Free IP, DNS and network tools, with plain-English guides that explain what the results mean. No signup, no ads, and lookups aren't stored.

🔍 IP & privacy What Is My IP · VPN Leak Test · IP Reputation · Bulk IP Lookup · Port Scanner · IPv6 Readiness Test · Privacy Exposure Score

🌐 DNS DNS Checker · DNS Propagation Checker · DNSSEC Checker · WHOIS Lookup

📡 Network diagnostics Ping Test · Speed Test · Subnet Calculator

✉️ Email authentication DMARC / SPF / DKIM Checker · Email Header Analyzer · DMARC Report Reader

🔐 Web security SSL Certificate Checker · HTTP Security Headers · Lookalike Domain Checker · QR Code Decoder

🛠️ Utilities Encoding & hashing · Password tools

📚 Learn Guides · Scam Test · Data-broker opt-out directory · Books

How the tools are built

• Every result comes from a real query or measurement — nothing is guessed or padded.
• Each tool says what it can't tell you, not just what it can.
• Where a check needs a server (IP lookup, blacklist check, port scan), the result is returned and not kept.

Open source here

• dnsbl-check — a DNS blacklist checker that doesn't report refused queries as listings, timeouts as clean, or dead lists at all.
• doh-compare — asks Google and Cloudflare the same DNS question over DoH and tells real differences from quoting, ordering and GeoDNS noise.
• webrtc-leak-check — WebRTC IP leak detection without the false alarms: ignores mDNS and private addresses, compares per IP family. Live demo
• rdap-lookup — readable WHOIS for domains and IPs over RDAP; tells "not registered" apart from "this TLD has no RDAP".
• email-auth-headers — explains SPF, DKIM and DMARC from raw email headers without flagging legitimate newsletters as suspicious.
• password-tools — honest strength estimates, crypto-random generators with the EFF wordlist, and a private Have I Been Pwned check.
• subnet-calc — IPv4 subnet arithmetic with /0, /31, /32 and mask edge cases done properly, tested against Python's ipaddress.
• homograph-check — decodes Punycode, which no browser exposes, and tells you whether a domain is written in the characters you think it is.
• ipv6-classify — expands, compresses and classifies IPv6, and recovers the MAC address sitting inside an EUI-64 interface identifier.
• csp-grade — grades a Content-Security-Policy on what browsers actually enforce, not on which keywords appear in the header.
• dnssec-check — tells signed, unsigned and broken DNSSEC apart, and names the DS record that points at a key the zone no longer publishes.
• dmarc-check — SPF, DMARC and DKIM read the way receivers read them: lookups counted across the include tree, subdomain inheritance, duplicates.
• dmarc-report — reads DMARC aggregate reports and finds the senders that authenticate, but not as you.

Every repo has an offline test suite running in CI, and each tool is live, free and signup-free on the site.

📫 contact@examineip.com