Reload /stats and confirm the newest shipped item is visible in the live digest and trail.
Check sync
Live stats is probably close, but needs a quick live check. Verify the live digest and confirm the recent-changes trail is showing the newest item.
11-05-2026 17:21 Amsterdam
Surface
stats dashboard
Improvement
the live probe cards now show the exact URL that was checked in addition to the status badge and timing, so operators can see whether the dashboard verified the canonical route or only a fallback path
Impact
verification is easier to trust because the live check is now explicit about what was actually probed.
Verify
Reload /stats and confirm the newest shipped item is visible in the live digest and trail.
the connection profile endpoint now reuses the local geo cache when live provider lookup is thin, and the homepage summary exposes cache usage alongside provider, source, confidence, and fallback notes
Impact
operators get a steadier provider/location readout plus an explicit cache note when the lookup is being rescued locally instead of pretending the response is fully fresh.
Verify
Try a concrete intent on the homepage and confirm the top match points to the right live tool.
the recent-changes rail now runs a live HTTP probe on the most relevant targets and shows a live-probe badge with response detail instead of trusting only mtime-based sync hints, so route verification can confirm that the page actually answers and the expected marker is present
Impact
operators can now separate a merely reachable route from a truly live-verified surface before they spend time chasing a stale or misrouted target.
Verify
Reload /stats and confirm the newest shipped item is visible in the live digest and trail.
the top live targets now resolve against the newest matching changelog entry for each surface instead of the oldest one, so the route hint, route-status badge, and open-live link stay aligned with the latest shipped work
Impact
operators can trust the live-target rail more and are less likely to click into a stale route while verifying recent changes.
Verify
Reload /stats and confirm the newest shipped item is visible in the live digest and trail.
the waterfall tool now traces redirect hops, surfaces final-hop security header drift, and adds a clearer fix-impact forecast, so operators can spot redirect bloat and header regressions from one run instead of inferring them from a single status line
Impact
operators can now diagnose redirect chains and final-hop header loss faster before they escalate the issue elsewhere.
Verify
Open the live response-waterfall-lite-premium page and confirm the new behavior is visible end to end.
Action
Open live page
Show all changes (581)
Surface: stats dashboard Improvement: /stats/ now routes straight to the canonical stats-live.php dashboard implementation instead of the extra stats-live-v4 wrapper layer, with explicit stat and opcache invalidation before the handoff, so the directory route is less likely to 500 from a stale or drifted wrapper after FTP deploys Impact: operators can now rely on the canonical stats entrypoint more often when they verify fresh work and do not have to fight the old wrapper cache path first. Open live surface
Surface: homepage API Playground Improvement: the endpoint matrix now explains why the winning endpoint won, including score reasons and the reuse target for scripts, while low-confidence connection profiles are pushed behind the stable IP endpoint Impact: operators can now see both the best live target and the reason it won before copying a script URL, which should reduce wrong-endpoint reuse and speed up reuse decisions. Open live surface
Surface: homepage API Playground Improvement: the best-endpoint summary now downgrades /api/connection-info more aggressively when the lookup falls back or reports low confidence, so weak geo/provider runs stop winning the recommendation slot over the simpler IP endpoint Impact: operators get a truer script target and are less likely to trust a best-effort connection profile when the lookup signal is thin. Open live surface
Surface: stats dashboard Improvement: each recent-changes item now includes an explicit live-target row with a copyable URL action alongside the open-link, so operators can move from the changelog to the exact live surface without manually rebuilding the route Impact: operators can verify shipped work faster and with less copy/paste friction when they need to share or reopen the same live target. Open live surface
Surface: stats dashboard Improvement: /stats/ now reuses the shared live stats implementation instead of a separate copy, so the directory route and the main dashboard cannot drift apart again Impact: operators can trust that the canonical /stats/ path shows the same live behavior as the rest of the stats surface and verify shipped work with less route-risk. Open live surface
Surface: stats dashboard Improvement: each recent-changes card now shows an explicit route-status badge that marks mapped versus fallback live targets before the open-link, so operators can see at a glance whether the shipped surface has a direct live mapping or still relies on generic slug fallback Impact: operators can now judge live-route readiness faster when they verify new items and avoid wasting clicks on untrusted fallback paths. Open live surface
Surface: homepage API Playground Improvement: the matrix now keeps the strongest script target visible as a copyable endpoint URL, with the best endpoint, trust level, and operator summary staying in sync after both single-run and full-matrix checks Impact: operators can now jump from a quick live probe to the exact reusable API URL in one click instead of copying the wrong endpoint by hand. Open live surface
Surface: app-health-center Improvement: the live target resolver now recognizes app-monitor-ops, app-sla, and direct status route slugs before it falls back to a generic tools path, so recent-changes cards and top live-target tiles can open the actual app or status surface more often Impact: operators can jump straight to the right live page with fewer dead-end clicks when they verify newer app and status work. Open live surface
Surface: stats dashboard Improvement: the recent-changes trail now keeps search, kind, and surface filters in the URL and shows the active filter state inline, so operators can refresh or share a filtered verification view without losing context Impact: operators can now return to the same trail slice after a reload and hand a precise stats URL to someone else instead of reapplying the filter by memory. Open live surface
