Web & Network Diagnostic Suite
Comprehensive internet utilities for sysadmins, DevOps engineers, and webmasters. Audit IP addresses, DNS records, SSL certificates, and email security protocols in real time.
What Is My IP Address
Detect your public IPv4 and IPv6 address, ISP, location, and browser connection details instantly.
IP Address Lookup & Geolocation
Lookup detailed public information for any IPv4 or IPv6 address: ASN, ISP, country, and city.
IPv4 Converter
Convert IPv4 addresses between dotted-decimal, binary, hexadecimal, and integer formats.
DNS Lookup & Record Checker
Query authoritative DNS records (A, AAAA, CNAME, MX, TXT, NS, SOA) via secure DNS-over-HTTPS.
SPF Record Checker & Validator
Validate Sender Policy Framework (SPF) records to prevent email spoofing and ensure delivery to inboxes.
DMARC Record Checker & Validator
Inspect DMARC email authentication policies (none, quarantine, reject) and aggregate reporting tags.
DKIM Record Checker
Check DKIM public key records by selector to ensure outgoing email cryptographic signature validity.
WHOIS Domain Lookup
Lookup domain ownership, registrar information, registration date, expiration date, and nameservers.
Domain Age Checker
Calculate the exact age, registration date, and anniversary of any website domain for SEO analysis.
SSL Certificate Checker & Expiry
Check SSL/TLS certificate validity, issuer authority, SAN domains, and days until expiration.
HTTP Headers & Security Checker
Inspect HTTP response headers, status codes, server technologies, and security headers (HSTS, CSP).
URL Redirect & Status Checker
Trace URL redirect chains (301, 302, 307, 308) to diagnose redirect loops and SEO link equity loss.
Website Response Time & Speed Checker
Benchmark Time to First Byte (TTFB) and server response speeds for any public website.
Subnet Mask & CIDR Calculator (IPv4)
Calculate network addresses, broadcast addresses, usable IP host ranges, and subnet masks from CIDR notation.
HTTP Headers Parser & Inspector
Parse raw HTTP request and response header text into structured tables with security insights.
IPv4 to IPv6 Converter & Mapper
Convert IPv4 addresses to IPv6 formats including 6to4, IPv4-mapped, IPv4-compatible, and Hex representations.
MAC Address Lookup & OUI Vendor Finder
Identify hardware manufacturers from MAC addresses using IEEE Organizationally Unique Identifier (OUI) data.
User Agent Parser & Client Inspector
Parse raw User Agent strings to detect browser version, operating system, device model, and rendering engine.
Web Security Headers Checker & Audit
Audit your website's HTTP security headers for HSTS, Content Security Policy, X-Frame-Options, and vulnerabilities.
Real-Time Internet Infrastructure Diagnostics
DoH Encrypted DNS Inspection
DNS over HTTPS protects against DNS poisoning and interception. Query root and zone records across A, AAAA, MX, TXT, and CNAME with accurate TTL counters and instant status codes.
Proactive SSL Expiration Alerts
Avoid accidental downtime caused by expired HTTPS certificates. Check certificate authorities, cipher bit-depth, SAN domain coverage, and remaining validity countdowns.
Email Authentication Guardrails
Verify SPF authorization mechanisms, DKIM cryptographic selector keys, and DMARC enforcement policies (p=reject / p=quarantine) to ensure zero phishing vulnerabilities.
Frequently Asked Questions
How does the DNS Lookup tool resolve records?
Toolxilla uses Cloudflare DNS over HTTPS (DoH) over an encrypted 1.1.1.1 transport layer to retrieve authentic A, AAAA, CNAME, MX, TXT, and NS records directly from authoritative nameservers without ISP cache poisoning.
Why are SPF and DMARC records critical for email deliverability?
Major email providers (Google Gmail, Microsoft Outlook, Yahoo) require valid SPF and DMARC records to prevent email spoofing. Domains without these records are frequently rejected or routed directly to recipient spam folders.
Does the SSL Checker inspect intermediate CA certificates?
Yes. Our SSL certificate auditor negotiates a live TLS handshake with your domain's port 443, inspecting the full certificate chain, root authority, cipher suites, protocol version (TLS 1.2 / TLS 1.3), and exact expiration dates.
How are requests protected against Server-Side Request Forgery (SSRF)?
Every network diagnostic target is rigorously validated against RFC 1918 private subnets, localhost, and cloud metadata endpoints (such as 169.254.169.254) before any socket connection is initiated.