Tools
Utilities for DNS, email, certificates and networks. Each one does its work in your browser and shows you exactly what it's doing.
- Your device does the workParsing, checking and maths happen in this page's code, which you can read.
- The network only when it mustBrowsers can't send DNS or WHOIS queries, so those go through abbott.cloud to a named public service.
- Every request is shownEach tool lists the requests it made, with the raw data that came back.
- Nothing is keptNo accounts, no tracking, no logs of what you look up.
No tools match that.
DNS & domains
DNS lookup
Any record type for a domain or IP address. Ask Cloudflare, Google or Quad9, or compare all three.
Uses the network via abbott.cloudTTL checker
How long a resolver will cache a record, or a domain's common records. Shows the TTL set in the zone where it's signed.
Uses the network via abbott.cloudSOA checker
A zone's SOA timers compared with recommended values, with every difference highlighted and explained.
Uses the network via abbott.cloudWHOIS / RDAP
Who a domain is registered with, when it expires, its status codes and nameservers. Also IP addresses and AS numbers.
Uses the network via abbott.cloudDNSSEC check
Follows the chain of trust from the parent zone's DS records to the zone's keys, and checks the signatures' dates.
Uses the network via abbott.cloudEmail security check
MX, SPF, DMARC, DKIM, MTA-STS, TLS reporting and BIMI for a domain, in one report.
Uses the network via abbott.cloudSPF checker
Expands every include and redirect, counts DNS lookups against the limit of ten, and explains each part.
Uses the network via abbott.cloudDMARC checker & builder
Reads a domain's DMARC policy and explains each tag, or builds a new record step by step.
Uses the network via abbott.cloudDKIM checker & key generator
Checks a selector's public key and its strength, or generates a new key pair in your browser.
Uses the network via abbott.cloudEmail header analyser
Paste headers or open a saved message to see the servers it passed through, how long each took, and whether the sender's checks passed.
Runs entirely on your deviceEmail file reader
Open a saved .eml file and read it safely as plain text, with its attachments, hashes and links listed. Nothing is loaded or run.
Runs entirely on your deviceMicrosoft phish and spam report analyser
What Microsoft 365 concluded about a reported message, why it did or didn't stop it, every domain involved, and what to do next.
Runs on your device; optional registration lookups use the networkLink checker
Unwrap Safe Links, Proofpoint and other wrapped links, see where they really go and what looks wrong, with nothing clickable.
Runs on your device; optional redirect checks use the networkLook-alike domain checker
The domains an attacker could register to imitate yours, which are already registered, and which can receive mail.
Runs on your device; optional lookups use the networkDomain service profile
See which email and cloud services a domain is set up with, such as mail provider, gateway, Microsoft 365 tenant name and sending services, with the DNS records behind each conclusion.
Uses the network via abbott.cloudWeb & certificates
HTTP security headers
Fetches a page's response headers and grades HSTS, CSP, cookies and the rest. Follows redirects one step at a time.
Uses the network via abbott.cloudCertificate decoder
Paste a PEM certificate or CSR to see its names, dates, key, extensions and fingerprints. Nothing leaves your device.
Runs entirely on your deviceJWT decoder
Decodes a JSON Web Token's header and claims, explains the dates, and can verify the signature with your key.
Runs entirely on your deviceEntra ID token and sign-in reader
Paste an Entra token, an AADSTS error or a sign-in log and get a plain-English explanation of who, what, why it failed and who fixes it.
Runs entirely on your deviceNetworking
Your IP address
Shows your public IP address with a copy button. Plain enough to send to anyone who needs to tell you theirs. Also at /myip.
Uses the network via abbott.cloudIP address and location
Your address with its network, rough location, reverse DNS name, and whether it looks like a VPN.
Uses the network via abbott.cloudSubnet calculator
IPv4 and IPv6 ranges, masks, usable hosts, splitting and summarising. Checks whether an address is in a range.
Runs entirely on your deviceAddress plan checker
Paste your VNet, VPC and subnet ranges to find overlaps, free space and where the next block fits.
Runs entirely on your deviceEveryday
Encode, decode & hash
Base64, hex, URL encoding and Punycode, plus SHA hashes of text or files.
Runs entirely on your devicePasswords & IDs
Strong passwords, UUIDs and random keys from your browser's secure random number generator.
Runs entirely on your deviceTimestamps & cron
Converts Unix timestamps and dates between time zones, and explains cron schedules with their next run times.
Runs entirely on your device