Network Lookup
the internet, made legible.
IP addresses, ASNs, DNS records, WHOIS data — everything you need to understand what's happening on the network, in one place.
Everything you need
to read the network.
SPF Record Checker
Look up and validate any domain's SPF record — see every include chain, count DNS lookups, and catch misconfigurations.
DKIM Record Lookup
Look up DKIM signing keys for any domain — auto-probes 50+ common selectors (Google, Microsoft 365, SES, SendGrid…) and grades key strength.
DMARC Record Checker
Look up and validate any domain's DMARC policy — see who receives reports, what happens to failing messages, and an A-F grade.
BIMI Record Lookup
Check if a domain has BIMI configured — the brand logo that appears next to email in Gmail, Apple Mail and Yahoo. Verifies logo, DMARC, VMC status.
MTA-STS & TLS-RPT
Check if a domain enforces encrypted email delivery via MTA-STS. Verifies policy mode, MX coverage, and TLS failure reporting (TLS-RPT).
Email Header Analyzer
Paste raw email headers to trace the message route hop-by-hop, verify SPF/DKIM/DMARC, and locate the origin server — runs in your browser.
Email Validator
Validate any email — syntax, MX records, 121k disposable providers, SPF and DMARC posture, and a "did you mean gmail.com?" typo check. Verdict + score.
IP Blacklist Check
Scan any IPv4 address against the major DNSBLs — SpamCop and other commercial-OK lists — in parallel and see exactly which lists flag it.
SPF Record Generator
Build a valid SPF TXT record from a guided form — Google Workspace, Microsoft 365, SendGrid presets, IP allow-list, recommended ~all policy. Client-side.
DMARC Record Generator
Build a valid DMARC TXT record live — start at p=none for safe monitoring, then move to quarantine or reject. Rua/ruf, pct, alignment, all explained. Client-side.
Domain Health Report
One-shot domain check: DNS, SPF/DKIM/DMARC, DNSSEC, SSL/TLS, WHOIS — each section sourced from our own tools, per-section status.
DNS Records
Resolve A, AAAA, MX, TXT, CNAME, NS, and SOA records for any hostname in real time.
DNS Propagation
Check whether DNS changes have reached 8 public resolvers worldwide — Cloudflare, Google, NextDNS, AliDNS, DNSPod, and more.
DNSSEC Validator
Verify a domain's DNSSEC chain of trust — DS, DNSKEY, RRSIG, and NSEC/NSEC3 records, with key tag matching and algorithm strength.
CAA Record Lookup
See which Certificate Authorities are authorised to issue SSL/TLS certificates for a domain. Walks parent domains per RFC 8659.
Certificate Transparency Search
Discover every subdomain via CT log search — every SSL certificate ever issued for a domain, deduplicated and ranked by date with issuer breakdown.
Subdomain Finder
Find a domain's subdomains from public TLS certificates in Certificate Transparency logs. Passive, deduped, free — copy or download the list.
WHOIS & reverse DNS
Query registration, ownership, and contact records for any domain or IP block, and resolve PTR records for reverse DNS.
Typosquatting Checker
Generate lookalike permutations (typos, homoglyphs, TLD swaps, combosquats) for a domain and DoH-check which ones actually resolve.
IP Lookup
Geolocate any IPv4 or IPv6 address. See city, region, country, ISP, ASN, timezone, and coordinates.
Bulk IP Lookup
Paste up to 100 IPs and get geolocation, ASN, and hostname for all of them at once. Sortable table, country & ASN summaries, CSV / JSON export.
ASN Explorer
Look up any Autonomous System number — announced prefixes, peer relationships, and routing history.
CIDR Calculator
Calculate subnets for IPv4 and IPv6. Includes VLSM for variable-length subnetting and a complete prefix-length cheat sheet.
Port Lookup
Look up any port number — assigned service, protocol, security notes, and related ports.
MAC Address Lookup
Identify the device manufacturer from any MAC address — 39k+ IEEE OUI registry entries bundled, plus a directory of the top 2,000 vendors.
Response Time Checker
HTTP-layer ping from Cloudflare's edge. Sequential probes with TTFB, status codes, jitter, and packet loss for any domain or URL.
Reverse DNS Lookup
PTR lookup for any IPv4 or IPv6 address — with automatic forward-confirmation (FCrDNS), the check mail servers and security tools rely on.
IP Reputation Checker
Infrastructure & risk classification — our own datacenter/residential ASN analysis + Tor exit detection. Each source labelled, no opaque composite.
IOC Enrichment
One-shot intel report for any IP: infrastructure / risk classification (ASN + Tor), curated DNSBL summary, and reverse DNS — orchestrated from our own endpoints, each source attributed.
VPN & proxy check
Detect whether an IP belongs to a known VPN, proxy, Tor exit node, or data centre — check your own apparent identity.
WebRTC Leak Test
Check whether your browser leaks your real IP address through WebRTC — even if you're on a VPN.
Browser fingerprint
See what your browser reveals without cookies — user agent, screen size, timezone, WebGL renderer, and a uniqueness score.
What's My User Agent?
See your browser's User-Agent string instantly — parsed into browser, OS, device, engine, plus Client Hints. Runs entirely in your browser.
DNS Leak Test
Check whether your DNS queries leak outside your VPN tunnel — compares your connection ASN against the resolver that public DoH endpoints see when answering for you.
SSL Inspector
Check TLS certificates with an A–F security grade. Validity, issuer chain, SANs, HSTS status, and concrete recommendations.
Security Headers Check
Fetch any URL's HTTP response headers and get an A+ → F security grade with CSP analysis and HSTS preload check.
HSTS Preload Checker
Check whether a domain enforces HTTPS via HSTS and qualifies for the browser preload list. Parses the header, checks Chrome's preload requirements.
CSP Analyzer
Analyze any Content Security Policy — check a URL or paste a CSP string. Grade A–F, directive breakdown, weakness detection, fix recommendations.
JWT Decoder
Paste a JSON Web Token to decode its header and payload claims (exp, iat, iss, sub) in your browser. Decode-only — never verifies or signs.
Base64 Encode / Decode
Two-way Base64 with proper UTF-8 handling and an optional URL-safe variant (-/_ alphabet, padding strip). Runs entirely in the browser.
Hash Generator
MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes of text via the Web Crypto API. Honest about which are still secure (and which aren't).