API Notes

Some Heatflux Tools use lightweight API endpoints for server-side network lookups. Requests are rate limited and protected against private or local target abuse.

TLS Check

GET /api/tls-check?host=example.com&port=443

• Allowed ports: 443, 8443, 9443.
• Private, loopback, link-local, multicast, reserved, and unspecified IPs are blocked.
• Successful responses may be cached briefly.

DNS Trace

GET /api/dns-trace?domain=example.com

• Supports public domain lookups only.
• Performs root, authoritative, final record, and limited common subdomain checks.
• Rate limit: 10 requests per minute per IP.

curl "https://tools.heatflux.xyz/api/dns-trace?domain=heatflux.xyz"

Do not submit targets you are not authorized to test.