/ip-lookup
Retrieves public IPv4 registration ranges through standardized RDAP. Private and reserved addresses are rejected. Output is registration data—not a person's physical location.
/opt/hack-theory/tools
Live security tools, without covert surveillance.
These Discord-native utilities provide passive context. They do not port-scan targets, execute page content, collect visitor fingerprints, or prove that a target is safe.
/dns-lookup
Queries A, AAAA, MX, NS, TXT, and CAA records over Cloudflare DNS over HTTPS. Results include TTL and the DNSSEC authenticated-data signal.
/url-check
Compares ordinary DNS resolution with Cloudflare's malware/phishing-filtering resolver. The target page is never opened. A clean response is not proof of safety.
/link-create
Creates a community redirect with a disclosure screen. Only aggregate confirmed clicks and timestamps are stored—never visitor IPs, browsers, devices, cookies, or fingerprints.
/link-stats
Shows aggregate clicks to the creator or staff. Links expire when old and unused. Destinations must use HTTPS and pass the passive block-signal check.
/contributor-insights
An optional combined DNS defense briefing for Server Contributors. This convenience view is paid-role gated; every underlying basic lookup, course, alert, and CTF remains free.
External-link rule: treat all URLs as untrusted until independently verified. Do not enter credentials, run downloads, disable protections, or rely on one reputation source. For a suspicious post, preserve the Discord message link and use
/report-security.Responsible-use boundary
- Only investigate systems you own or are explicitly authorized to test.
- Passive lookup results may be incomplete, cached, or wrong.
- Never use a tracked community link to mislead, identify, or profile another person.
- Confirmed block signals are redacted from public bot responses and should be escalated to staff.