Lordevo

DNS lookup (A, AAAA, CNAME, MX, TXT, NS, SOA, CAA): Live DNS lookup for any public host name: one record type or ALL (A, AAAA, CNAME, MX, TXT, NS, SOA, CAA) in one call, with NXDOMAIN detection and a flag for private addresses. Cached 2 min. ~0.1-1 s.

Email authentication check (SPF, DKIM, DMARC): Check a domain's email authentication and spoofing risk from public DNS: MX and mail provider, SPF (record, all-qualifier, DNS lookup count vs the 10 limit), DMARC policy/pct/rua, DKIM at 30 common selectors, MTA-STS, TLS-RPT, BIMI. Returns grade, spoof

Page to Markdown (main content): Fetch one public web page and return its main content as clean Markdown (headings, lists, links, images with alt) plus title, description, lang, canonical and word count. Up to 60,000 characters. Obeys robots.txt. ~1-3 s.

Security headers + TLS quick grade: Passive check of a public website's HTTPS setup: TLS version and certificate expiry, HTTP->HTTPS redirect, HSTS, CSP, X-Frame-Options/frame-ancestors, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, cookie flags, version disclosure. Returns grade A+..

Agent readiness / AI visibility score (GEO): Scores how visible and usable a site is for AI assistants and agents (0-100, grade A-F): robots.txt rules for AI search and training crawlers (GPTBot, OAI-SearchBot, ClaudeBot, PerplexityBot, Google-Extended...), noindex/noai, /llms.txt quality, schema.or

Can I fetch this URL? robots.txt + AI-crawler permission gate: Pre-fetch gate for agents and scrapers: is this exact URL allowed by robots.txt (RFC 9309: missing = allow, 5xx/unreachable = disallow) for generic agents and 16 named AI agents/crawlers (ChatGPT-User, Claude-User, PerplexityBot, GPTBot,

CORS check (preflight + allowed origins): Will a browser on a given origin be allowed to call this URL: sends a CORS preflight (OPTIONS) and a GET with Origin, reports Access-Control-Allow-Origin / Credentials / Methods / Headers / Max-Age, Vary: Origin, and flags arbitrary-origin reflection, wildca

Lookalike / homograph domain check (punycode, mixed scripts, brand typos): Instant offline check of a host name for phishing patterns: Unicode / punycode form, scripts per label and mixed-alphabet homographs, typo or confusable lookalikes of commonly phished brands, brand outside its official domain

Domain age, registrar and expiry (RDAP): Registration facts for a domain from the official registry RDAP service (successor to WHOIS): registered or not, registrar and IANA id, created / updated / expiry dates, age in days, days to expiry, EPP status codes, nameservers and DNSSEC. Personal contact d

Email address validation (syntax + domain + MX, no SMTP probing): Validates one email address without contacting the mailbox: RFC 5321 syntax, domain exists, MX / null-MX / implicit-MX, MX hosts resolve, mail provider, disposable-domain flag (CC0 list), role account (info@, support@), free provider,

HTTP ping: up or down, status and timings (DNS, TCP, TLS, TTFB): One live request to a URL with no redirect following: up or down (and why: DNS, timeout, refused, TLS), status, Location, timings in ms for DNS, TCP connect, TLS handshake, time to first byte and total, IP, HTTP version, server header.

IP address owner and network (RDAP + reverse DNS): Who holds a public IPv4/IPv6 address, from the Regional Internet Registry RDAP record: network name, handle, CIDR, address range, country, holding organisation, abuse mailbox, RIR (ARIN/RIPE/APNIC/LACNIC/AFRINIC) and reverse DNS (PTR). No geolocatio

Link check: is it alive, where does it really go (redirects resolved): Resolve one link the way a browser would: follows up to 10 redirects (HEAD first, GET fallback), returns alive true/false with a reason (http_404, dns_not_found, timeout...), the final URL and domain, every hop with its status, c

Link preview / unfurl (title, description, image, favicon, logo): Everything needed to render a link card from one public page: title, description, site name, Open Graph image (size, alt), canonical URL, best favicon plus all icons, logo (JSON-LD Organization), web manifest, theme colour, Twitter ca

Malaysian ringgit exchange rates + OPR (Bank Negara Malaysia data): Bank Negara Malaysia exchange rates against the ringgit (buying, selling, middle; MYR per unit) for one currency or ALL, plus the current Overnight Policy Rate. Source: Bank Negara Malaysia; data subject to the Terms of Use for BNM

Page metadata + Markdown: Read one public web page and return clean Markdown of the main content plus metadata: title, meta description, canonical, robots, lang, Open Graph/Twitter tags, headings outline, JSON-LD types, internal/external links, images missing alt, word count. Obeys robots.txt. ~1-3