Surface: stats dashboard Improvement: the recent-changes cards now fall back to a generic tool-slug link when a changelog item uses Tool: or Surface: naming that was not explicitly listed yet, so new live surfaces still get a usable open-link instead of staying text-only Impact: operators can jump from the changelog to more newly shipped tools without waiting for the mapping table to be hand-updated first. Open live surface
Surface: stats dashboard Improvement: the latest shipped note now includes a three-step verification order that tells operators which live target to open, what behavior to confirm, and how to check sync in sequence, so the newest change is easier to verify without guessing the order Impact: operators can now go from changelog to live validation with less backtracking and fewer wrong-page checks when the dashboard trail changes quickly. Open live surface
Surface: stats dashboard Improvement: the live-sync panel now separates code lag, changelog lag, and deploy gap, and flips to an explicit mismatch verdict when the code and changelog drift apart, so the operator readout tells you whether the trail is stale or the FTP deploy missed the new stats code Impact: operators can now see at a glance whether the latest shipped note is actually reflected in the live dashboard instead of inferring it from a single lag number. Open live surface
Surface: http-headers Improvement: the redirect drift panel now adds a true operator summary with critical header-loss counts, a plain-language verdict, and a direct recommendation when security headers change across hops Impact: operators can now spot redirect chains that weaken HSTS/CSP or other critical headers without reading the hop table line by line. Open live surface
Surface: stats dashboard Improvement: the login preview for recent changes now uses the same structured cards as the authenticated dashboard, including surface, improvement, impact, verify, action, and live surface links Impact: operators can now scan the newest shipped work and jump to the right live page before logging in instead of reading a raw bullet list first. Open live surface
Surface: homepage API Playground Improvement: the live runner now also builds a copyable cURL snippet and shows explicit response-type and body-kind badges alongside timing and status, so operators can move from a quick browser check to a reusable terminal request in one step Impact: operators can now debug API behavior or hand the exact request shape to scripts much faster without reconstructing headers by hand. Open live surface
Surface: homepage API Playground Improvement: the live runner now measures request latency, shows HTTP status and content-type, and summarizes /api/ip, /api/ipv4, /api/ipv6, and /api/headers responses instead of only dumping raw text Impact: operators can now verify endpoint health and reuse the exact URL much faster when they are debugging integration behavior or checking the public API surface. Open live surface
Surface: stats dashboard Improvement: the recent-changes trail now adds a compact top-live-target rail that surfaces the most active recent surfaces with their counts and direct open-live actions, so operators can jump to the highest-signal pages without scanning the whole trail first Impact: operators can now reach the most relevant live pages faster when they want to verify the newest shipped work or compare repeated change patterns across the same surface. Open live surface
Surface: stats dashboard Improvement: the recent-changes trail now adds an explicit action target next to the verification cue, so each shipped note shows the first live place to click instead of only telling operators what to check Impact: operators can now move from reading a note to opening the right live surface with less hand-searching and less chance of checking the wrong page. Open live surface
Surface: homepage Tool Copilot Improvement: the router now gives a stronger top-match verdict with score, paste hint, and fallback path before the ranked list, while the ranking logic itself weighs multiword intent more heavily and rejects under-specified queries Impact: operators can get to the most likely tool faster and with less ambiguity when they land on the homepage with a concrete job to do. Open live surface
Surface: stats dashboard Improvement: the recent-changes trail now adds an explicit per-item verification cue, so each shipped note shows the first live check to run instead of only describing the change and its impact Impact: operators can now move from reading the shipped note to running the right live check faster, with less guesswork about what to verify next. Open live surface
Surface: homepage Tool Copilot Improvement: the intent matcher now shows a confidence label, a concrete next step, and a direct show-below jump for each ranked tool instead of only a plain open-link list, so visitors can tell why a tool is recommended and move to the matching card immediately Impact: first-time visitors can now route to the right diagnostic faster and with less hesitation, which should improve tool discovery and conversion from the homepage. Open live surface
Surface: internet-speed-test Improvement: the route diagnosis now ranks the most likely root cause with evidence and a confidence score instead of only naming a broad limiter, so operators can tell whether queueing, upload ceiling, download ceiling, or latency stability is the primary problem and what to test first Impact: faster triage for congested or asymmetric links because the next action is now tied to the strongest measured signal instead of a generic recommendation. Open live surface
Surface: stats dashboard Improvement: the live sync readout now adds an explicit verdict and next-check hint for the newest shipped item, so operators can tell at a glance whether the page is synced, merely close, or already stale before trusting the rest of the trail Impact: operators can now separate a healthy deploy from a suspiciously old dashboard with one line instead of inferring it from lag numbers alone. Open live surface
Surface: stats dashboard Improvement: added a live sync badge and freshness readout for the newest shipped item, including code mtime, changelog mtime, and lag minutes, so operators can spot a stale deploy faster instead of trusting the trail blindly Impact: operators can now see at a glance whether the dashboard code is actually in step with the latest shipped note before they verify anything else. Open live surface
