Nexcore//Alliance
Red Team

WEBSITE RECON TOOL

Perform in-depth active reconnaissance of targeted websites to inspect host metadata, active portfolios, running services, and technology footprints.

DNS Records Lookup

Deep Scanning Suite

Retrieve WHOIS parameters, SSL/TLS handshake configurations, web server architectures, missing security headers, Geo-IP locations, and common port sweeps.

Ownership Verification

Verify asset ownership before scanning

We require a same-organization work email plus a DNS TXT or HTTP file proof on your target domain.

1. Start2. Email3. Proof4. Scan

Use a company-managed email that matches the target domain or one of its approved subdomains.

What this checks

  • Email-domain match
  • Domain control proof
  • WHOIS / RDAP / DNS context

DNS and CDN changes can take time to propagate. If your proof is newly published, wait a few minutes and run the proof check again instead of starting a brand-new scan.

Recon scope guidance

  • DNS Lookup resolves target domains into root records maps for diagnostic audits.
  • WHOIS databases yield registration timestamps, renewal data, and contact addresses.
  • SSL handshake analyses review certification details and active security protocol layers.
  • Port audits scan system headers to identify exposed interfaces and active service protocols.