All Tools
The whole toolbox in one place. The five OSINT lookups run on our servers and return live data; every other tool below runs entirely in your browser with no upload.
OSINT & Lookup
Scan an Entity
Paste a phone, email, domain, IP, or username and get one verdict card with the signals and pivots. Start here.
Phone Lookup
Carrier, line type, VoIP detection for any number.
Email Lookup
MX, disposable detection, provider, risk score.
DNS Lookup
All record types: A, MX, TXT, CAA, DNSSEC.
What's My IP
Public IP, ISP, ASN, country. Never stored.
Username Search
Which of 24 platforms has a public profile at this handle. Signal, not proof.
Username Permutation Generator
Turn a name into the candidate handles to check: firstlast, jsmith, first.last, nicknames, years. Feeds the Username Search. In your browser.
Email & Threat Intel
Email Header Analyzer
Trace the hops, find the origin IP, read SPF/DKIM/DMARC, and spot spoofing.
SPF / DKIM / DMARC Analyzer
Lint and explain email-auth records. Lookup count, weak-policy warnings.
IOC Extractor & Defanger
Pull IPs, domains, URLs, hashes, and CVEs from any text. Defang or refang safely.
Punycode & Homograph Inspector
Convert domains to and from xn-- punycode. Flag mixed-script and lookalike spoofing.
Files & Forensics
Photo EXIF & Metadata Viewer
See a photo's hidden GPS location, camera, timestamp, and software, then strip the metadata before sharing. In your browser, never uploaded.
PDF Metadata Viewer
See who made a PDF and how: author, the software that created it, and the creation and modification dates. In your browser, never uploaded.
Image Fingerprint & Compare
Perceptual-hash a photo and compare two images to catch a reused or stolen profile picture, even after a resize or recompression. In your browser, never uploaded.
Encoding & Decoding
Base64 Encoder / Decoder
Encode or decode Base64. Auto-detects direction.
URL Encoder / Decoder
Percent-encode or decode URI components.
HTML Entity Encoder
Encode special chars or decode entities back to text.
Number Base Converter
Binary, octal, decimal, hex at once. BigInt, bytes, ASCII. Live.
Magic Decoder
Try every decoding at once: Base64/32, hex, URL, ROT, gzip. Best-guess highlight.
Format & Validate
JSON Formatter
Pretty-print, minify, validate. Pinpoints errors.
Regex Tester
Live match highlighting, capture groups, replace mode.
Text Diff Checker
Compare two texts line by line. Additions and removals, color-coded.
JSON โ CSV Converter
Convert both directions. Nested flattening, RFC 4180 quoting, type inference.
Phone Number Formatter (E.164)
Normalize any number to E.164, detect the country, check length. Offline.
Security & Crypto
JWT Decoder
Decode header + payload, with claim explanations.
Hash Generator
MD5, SHA-1, SHA-256, SHA-384, SHA-512, all at once.
Hash Identifier
What algorithm made this hash? Paste it, find out.
Password Strength
Entropy + crack-time, computed entirely in your browser.
UUID Generator
Random v4 UUIDs. Bulk mode, copy or download.
X.509 Certificate Decoder
Decode a PEM cert: subject, issuer, validity, SANs, key, SHA-256 fingerprint.
HTTP & Network
HTTP Header Analyzer
Paste response headers, get a security grade plus per-header explanation.
HTTP Request Inspector
See what your browser is sending right now: headers, user agent, JS state.
User-Agent Parser
Break a UA string into browser, OS, device, and bot or automation signals.
How This Page Reached You
A live walk through DNS, TLS, and timing of your own connection to this site.
Browser & Device Benchmark
Lightweight: JS compute speed, frame rate, real server latency, and your network estimate. Nothing downloaded in bulk.
IP Address Inspector
Classify any IPv4 or IPv6: scope, reverse pointer, embedded IPv4, EUI-64 MAC.
Subnet Calculator
CIDR to network, mask, host range. IPv4 + IPv6.
Date, Time & Scheduling
Unix Timestamp Converter
Epoch โ date. Auto-detects sec / ms / ฮผs / ns.
Cron Expression Explainer
Plain-English schedule, per-field check, and the next run times in any timezone.
Guides