Queries every common DNS record type simultaneously and displays results in zone file format.
Query multiple public resolvers worldwide via DNS-over-HTTPS to check if your record has propagated.
Looks up TXT records plus checks _dmarc.{domain} automatically.
Runs a comprehensive DNS health audit: A/AAAA, MX, NS, SOA, SPF, DMARC, DNSSEC and more.
Looks up the DMARC policy record at _dmarc.yourdomain.com and parses all tags.
Retrieves and parses the SPF record from TXT records of your domain.
Looks up DKIM public key at selector._domainkey.yourdomain.com.
Looks up the BIMI record at default._bimi.yourdomain.com and checks for logo URL.
Checks your IP address against popular DNS-based blacklists (RBLs) used by mail servers.
Checks all MX records for a domain and verifies each mail server resolves correctly.
Looks up domain registration data via the RDAP protocol (successor to WHOIS, returns structured JSON).
Fetches a URL and shows response headers. Requires the server to send CORS headers — most APIs and CDNs do. Private or same-origin-only sites will be blocked.
Convert between IPv4 and IPv6 representations including IPv4-mapped IPv6 addresses and decimal notation.
Check if an IP address is listed on common DNS-based blocklists (RBLs / DNSBLs) used by email servers and firewalls.
Test if a specific TCP port is open and reachable on a host.
Send ICMP ping requests to a host and measure round-trip time.
Trace the network path to a host and show each hop's latency.
Combines ping and traceroute — shows per-hop packet loss, latency avg/best/worst and jitter over 5 probe cycles.
Look up the vendor/manufacturer of a network device by its MAC address (OUI prefix).
Scan the most common TCP ports on a host to see which are open.
Connects directly to the server and retrieves the live certificate — results are instant.
Search crt.sh for all certificates ever issued for a domain. Useful for finding sub-domains and monitoring issuance.
Paste a PEM-encoded Certificate Signing Request (starts with -----BEGIN CERTIFICATE REQUEST-----) to decode and verify its contents before submitting to a CA.
Paste a PEM-encoded SSL certificate (starts with -----BEGIN CERTIFICATE-----) to decode and view all its fields.
Check whether your private key matches your SSL certificate by comparing their public key moduli. Paste both below — nothing is sent to any server, all processing is done in your browser.
Convert between internationalized domain names (Unicode) and their ASCII-compatible Punycode encoding.
Generate SHA-1, SHA-256, SHA-384 and SHA-512 hashes of any text using the browser's Web Crypto API.
Generate .htaccess redirect rules for Apache. Supports 301, 302, domain redirects, HTTPS force, www/non-www.
Fetch a URL and inspect its Open Graph, Twitter Card, and essential meta tags as social platforms see them.