Surface: internet-speed-test Improvement: added a route-diagnosis layer that classifies the measured line shape, primary limiter, interactive risk, and best-fit use case from the live ping/download/upload/loaded-latency results, so the test now explains whether the connection is balanced, asymmetric, or queue-sensitive instead of only showing raw numbers Impact: operators can now tell what kind of connection they are on and what workload it best supports before they decide whether the line needs Wi-Fi, QoS, or provider attention. Open live surface
Surface: stats dashboard Improvement: the recent-changes trail now includes live search plus Tool/Surface/Ops filter chips and clickable focus chips for the most active surfaces, so operators can jump from a filtered trail straight to the relevant shipped note and live page faster Impact: operators can now find the exact change they need to verify without scanning the full history by hand. Open live surface
Surface: stats dashboard Improvement: the recent-changes trail now turns recognized tools and surfaces into direct live links, so each shipped item points operators to the most relevant page instead of stopping at text-only history Impact: operators can jump straight from the latest shipped note into the live surface or tool and verify the behavior immediately with one click. Open live surface
Surface: tls-expiry-monitor Improvement: added chain bottleneck diagnosis that identifies which certificate in the presented chain has the shortest remaining lifetime, labels that bottleneck as leaf, intermediate, or self-issued, and surfaces the renewal pressure directly in the summary and chain table Impact: operators can now see exactly which cert link drives renewal urgency instead of only knowing that some part of the chain expires soon. Open live surface
Surface: stats dashboard Improvement: added a compact recent-changes focus summary that groups the trail by surface kind and highlights the most common live surfaces before the raw history Impact: operators can now see whether the latest shipped work is mostly tool, surface, or ops related at a glance instead of scanning multiple entries. Open live surface
Surface: stats dashboard Improvement: upgraded the recent-changes panel from a raw list into structured cards for surface, improvement, impact, and a derived next-step hint, while keeping the latest shipped digest pinned above the trail Impact: operators can now read the newest live change and decide what to inspect next without parsing the full history by hand. Open live surface
Surface: stats dashboard Improvement: added a latest shipped improvement digest that extracts the newest changelog item into a compact surface / impact / operator-next-step summary above the raw recent-changes list Impact: operators can now see the most recent live change in one glance and use the trail as a decision aid instead of scanning the full update log. Open live surface
Surface: stats dashboard Improvement: added a decision snapshot layer that compares the last 7 days of traffic against the previous 7 days, combines human share, install conversion, push health, and top-path concentration into one operator verdict, and keeps the recent-changes trail visible on the live page Impact: operators can now see in one glance whether traffic is growing, quality is healthy, and which surface needs attention first instead of piecing the story together from separate charts. Open live surface
Surface: http-headers Improvement: the checker now accepts internationalized domain names in real-world URLs, normalizes Unicode hosts such as bücher.de into a fetch-safe ASCII target while preserving the original operator input on-screen, and validates both A and AAAA resolution so IDN sites stop failing at input-gate time Impact: operators can now inspect headers for IDN websites directly instead of being blocked by a false invalid-URL error before any live fetch happens. Open live surface
Surface: premium page Improvement: added a live outcome-led A/B offer layer with persistent evidence-first, time-saving, and risk-prevention variants, wired variant-aware conversion tracking through `premium_view`, CTA, and checkout events, and upgraded `/api/conv-funnel` to break premium performance out by variant Impact: operators can now test which premium message actually moves visitors from view to checkout instead of guessing from one static sales page. Open live surface
Surface: http-headers Improvement: added cache freshness-budget analysis that now compares the live Age header against the effective TTL, classifies the final response as fresh, near expiry, expired at cache, or TTL known but Age unknown, and surfaces both remaining freshness seconds and budget-consumption percentage with explicit warnings when shared caches appear close to or beyond freshness Impact: operators can now tell whether a response is still being served comfortably within policy or is already skating on stale-cache risk instead of only seeing raw TTL and Age numbers side by side. Open live surface
Surface: homepage Tool Copilot Improvement: upgraded the homepage router from a single weak keyword guess into a ranked multi-match intent assistant that now recognizes broader operator phrasing such as redirect loops, mail deliverability, certificate expiry across multiple domains, uptime alerts, slow mobile pages, DNS checks, and security-header work, then explains why each tool was chosen and can jump the main tool grid to matching results below Impact: visitors now get clearer first-click routing and less dead-end searching when they arrive with a concrete job instead of a tool name. Open live surface
Surface: http-headers Improvement: added compression and content-encoding posture analysis that now classifies whether the final response is actually compressed, whether the payload type is meaningfully compressible, whether Vary: Accept-Encoding is present for cache-safe negotiation, and whether large text or JSON responses are being shipped uncompressed, plus concrete warnings for cache confusion and transfer waste Impact: operators can now spot bandwidth and latency waste or broken compression negotiation directly from one header run instead of manually interpreting Content-Encoding, Vary, Content-Type, and payload framing line by line. Open live surface
