hats, stickers, and frames.