Address surface
Resolve A and AAAA records while rejecting private, link-local, metadata, or mixed public/private destinations.
DNS footprint · secondary diagnostic
Resolve the public records that route a domain and see the observed addresses, mail exchangers, name servers, TXT signals, and aliases without assigning a safety score.
Public DNS only · A / AAAA / MX / NS / TXT / CNAME · private destinations fail closed
Resolve A and AAAA records while rejecting private, link-local, metadata, or mixed public/private destinations.
Observe MX and NS records to understand public mail routing and authoritative DNS delegation.
Inspect TXT and CNAME observations without turning DNS facts into a security or ownership verdict.
Observation boundary
This lane performs public DNS observation only. It does not log in, scan ports, test vulnerabilities, infer ownership, or connect to private network destinations.