Surface: user-agent-analyzer Improvement: added identity posture diagnosis that now fuses the pasted UA with Client Hints, Accept-Language, and live runtime evidence into clear operator-facing verdicts such as verified live browser, reduced/privacy-limited browser, likely spoofed or stitched identity, and automation or crawler posture, plus supporting evidence and next-step guidance Impact: operators can now tell whether a browser identity is merely a static header claim or a corroborated live session without manually reconciling four separate signal blocks. Open live surface
Surface: redirect-checker Improvement: added redirect-chain efficiency diagnosis that now separates pure canonicalization-only hops from mixed-intent redirects, estimates avoidable canonical hops plus avoidable latency, and surfaces a verdict when stacked HTTPS/www/slash/index cleanup likely could be collapsed into fewer redirects Impact: operators can now spot redirect chains that are technically correct but still wasting latency through unnecessary canonicalization stacking instead of only seeing hop counts. Open live surface
Surface: uptime-response-checker Improvement: added delivery-path diagnosis that decomposes repeated probe latency into DNS lookup, TCP connect, TLS handshake, origin wait before first byte, and response transfer after first byte, then identifies the dominant phase with share, averages, peaks, and spread evidence Impact: operators can now tell whether a slow run is mostly backend wait, handshake overhead, DNS drag, or payload transfer instead of only seeing one total timing number. Open live surface
Surface: redirect-checker Improvement: added signed-link expiry-window analysis that detects explicit expiry timestamps and AWS or Google presign windows inside redirect-chain query strings, then classifies each hop as active, near-expiry, or expired with remaining-lifetime evidence in both the per-hop notes and sensitive-query summary Impact: operators can now tell whether a redirect is carrying a link that is already dead or about to expire instead of only seeing that signed parameters exist. Open live surface
Surface: redirect-checker Improvement: added redirect-target exposure analysis that now detects open-redirect style destination parameters such as `url`, `next`, `return_to`, `continue`, and `redirect_uri`, resolves embedded off-site targets, flags HTTP downgrade or localhost/private-network targets, and surfaces both per-hop evidence and chain-level high-risk destination counts Impact: operators can now see when a redirect chain is carrying an off-site or downgrade-prone destination handoff before trusting login, SSO, or handoff URLs. Open live surface
Surface: ip-reputation-lookup Improvement: added an operator priority queue that now scores each resolved endpoint by routing validity, response-path quality, DNSBL pressure, and risk severity, then sorts the IP list accordingly and emits per-endpoint next-step guidance plus a top summary queue for the first actions to take Impact: operators can now see which IP needs immediate routing validation, contact-path recovery, or delist follow-up first instead of manually triaging a mixed endpoint set row by row. Open live surface
Surface: uptime-response-checker Improvement: added rate-limit and backpressure detection that now recognizes HTTP 429, Retry-After, and common X-RateLimit or RateLimit budget headers across repeated runs, exposes per-run throttle state plus remaining-budget hints, and folds quota pressure into both the summary and operator verdict Impact: operators can now tell when a target is failing because of enforced request limits or shrinking quota headroom instead of misreading it as a generic 4xx or vague availability issue. Open live surface
Surface: uptime-response-checker Improvement: added edge security mediation detection that now classifies repeated responses as inline JavaScript probe, interstitial challenge, CAPTCHA gate, or access-denied block page, attributes likely vendors such as Cloudflare when signatures are present, and folds that signal into both the per-run table and top-level operator verdict Impact: operators can now tell when a URL is technically up but partly or fully gated by CDN or WAF challenge behavior instead of mistaking those mediated 200 responses for clean reachability. Open live surface
Surface: website-pagespeed Improvement: added a primary bottleneck diagnosis layer that now fuses Lighthouse timing, JavaScript and image weight, third-party concentration, render-blocking cost, cache TTL waste, and server-wait opportunities into a clear per-strategy verdict such as script execution, third-party, media weight, render-path, backend/network wait, or repeat-visit cache bottleneck, plus a cross-device shared-versus-split diagnosis, and when Google quota or API failures force Lite fallback the tool now still emits a narrower transport-versus-payload bottleneck verdict instead of going silent Impact: operators can now see what is actually slowing the page first even during degraded API runs instead of manually interpreting multiple sections or getting only a raw fallback timing block. Open live surface
Surface: ip-reputation-lookup Improvement: upgraded RDAP response-contact analysis so role-tagged abuse mailboxes are now separated from technical or NOC fallback contacts and generic role-free addresses, then rolled into per-endpoint contact-path quality plus stricter response posture grading when only fallback or generic contacts exist Impact: operators can now tell whether an IP publishes a true abuse escalation path or only a weaker fallback inbox before trusting the tool's incident-readiness verdict. Open live surface
Surface: bulk-dns Improvement: added authoritative DNS resilience verdicts that combine nameserver prefix diversity, AXFR exposure or denial, and DNSSEC posture into operator-facing classifications such as hardened authoritative posture, distributed authoritative posture, concentrated authoritative footprint, exposure risk, and needs-hardening states Impact: bulk runs now expose measurable authoritative hardening and concentration counts so DNS control-plane fragility can be triaged across many domains without manually correlating NS spread, AXFR posture, and signing state row by row. Open live surface
Surface: uptime-response-checker Improvement: upgraded edge TLS analysis so each resolved endpoint now verifies whether the visible leaf certificate actually covers the requested hostname, classifies the drift as hostname-mismatch, subject-drift, renewal-or-ca-drift, profile-drift, or none, and exposes hostname coverage directly in the edge table plus top-level TLS summary Impact: operators can now separate true certificate trust breakage from softer issuer or renewal rollover differences without manually inspecting SAN coverage per edge IP. Open live surface
