Website Infrastructure Discovery
Website Infrastructure Snapshot
Domain
DNS
HTTP/TLS
Security
IPv6
This tool inspects only externally visible public infrastructure — public DNS records and a single limited HTTP/TLS request to the domain you submit. It does not authenticate to any system, access private networks, crawl the site, execute JavaScript, or perform a penetration test. IT KORR's own domains and infrastructure cannot be scanned with this tool.
What This Tool Covers
A Central Discovery Router, Not a Replacement
Each section is a summary of a dedicated tool's checks, with a link to the full analysis.
Area
What is reported
Network & DNS
A records, AAAA records, nameservers, and MX routing.
Web Delivery
Conservative CDN/proxy signals from response headers.
Web Server / Platform
Server and X-Powered-By headers, plus limited observed technology signals.
TLS & Certificate
Issuer, validity window, and covered hostname count.
HTTP / Redirects
Initial and final URL, status code, and redirect count.
Security Headers
A summary score — link out for the full per-header breakdown.
Email Infrastructure
MX, likely provider, and SPF/DMARC presence.
IPv6
AAAA presence — link out for a verified reachability test.
Network & DNS
A records, AAAA records, nameservers, and MX routing.
Web Delivery
Conservative CDN/proxy signals from response headers.
Web Server / Platform
Server and X-Powered-By headers, plus limited observed technology signals.
TLS & Certificate
Issuer, validity window, and covered hostname count.
HTTP / Redirects
Initial and final URL, status code, and redirect count.
Security Headers
A summary score — link out for the full per-header breakdown.
Email Infrastructure
MX, likely provider, and SPF/DMARC presence.
IPv6
AAAA presence — link out for a verified reachability test.
How It Works
What this tool does with your input
How this tool works, and what happens to what you enter
- You
You enter a domain or URL
One field. No account, no email required to run it.
- The tool
IT KORR reads the public record
The lookup runs server-side against publicly published DNS, TLS and HTTP data. The target is validated before any request is made.
- You
You get findings you can act on
What is wrong, why it matters operationally, and what to change — not a score.
Understanding Your Results
Discovery, Not a Security Grade
This tool performs infrastructure discovery, not security grading — there is intentionally no single overall score. Each section reflects only externally visible public DNS records and a single limited HTTP/TLS request; it is not a penetration test, a vulnerability scan, or an authenticated assessment. Use the deep links in each section for a focused, dedicated analysis of that specific area.
FAQ
Common Questions
Is this a security scan or a penetration test?
No. This tool aggregates externally visible DNS, TLS, HTTP, and email configuration signals into one snapshot — it does not test for vulnerabilities, authenticate to any system, crawl the site, execute JavaScript, or attempt to exploit anything.
How is this different from your other tools?
This is a discovery/router tool — a single consolidated overview pulling a summary from the DNS Health Checker, SSL Certificate Checker, Redirect Analyzer, Security Headers Analyzer, Email Security Analyzer, and IPv6 Readiness Checker's underlying checks. Each section links to the dedicated tool for a deeper, focused analysis.
Why doesn't this tool show the hosting provider or ASN?
Reliable ASN/organization identification requires a maintained IP-to-organization database, which this tool does not currently have a free, reliable source for. Rather than guess, it reports the public IP address only and marks ASN/organization as not identified.
Does "CDN signal detected" mean a WAF is present?
No — these are reported separately and should not be conflated. A CDN signal (e.g. a Cloudflare-specific response header) only indicates content delivery/proxy infrastructure, not that a web application firewall is actively filtering traffic. This tool does not attempt WAF detection, since reliably distinguishing a WAF from a CDN alone is not possible through externally visible headers with reasonable confidence.
What happens if one part of the check fails?
Each section — DNS, network, CDN, web server, TLS, HTTP, security headers, email, IPv6 — is checked independently. If one section fails or times out (for example, TLS being unreachable on a plain-HTTP-only site), the rest of the report still displays normally, with that section marked "Could Not Verify" rather than failing the entire snapshot.
Can this tool check IT KORR's own website or infrastructure?
No. IT KORR domains and infrastructure are blocked at the platform level, and only publicly routable internet targets can be inspected.
Related Tools & Services
Full DNS diagnostic including MX routing and email authentication records.
Check the HTTP security headers on any public website.
Inspect certificate validity, expiration, and TLS version for any domain.
Ongoing infrastructure operations including web and DNS configuration hygiene.
Operational Support
Need a deeper infrastructure review?
IT KORR can perform a comprehensive infrastructure and security assessment beyond what any public discovery tool can show.
No commitment required — we respond within one business day.