Fixed
- DNS Lookup — every record type, custom nameservers and reverse lookups through a real resolver, plus WHOIS over port 43 with IANA referral following.
- Security Headers — fetches the headers of the URL you give it and grades those.
- Webhook Generator — sends the request you built.
- Certificate Inspector — pulls a live TLS chain for a domain and checks hostname and expiry against the bundled root store. The deliberately broken example certificate is now a valid self-signed one.