Surface: website-pagespeed Improvement: added third-party dependency posture that now classifies mobile and desktop audits as minimal, moderate, third-party-heavy, or single-vendor dominated based on page-budget share plus top-vendor transfer and main-thread concentration, then adds a cross-device verdict when the same provider bottlenecks both strategies Impact: operators can now tell whether external code is a side issue, a broad page-budget drag, or one vendor-specific bottleneck before spending time diffing third-party rows by hand. Open live surface
Surface: website-pagespeed Improvement: upgraded lab-versus-field divergence analysis so each comparable CWV metric now shows whether real users are worse than Lighthouse, Lighthouse is harsher than field data, or the signals still align, with per-metric severity plus an overall verdict for mixed, field-worse, lab-worse, or major drift Impact: operators can now tell whether synthetic tests are understating production pain or merely being harsher than real-user experience before prioritizing performance work. Open live surface
Surface: http-headers Improvement: added duplicate and conflicting header auditing that inspects repeated final-response header lines across cache policy, HSTS, CSP, content type, CORS, and other singleton security headers, then classifies them as conflicting, layered, or identical with operator-facing impact notes Impact: operators can now spot reverse-proxy or CDN header stacking bugs that silently change browser, cache, or CORS behavior without manually diffing duplicate header lines in the raw response. Open live surface
Surface: website-pagespeed Improvement: added Core Web Vitals field-data confidence analysis that now classifies whether the CrUX verdict is page-specific, page-specific but partial, origin-fallback only, origin-fallback with gaps, or missing entirely, while also exposing measured-metric coverage and a clear warning when the tool had to fall back from URL-level to origin-level data Impact: operators can now tell whether the CWV verdict truly reflects this page or only a site-wide fallback before making optimization decisions from the reported field metrics. Open live surface
Surface: website-pagespeed Improvement: added optimization-ownership analysis that compares the top Lighthouse opportunities across mobile and desktop, separates shared fixes from strategy-specific wins, and adds a verdict for whether operators should attack one shared pass first or prioritize mobile-only or desktop-only cleanup Impact: operators can now see if the next performance work should be cross-strategy or device-specific instead of manually diffing two separate opportunity lists. Open live surface
Surface: redirect-checker Improvement: added session-cookie handoff auditing that identifies likely auth and session cookies by name, counts where they are set across redirect hops, flags insecure Secure-missing auth cookies, detects domain-scoped auth cookies, and rolls that into a chain-wide verdict about whether session state stays constrained or widens across redirects Impact: operators can now spot login and session exposure patterns in redirect flows without manually interpreting raw Set-Cookie headers hop by hop. Open live surface
Surface: redirect-checker Improvement: added HSTS transport-hardening analysis that inspects every redirect hop for Strict-Transport-Security strength, preload readiness, missing-HTTPS coverage, and downgrade exposure, then rolls that into both per-hop transport verdicts and a chain-wide HSTS posture summary Impact: operators can now see whether a redirect chain is merely HTTPS-looking or actually protected against repeat downgrade and first-visit transport mistakes without manually reading raw response headers. Open live surface
Surface: ip-location-lookup Improvement: added geographic blast-radius auditing that converts resolved endpoint spread into outage-scope signals using city concentration, metro spillover, centroid distance, and farthest-gap evidence, then classifies the hostname as single-metro dependency, regional cluster only, single-country geographic spread, cross-country regional failover, cross-country long-haul failover, or wide multi-metro spread Impact: operators can now tell whether an IP or hostname would likely fall with one metro outage or already has meaningful geographic survivability without manually reconciling endpoint cities and distance spread. Open live surface
Surface: ip-location-lookup Improvement: normalized ASN identity matching across providers so values like plain numeric ASN, AS-prefixed labels, and provider-decorated ASN names now collapse to one canonical network identity during endpoint comparison, drift counting, overlap detection, and dominant-ASN analysis Impact: operators now get accurate ASN drift, ASN overlap, dominant ASN, and single-ASN dependency results instead of false split-network signals caused by formatting differences between geolocation providers. Open live surface
Surface: ip-location-lookup Improvement: added edge-fabric posture detection that distinguishes network-diverse failover from identity-concentrated spread by combining dominant ASN/prefix share with geographic gap evidence, then classifies the hostname as tightly clustered, network-diverse failover, multi-operator geographic failover, single-operator regional edge fabric, single-operator global edge fabric, or likely anycast/global edge fabric Impact: operators can now tell whether multi-location results indicate true failover diversity or mostly one distributed edge footprint without manually reconciling spread, ASN concentration, and prefix concentration. Open live surface
Surface: uptime-response-checker Improvement: added an operator verdict layer that fuses repeated-run health, edge endpoint drift, response-variant drift, cache-validator drift, TLS drift, and latency instability into one triage posture such as stable and healthy, intermittent availability failure, partial edge failure, split response variants, cache policy drift, edge TLS drift, or healthy but latency-unstable Impact: operators can now tell which failure class to investigate first instead of manually interpreting five repeated runs plus edge and cache evidence across separate sections. Open live surface
