About Tools.BD

Tools.BD (tools.bd) is a free network intelligence tool built by Mehedi Hasan.

It provides comprehensive analysis for domains, IP addresses, ASNs, and network prefixes:

Domain Analysis

• Domain Registration - Registrar, creation/expiry dates, status, DNSSEC via RDAP/WHOIS
• DNS Records - A, AAAA, NS, MX, CNAME, SOA, TXT, CAA, SRV, DS, DNSKEY
• Parent Nameservers - TLD delegation, glue records, parent vs authoritative consistency
• Authoritative Nameservers - UDP/TCP reachability, authoritative flag, open recursion check, latency
• SOA Analysis - MNAME, RNAME, serial format, refresh/retry/expire/minimum TTL sanity
• Mail Servers (MX) - Validity, IP resolution, redundancy, reverse DNS/PTR
• DNSSEC - DS, DNSKEY, RRSIG detection and chain-of-trust validation
• Email Security - SPF mechanism/lookup count, DMARC policy, CAA records
• DNS Propagation - Resolution across 10 major public resolvers worldwide
• HTTP/3 & QUIC - Real QUIC handshake test, Alt-Svc / HTTPS record discovery, negotiated HTTP versions, and HTTP-to-HTTPS redirects

Dedicated DNS Lookup Tool

• Standalone DNS Lookup - Look up any single record type (A, AAAA, CNAME, MX, NS, PTR, SRV, SOA, TXT, CAA, DS, DNSKEY) or all at once, through a selectable resolver: Cloudflare, Google, OpenDNS, Quad9, Yandex, or the domain's own authoritative nameservers
• Nameserver & mail-host intelligence - NS/MX/CNAME/SRV targets resolve to live IPs with country flags and ISP/ASN ownership shown inline
• Exportable results - Every record group is expandable/collapsible and the full result exports as Markdown or plain text

Security Checks

• SSL Checker - Certificate expiry and chain validation, key strength, TLS versions/ciphers, HSTS, and HTTPS redirects
• Blacklist Checker - Checks IPs against major DNS-based blocklists (DNSBLs) with a local-first resolver setup

ASN & IP Intelligence

• ASN Lookup - Organization, country, registry, network type, IPv4/IPv6 prefixes, peers, upstreams, downstreams, RPKI validation
• IP Lookup - ASN, geolocation, network type, PTR reverse DNS, hosting/CDN/VPN/Tor detection
• Prefix Analysis - CIDR block details, WHOIS, RPKI validation, BGP status
• BGP Intelligence - Peering relationships, transit providers, routing data from RIPE Stat and PeeringDB

The backend is written in Go and uses the miekg/dns library for all DNS operations - no shell commands or external tools like dig or nslookup.

RDAP/WHOIS lookups use IANA's bootstrap service to find the correct RDAP server for each TLD.

ASN intelligence data comes from RIPE Stat, Regional Internet Registries (ARIN, RIPE, APNIC, AFRINIC, LACNIC), PeeringDB, and Routinator (RPKI).

The frontend is plain PHP with no JavaScript frameworks. Results are fetched from the Go API and rendered server-side.

This project is not open source currently. The source code is proprietary and not publicly available for use, modification, or redistribution.

If you are interested in collaboration or have questions about the technology, please contact us.

• Domain scans stored for 30 days - then automatically deleted.
• ASN data stored permanently - cached and auto-rescanned every 24 hours.
• No accounts required - just enter a query and go.
• Rate limited - 20 requests per minute per IP to prevent abuse.

Backend	Go
DNS Library	miekg/dns
ASN Data	RIPE Stat, RDAP, PeeringDB, Routinator
Frontend	PHP (plain, no framework)
Database	PostgreSQL + Redis
Transport	JSON REST API + Server-Sent Events (SSE)
Reverse Proxy	Caddy (automatic TLS)
Author	Mehedi Hasan
Website	tools.bd