The quick checks we run every day, on the open web. One request per lookup, results cached briefly, no signup, no tracking — the same rules as the rest of this site.
dig, without the terminal — any record type, resolved via DNS-over-HTTPS.
Can this domain's mail be spoofed? MX, SPF and DMARC posture in one shot.
Fetches a site once and grades six defensive HTTP headers.
What the edge sees about you right now — IP, network, TLS, protocol.
Client-side · nothing leaves your browser
CIDR in, everything out — network, broadcast, usable range, host count, masks. Pure math, offline.
Real entropy in bits and honest crack-time — not "add a symbol" theatre. Never transmitted, never stored.
Cryptographically random — or a memorable passphrase you can actually type. Generated in your browser with crypto.getRandomValues, never sent anywhere.
SHA-256 / SHA-1 of any text via the browser's Web Crypto — for quick checksums and IOCs.
The daily driver — flip text to and from Base64 or percent-encoding.
Header and payload of any JSON Web Token — decoded in your browser, never sent anywhere. Signature is not verified.
The other twenty-nine days: detection engineering, compliance evidence, hardening — run by the operators who built these tools.
Book a free assessment callGociux · cybersecurity consultancy · Sibiu, Romania · worldwide · home · insights · lookups are validated, rate-limited and briefly cached; we don't store what you query.