Page quality verdict (AI): AI verdict on one page's content quality: high/medium/low with a 0-100 score, topic, strengths, problems and one-line summary, blended with measured metrics (word count, Flesch readability, headings, duplicate sentences, link ratio, author/date). Runs on Lordevo's own loca

Readability and word count (Flesch, reading time, top terms): Text statistics for the main content of one page: word, sentence and character counts, Flesch reading ease and Flesch-Kincaid grade (English), level, long-sentence ratio, reading and speaking time, and top terms. Computed by formula, no A

Website Security Scan LITE (passive summary): LITE version of the Website Security Check: passive summary only (headers, TLS/certificate, HTTP->HTTPS, cookies, SPF/DKIM/DMARC, CAA, IPv6, security.txt) with grade A-F and top 10 findings. Nothing intrusive. ~3-10 s. Upgrade: Safe check ($1) or Deep ac

SEO Audit LITE (top 10 issues, one page): LITE version of the $2 SEO Audit: one page, the top 10 issues ranked by severity and effort with why/fix, plus up to 12 internal links checked for 404s, mixed content, headings, structured data, Open Graph, robots.txt/sitemap/llms.txt. ~5-15 s. Upgrade: full

On-page SEO check (one page): On-page SEO check of one URL: title/meta lengths, H1, canonical, noindex, viewport, lang, Open Graph, JSON-LD, images alt, thin content, compression, response time, plus robots.txt, XML sitemap, llms.txt and which AI crawlers (GPTBot, ClaudeBot, PerplexityBot...) are al

Site check: trust + AI readiness + security headers (recommended start): One call answers both questions agents ask about a website: can I trust or pay it (url-trust: TLS, redirects, domain age via RDAP, lookalike/punycode, scam/parked signals, x402 challenge validity) and is it ready for AI agents

Site snapshot (SEO + security + tech + email): All four quick checks in one call for a website: on-page SEO score and issues, security headers/TLS grade, tech stack, and the domain's SPF/DKIM/DMARC email authentication. Good for lead qualification, vendor due diligence or a first look before a full

Is this a legit business site? (AI trust verdict): AI trust verdict for a website: likely_legit / caution / suspicious with a 0-100 trust score and short reasons, from public signals: HTTPS, domain age (RDAP), MX/SPF/DMARC, contact details, address, company registration, policies, social links, park

Sitemap URL extractor (robots.txt + sitemap index): Finds a site's sitemaps (robots.txt Sitemap lines, /sitemap.xml, /sitemap_index.xml, or a sitemap URL you give), follows sitemap indexes (up to 6 files) and returns up to 1000 page URLs with lastmod, plus per-sitemap status. Cached 1 h. ~0.5-4 s.

SSL/TLS certificate check (expiry, issuer, SANs, chain): Connects to host:443 and reports the certificate: trusted or not (and why), hostname match, issuer, valid from/to, days left, expired / expiring within 21 days, SAN list, wildcard, key type and size, serial, SHA-256 fingerprint, OCSP/CA URLs,

Structured data extractor (JSON-LD, microdata, RDFa): Extracts schema.org data from one page: every JSON-LD item (Product, Article, Organization, FAQPage, Event, Recipe and others) as parsed JSON with missing required / recommended properties, invalid JSON-LD blocks, microdata itemtypes and RDFa typ

Tech stack detection: Detect what a website is built with from its homepage HTML and headers: CMS/site builder, ecommerce platform, JS framework, analytics and ad pixels, tag manager, chat/support widgets, payments, consent, CDN, hosting, web server, language. ~90 signatures with evidence-based dete

URL trust check before you click or pay (safe / caution / risky): Pre-click / pre-pay check of one URL: TLS validity and expiry, redirect chain (HTTPS downgrades, cross-domain hops), domain age via RDAP, brand lookalike and punycode/mixed-script signals, parked or scam-pattern content, seed-phrase o

Shareable site verdict card (grade + one-liner, SVG): The site-verdict trust check rendered as a branded 1200x630 SVG card: grade A-F, trust score, verdict, a one-line plain verdict and top reasons, with a permanent public URL (card_url) to share or embed, plus the inline SVG and the full reasons. V

Broken links on a page (up to 40 links checked): Reads one page (robots.txt obeyed) and checks up to 40 of its unique links (internal first) with HEAD then GET: broken links with status or error, restricted (401/403/429/999), timeouts and counts. ~2-8 s.

Canonical, hreflang and indexability check: Is this URL indexable and which URL is canonical: canonical tag or HTTP Link header, self-referencing or pointing elsewhere, multiple/relative/cross-domain canonicals, og:url mismatch, meta robots and X-Robots-Tag (noindex/nofollow), hreflang list with cod

Batch link check (up to 10 URLs per call): The link-check for up to 10 URLs in one paid call (comma-separated): for each, alive or dead with the reason, final URL after redirects, redirect chain, cross-domain / HTTPS-downgrade flags, content type and TLS. ~1-6 s.