Surface: website-pagespeed Improvement: added mobile-versus-desktop split analysis that compares strategy score gaps and key Lighthouse timing deltas, then classifies the audit as near parity, mobile bottleneck, desktop bottleneck, or mixed strategy split Impact: operators can now see whether optimization work should start with phone-specific pressure, desktop-specific overhead, or a cross-device issue instead of manually diffing two Lighthouse reports. Open live surface
Surface: uptime-response-checker Improvement: response-consistency detection now separates raw versus stable body fingerprints and normalizes Cloudflare challenge, rocket-loader, and nonce-like per-request churn before drift verdicts are calculated Impact: operators can now distinguish real body variance from edge-injected token noise and avoid false-positive instability alerts on otherwise healthy pages. Open live surface
Surface: ip-location-lookup Improvement: added failover diversity auditing that converts resolved endpoint spread into dependency signals for single-country, single-ASN, and single-prefix concentration, then classifies the hostname as single-network dependency, same-network failover only, same-country multi-network failover, geographic failover with operator concentration, or cross-country multi-network failover Impact: operators can now see whether a hostname has real failover depth or only looks redundant while still depending on one country, one ASN, or one routed block. Open live surface
Surface: ip-location-lookup Improvement: added endpoint identity concentration analysis that ranks dominant countries, ASNs, and routed prefixes across all resolved endpoints, surfaces minority-share spillover, and classifies the hostname as mostly concentrated, multi-network mixed, heavily mixed, or cross-country Impact: operators can now tell whether a hostname is anchored to one network identity or split across multiple routing footprints without manually counting endpoint rows. Open live surface
Surface: website-pagespeed Improvement: changed the Google PageSpeed fetch path from all-or-nothing to partial-response mode so the tool now keeps whichever Lighthouse strategy still returns, explicitly marks the missing strategy as unavailable, and adds Lite fallback timings during quota or API response failures Impact: operators now keep real mobile or desktop diagnostics plus a clear degradation signal instead of losing the full audit whenever only one PageSpeed strategy fails. Open live surface
Surface: ip-reputation-lookup Improvement: added response-readiness auditing that turns raw abuse-contact, mailbox reachability, RPKI, and live BGP visibility signals into per-endpoint escalation postures of response-ready, degraded, blind-spot, or invalid-route plus fleet-wide readiness counters and a top-level follow-up verdict Impact: operators can now tell whether a suspicious IP is not just risky but actually actionable for abuse escalation or likely to stall because the route is inconsistent or the published contact path is broken. Open live surface
Surface: security-headers-score Improvement: added Referrer-Policy leakage auditing that parses fallback chains, identifies the effective policy browsers will apply, flags cross-origin full-URL exposure and HTTPS-to-HTTP downgrade leakage, and classifies the outcome as strong, same-origin-only, partial, downgrade-exposing, or cross-origin-full-url Impact: operators can now tell whether a site only looks safe because a referrer header exists or whether the effective policy still leaks path and query data across origins and downgrades. Open live surface
Surface: security-headers-score Improvement: added legacy CSP report-uri endpoint detection to the reporting audit so enforced and report-only policies now contribute extracted report destinations even when a site does not publish modern Report-To wiring Impact: operators can now distinguish truly unwired CSP telemetry from older but still configured report-uri rollouts and avoid false missing-destination conclusions on sites that still ship legacy CSP reporting. Open live surface
Surface: security-headers-score Improvement: added CSP script trust auditing that inspects the effective script policy for nonce and hash sources, strict-dynamic, unsafe-inline and unsafe-eval exposure, plus host and scheme allowlist breadth before classifying the script trust model as locked-down, strong, partial, host-allowlist-only, weak, or not-assessed Impact: operators can now tell whether a CSP actually anchors script execution with modern trust primitives or still relies on brittle allowlists that leave inline injection and trusted-host abuse harder to spot. Open live surface
Surface: security-headers-score Improvement: added cookie prefix and CHIPS auditing that validates __Host-, __Secure-, and Partitioned cookies against their required attributes and surfaces per-class valid or invalid counts plus exact rule-break evidence Impact: operators can now spot deceptively named cookies that look hardened but silently break browser prefix or partitioning requirements without leaving the header audit for manual Set-Cookie review. Open live surface
Surface: http-headers Improvement: added validator integrity probing that replays ETag-only, Last-Modified-only, and combined conditional requests and classifies each validator as honored, ignored, or inconclusive instead of showing only one merged revalidation result Impact: operators can now tell whether cache validators actually trigger 304 responses per validator or are merely decorative, which makes broken CDN and origin revalidation behavior much faster to diagnose. Open live surface
Surface: premium page Improvement: rewrote the premium conversion surface around outcome-led positioning with tool-aware plan recommendations, stronger trust and value framing, a clearer Pro-versus-Team comparison, and a sticky CTA that keeps the best-fit upgrade visible on mobile and long scrolls Impact: premium visitors now get an immediate best-fit recommendation plus clearer reasons to upgrade instead of a bare plan list, which should reduce decision friction and improve premium click-through from tool-led traffic. Open live surface
Surface: ip-location-lookup Improvement: added dual-stack split auditing that compares resolved IPv4 and IPv6 endpoint families for country, city, ASN, and cross-family geographic distance with closest-pair and farthest-pair evidence Impact: each run now exposes measurable IPv4-versus-IPv6 overlap counts plus median and P90 cross-family distance so operators can spot dual-stack routing or hosting splits that would otherwise hide behind a single displayed geolocation. Open live surface
