MCP tool
check_fast_flux
Detect fast-flux DNS behavior: performs multiple rounds of A/AAAA queries and checks whether IP addresses are rotating rapidly on each DNS query (a sign of botnet or malicious infrastructure).
The check_fast_flux tool is provided by BlackVeil DNS & Email Security Scanner. Install that server in your AI client and the assistant can call it directly.
Servers exposing check_fast_flux
From the publisher:Detect fast-flux DNS behavior: performs multiple rounds of A/AAAA queries and checks whether IP addresses are rotating rapidly on each DNS query (a sign of botnet or malicious infrastructure). Compares IP answer sets and TTLs across rounds to identify rapidly rotating infrastructure used to hide malicious activity.
Install BlackVeil DNS & Email Security Scanner →Parameter Type Description domain*string Domain to check (e.g., example.com) roundsinteger Number of query rounds (3-5, default 3). force_refreshboolean Bypass cache and run a fresh check. Useful after DNS changes. formatstring Output verbosity. Auto-detected if omitted.
Tool lists are read from the live servers (or, for packaged servers, from their documentation) each morning, so this reflects what they exposed at the last refresh. Search all tools.