dns

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

The server exposes a public surface before authorization: check_mx, check_spf, check_dmarc, check_dkim, check_dnssec, check_ssl, check_mta_sts, check_ns, check_caa, check_bimi, check_tlsrpt, check_http_security, check_dane, check_ptr, check_dane_https, check_svcb_https, check_lookalikes, check_subdomailing, scan_domain, batch_scan, compare_domains, compare_baseline, check_shadow_domains, check_txt_hygiene, check_mx_reputation, check_srv, check_zone_hygiene, generate, get_domain_rank, get_benchmark, get_provider_insights, assess_spoofability, check_resolver_consistency, explain_finding, map_supply_chain, analyze_drift, validate_fix, resolve_spf_chain, discover_subdomains, map_compliance, prioritize_csc_leads, simulate_attack_paths, check_dbl, check_rbl, cymru_asn, rdap_lookup, check_realtime_threat_feed, check_nsec_walkability, check_dnssec_chain, check_agent_discovery, check_dnskey_strength, check_fast_flux, check_subdomain_takeover, check_authoritative_dns_infra, check_root_server_set, discover_brand_domains, discover_brand_domains_start, discover_brand_domains_status, discover_brand_domains_findings, brand_audit_single, brand_audit_batch_start, brand_audit_status, brand_audit_get_report, list_brand_audit_watches, register_brand_audit_watch, delete_brand_audit_watch, scan_buckets_start, scan_buckets_status, scan_buckets_findings, osint_investigate_domain_start, osint_investigate_infrastructure_start, osint_investigate_supply_chain_start, osint_investigate_username_start, osint_investigate_email_start, osint_investigation_status, osint_investigation_report.