Surface: ip-reputation-lookup Improvement: added live BGP visibility auditing using public routing data with visible-prefix detection, expected-origin ASN matching, endpoint-level mismatch classification, and fleet-wide BGP drift summary counters Impact: each run now exposes measurable BGP-visible, BGP-not-visible, BGP-origin-match, and BGP-origin-mismatch endpoint counts so publicly unrouted or origin-inconsistent targets can be spotted without leaving the IP reputation tool for a separate routing lookup. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-02 17:57 UTC and 2026-04-02 19:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: asn-lookup Improvement: added direct-ASN relationship topology using live BGP relationship data with peer, upstream, and downstream counts plus sampled neighbor evidence and a network-role verdict Impact: direct ASN lookups now expose 3 measurable relationship counts and a topology posture so operators can distinguish stub, transit-connected, exchange-heavy, and customer-serving networks without leaving the ASN tool for separate peering research. Open live surface
Surface: dns-propagation Improvement: added DNSSEC propagation support for DS and DNSKEY lookups with answer normalization for digest and key material comparison across public resolvers and authoritative baselines Impact: the checker now supports 2 additional DNSSEC record workflows and is expected to reduce false propagation drift from formatting differences when comparing DS digests and DNSKEY material across resolvers. Open live surface
Surface: redirect-checker Improvement: added redirect fragment continuity auditing that classifies hash fragments as preserved, changed, removed, or added across each hop with fragment-type hints for anchors, SPA routes, OAuth fragments, and token-style fragments Impact: each run now exposes measurable fragment-preserved, fragment-changed, fragment-removed, fragment-added, and high-risk fragment hop counts so OAuth callback breakage, SPA deep-link loss, and hash-token rewrite bugs can be spotted without manual URL-fragment diffing. Open live surface
Surface: ip-location-lookup Improvement: added provider field-drift auditing with per-endpoint disagreement counts and a live provider-versus-provider evidence table for country, city, timezone, ASN, ISP, and coordinates Impact: each run now exposes measurable drift counts across 5 location fields plus the most unstable field so low-confidence geolocation results can be explained without manual side-by-side provider comparison. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-02 13:57 UTC and 2026-04-02 15:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: reverse-ip-lite Improvement: added HTTPS certificate profile clustering across sampled live co-hosted domains by grouping shared leaf-certificate fingerprints with subject, issuer, expiry, SAN coverage, and source-IP spread Impact: each run now exposes measurable unique TLS profile count, shared TLS profile count, TLS-profiled domain coverage, capture-failure count, and largest shared certificate cluster so operators can separate one reused HTTPS estate from genuinely distinct co-hosted properties without manual per-domain certificate checks. Open live surface
Surface: mx-lookup Improvement: added backup-tier MX quality auditing that compares lower-priority failover hosts against the primary priority tier for STARTTLS support, TLS certificate validity, sampled IPv4/IPv6 SMTP reachability, PTR trust, and alias risk Impact: each run now exposes measurable weaker-backup counts across 5 failover checks so backup MX hosts that only break mail during primary outages can be spotted without manual priority-tier comparison. Open live surface
Surface: cidr-subnet-calculator Improvement: added IPv4 free-space exclusion planning that subtracts pasted used hosts and subnets from a base CIDR and returns the exact remaining free CIDR blocks with utilization totals Impact: each run now exposes measurable excluded-address coverage, remaining-free-address count, remaining-free percentage, and exact free-block count so subnet capacity planning no longer requires manual range subtraction or spreadsheet CIDR carving. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-02 09:57 UTC and 2026-04-02 11:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: http2-http3-checker Improvement: added HTTP/2 versus HTTP/3 speed comparison with final-path timing, paired edge-IP delta measurement, median overlap analysis, and a clear faster-slower-parity verdict Impact: each run now exposes measurable final-path delta plus paired-endpoint median delta across overlapping HTTP/2 and HTTP/3 probes so transport support can be judged for actual speed benefit instead of presence only.
Surface: robots-sitemap-validator Improvement: added sitemap entry scope auditing that samples URL entries from each urlset and checks whether they stay on the sitemap host and inside the sitemap directory scope Impact: each run now exposes measurable in-scope, out-of-scope, and cross-host sampled entry counts so invalid sitemap path coverage and misplaced URL publishing can be spotted without manually diffing sitemap locations against URL entries.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-02 05:57 UTC and 2026-04-02 07:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: uptime-response-checker Improvement: added endpoint-level HTTPS certificate consistency auditing across resolved edge IPs with live leaf subject, issuer, expiry, and signature algorithm capture during forced edge probes Impact: each run now exposes measurable certificate-visibility coverage plus subject, issuer, expiry, signature-algorithm, and full-profile drift counts so partial edge renewals and mismatched TLS rollout can be spotted without a separate per-IP certificate check. Open live surface
Surface: ipv4-checker Improvement: added proxy-chain edge alignment auditing that compares each chain's edge-side public IP against corroborating edge signals such as REMOTE_ADDR, X-Real-IP, CF-Connecting-IP, and True-Client-IP while classifying the chain topology Impact: each run now exposes measurable edge-aligned, edge-mismatch, and unverifiable chain counts so misordered or partially spoofed forwarding chains can be spotted without manual rightmost-IP cross-checking.
