Free tools
Quick IP, DNS, SSL and port checks. Each tool runs on demand, stores no personal data, and is rate-limited to prevent abuse.
Look up any public IP: ASN, network organization, range and reverse hostname, backed by real RDAP data.
Resolve the reverse hostname (PTR record) of any public IP in seconds.
Calculate network, broadcast, netmask and usable host range from an IPv4 CIDR notation.
Convert an IPv4 address to decimal, hexadecimal and binary instantly.
Check which common ports (web, mail, databases, admin) respond on an authorized domain or IP.
Will measure latency, basic loss and host availability to separate real outages from local resolution or connectivity issues.
Will show network hops to a destination to investigate slow routes, intermediate outages or provider differences.
Will validate whether a domain or connection supports IPv6 correctly and coexists with IPv4 without resolution or reachability errors.
Look up A, AAAA, MX, TXT, NS, CNAME or SOA records for any domain in real time.
Look up A, AAAA, MX, TXT, NS, CNAME or SOA records for any domain in real time.
Look up A, AAAA, MX, TXT, NS, CNAME or SOA records for any domain in real time.
Will verify whether the domain is DNSSEC-signed, whether the chain of trust is complete and whether errors may break resolution.
Will compare DNS answers from different resolvers to confirm whether a recent change has propagated or still returns inconsistent answers.
Will combine DNS, email, SSL, HTTP and reputation into one technical health view with prioritized findings.
Will analyze the SPF record for excessive includes, unsafe mechanisms, DNS limits and policies that may allow spoofing.
Will review common DKIM selectors and published keys to confirm whether outbound email can be signed correctly.
Will evaluate DMARC policy, alignment, rua/ruf reports and spoofing protection level for the domain.
Will check resolution, priority and MX availability to detect domains without functional email or misconfigured providers.
Will validate SMTP connectivity, banner, STARTTLS and basic server signals without sending email or attempting authentication.
Will group MX, SPF, DKIM, DMARC, STARTTLS and reputation to measure basic spoofing, phishing and deliverability risk.
Check the issuer, domain and expiration date of any domain's SSL/TLS certificate.
Verify whether an authorized domain has HSTS, CSP, X-Frame-Options and other key security headers enabled.
Verify whether an authorized domain has HSTS, CSP, X-Frame-Options and other key security headers enabled.
Will analyze allowed TLS versions and ciphers to detect old protocols, weak suites or incompatible configurations.
Will follow redirect chains to find loops, unnecessary hops, HTTPS loss or unexpected destinations.
Will verify whether the site enforces HTTPS with HSTS, suitable duration, includeSubDomains and preload readiness where applicable.
Check which common ports (web, mail, databases, admin) respond on an authorized domain or IP.
Will query public reputation signals to detect whether an IP or domain appears on blacklists or known abuse sources.
Will look for malicious-domain indicators, reputation blocks and patterns linked to suspicious malware or distribution campaigns.
Will evaluate basic impersonation signals such as similar names, weak email configuration and missing anti-spoofing controls.
Will detect technologies visible through headers and public responses to help inventory stack, exposed versions and web surface.