Cybersecurity & DNS Diagnostic Tools
Free, privacy-first diagnostic tools evaluated 100% at the edge. Audit email authentication protocols, unmask hidden redirect chains, detect phishing traps, and inspect TLS handshakes.
Core Diagnostic Utilities
12 standalone, real-time diagnostic consoles powered by DNS-over-HTTPS and edge workers.
SPF Record Checker & Validator
Audit RFC 7208 SPF records, count DNS lookups (10-lookup quota), parse mechanisms (include, ip4, mx), and verify softfail/hardfail policies.
DKIM Public Key & Selector Checker
Lookup DKIM cryptographic public keys, test 2048-bit RSA key strength, decode selector tags, and auto-probe common email selectors.
DMARC Policy Enforcement Checker
Verify DMARC anti-spoofing policies (p=reject, quarantine, none), validate alignment modes (aspf, adkim), and audit reporting endpoints.
BIMI Logo & VMC Certificate Inspector
Inspect Brand Indicators for Message Identification (BIMI) DNS records, preview SVG brand logos, and check Verified Mark Certificates (VMC).
Email Header Analyzer & Hop Tracer
Parse RFC 5322 raw email headers, trace relay server hops, measure transport delays, and detect spoofed Return-Path identities.
Email Security Posture Score (0-100)
Calculate a composite anti-spoofing trust rating and letter grade (A+ to F) evaluating SPF, DKIM, DMARC, SSL, and BIMI in parallel.
URL Phishing & Threat Scanner
Real-time multi-factor analysis detecting IDN homograph spoofs, Shannon entropy anomalies, typosquatting brand mimicry, and live malicious feeds.
Safe Link Checker & Cloak Detector
Deep-inspect suspicious links, strip invasive tracking parameters, and audit landing page safety before opening in a browser.
Multi-Hop Redirect Chain Tracer
Unpack short URLs and trace up to 10 HTTP redirect hops (301, 302, 307, 308, meta refresh) with loop detection and header inspection.
SSL / TLS Certificate Inspector
Inspect live TLS 1.3 socket handshakes, Certificate Authority (CA) issuers, Subject Alternative Names (SANs), cipher suites, and expiration days.
Domain Age & RDAP Longevity Lookup
Query ICANN RDAP registration databases to extract exact domain registration dates, registrar organizations, and longevity risk scoring.
QR Code URL Scanner & Quishing Defense
Scan QR code images or text links to extract embedded destinations, trace redirect jumps, and detect malicious quishing traps.
Programmatic Provider & Service Guides
Step-by-step SPF records, DKIM selectors, and redirect expanders for leading enterprise platforms.