Surface: dns-lookup Improvement: added wildcard DNS auditing that probes 3 random subdomains, detects wildcard A, AAAA, and CNAME answers, compares them against the base host answer set, and classifies the result as no-wildcard-visible, full-wildcard, partial-wildcard-or-template, or wildcard-with-distinct-answer-pool Impact: each run now exposes measurable wildcard-hit, base-address-aligned, and base-CNAME-aligned probe counts so catch-all DNS and synthetic fallback hostnames can be spotted without separate manual random-subdomain testing. Open live surface
Surface: dmarc-checker Improvement: added public-suffix-aware organizational-domain fallback so inherited DMARC lookup can continue correctly across multi-label suffixes such as co.uk, com.au, and k12 state domains instead of stopping one label too early Impact: inherited-policy detection is now expected to return the correct effective DMARC domain for multi-label public suffix deployments and reduce false no-record results on those domain families. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-02 01:57 UTC and 2026-04-02 03:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: email-deliverability-check Improvement: added TLS-RPT report mailbox path validation that inspects every rua destination for MX, implicit MX fallback, Null MX, or missing mail routing and surfaces a dedicated mailbox reachability verdict Impact: each run now exposes measurable mail-ready, implicit-MX, Null-MX, and no-mail-path TLS-RPT destination counts so valid-looking TLS-RPT records that send reports to undeliverable inbox domains can be spotted without separate MX follow-up. Open live surface
Surface: webrtc-leak-test Improvement: added cross-provider public endpoint consensus across 5 concurrent STUN networks with family-level agreement, mapped-port drift, and multi-egress drift verdicts Impact: each run now exposes measurable provider-confirmed public IPv4 and IPv6 mapping agreement and is expected to cut false confidence from single-provider WebRTC results by showing when leaked mappings are stable across multiple STUN networks versus limited to a subset of providers.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-01 21:57 UTC and 2026-04-01 23:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: whois-lite Improvement: added registry-lock posture auditing that classifies visible EPP protections into no-registry-lock, registrar-only-lock, partial-registry-lock, or full-registry-lock and shows per-action transfer, update, and delete coverage Impact: each run now exposes measurable server-side and client-side lock coverage counts out of 3 so domain hijack hardening gaps can be spotted without manual EPP status interpretation. Open live surface
Surface: bulk-dns Improvement: added authoritative AXFR exposure auditing that probes up to 4 discovered nameservers per domain and classifies zone-transfer posture as exposed, denied, or mixed-or-inconclusive with per-nameserver evidence Impact: each run now exposes measurable AXFR-exposed, AXFR-denied, and AXFR-mixed domain counts so accidental full-zone disclosure can be spotted across bulk domain sets without separate manual dig AXFR checks. Open live surface
Surface: reverse-dns Improvement: added PTR IPv4 label-coherence auditing that extracts IPv4-like tokens embedded in PTR hostnames and classifies each IPv4 result as exact-match, mixed-match, mismatch, or absent Impact: each run now exposes measurable exact-match, mixed-match, mismatch, and absent PTR label counts so misleading reverse hostnames that encode the wrong IPv4 can be spotted without manual hostname-to-IP comparison. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-01 17:57 UTC and 2026-04-01 19:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: geo-latency-estimator Improvement: added server-calibrated latency envelopes that compare live TCP probe RTT from the My-IP-Is server against the geography-only model and widen best, typical, and congested estimates using measured median and P90 model error Impact: each run now exposes measurable median and P90 measured-versus-estimated ratio plus calibrated typical and congested RTT so operators can judge real target-side latency inflation without separate manual probe-to-model comparison.
Surface: traceroute-viewer Improvement: added destination alignment analysis that compares the final responsive hop against resolved target endpoints using ASN and geographic proximity Impact: each run now exposes measurable final-hop to target endpoint alignment verdicts, ASN-match visibility, geo-distance-to-target evidence, and resolved target endpoint context so operators can tell whether the trace visibly reached the destination network edge without separate ASN and IP geolocation follow-up. Open live surface
Surface: user-agent-analyzer Improvement: added Accept-Language coherence auditing that parses locale priority order, wildcard usage, distinct language spread, strongest region signal, and mismatches against navigator.language, navigator.languages, and browser timezone Impact: each run now exposes measurable locale-entry count, distinct-primary-language count, wildcard presence, and locale-versus-runtime mismatch signals so synthetic header stacks and geolocation-spoofed browser identities can be spotted without separate header forensics. Open live surface
Surface: tls-checker Improvement: added Certificate Transparency SCT visibility that extracts embedded signed certificate timestamp evidence from the served leaf certificate and reports SCT presence, count, source, and detail lines Impact: each run now exposes measurable SCT visibility and embedded-CT evidence directly in the TLS report so certificate transparency coverage can be checked without a separate CT inspection workflow.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-01 13:57 UTC and 2026-04-01 15:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: reverse-ip-lite Improvement: added wildcard DNS inflation auditing that probes a random nonexistent subdomain per visible registrable root and shows whether the wildcard response resolves back into the same source-IP pool Impact: each run now exposes measurable wildcard-root, same-IP-wildcard-root, and wildcard-inflated-domain-row counts so reverse-IP result sets bloated by wildcard tenant DNS can be separated from genuinely distinct co-hosted sites without manual random-subdomain testing. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-01 09:57 UTC and 2026-04-01 11:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-01 05:57 UTC and 2026-04-01 07:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: asn-lookup Improvement: added live RPKI route-origin validation per resolved endpoint with ROA-backed status, announced prefix and ASN context, and validating versus candidate ROA evidence Impact: each run now exposes measurable RPKI valid, invalid, not-found, and unknown endpoint counts plus ROA evidence so route-origin trust can be checked from the ASN tool without a separate RPKI lookup. Open live surface
Surface: cdn-waf-detector Improvement: added origin exposure auditing that compares detected CDN or WAF fingerprints against forced-edge ASN and owner metadata and flags endpoint IPs whose ownership does not match the detected provider Impact: each run now exposes measurable possible-origin-bypass counts across tested edge IPs so partial CDN or WAF bypass exposure can be spotted from the detector itself instead of requiring separate ASN cross-checks. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-04-01 01:57 UTC and 2026-04-01 03:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: robots-sitemap-validator Improvement: added compressed sitemap support that auto-detects and decodes gzip-delivered and .xml.gz sitemap files across robots.txt directives, direct sitemap checks, and recursive child sitemap validation Impact: each run can now validate compressed sitemap trees instead of falsely failing XML parsing on gzip sitemap publishing, restoring measurable directive and child-node coverage for compressed sitemap deployments.
Surface: port-range-scanner Improvement: added live HTTP surface auditing on detected web ports with per-endpoint status, redirect target, HTTPS upgrade, HSTS, server, and content-type evidence Impact: each run now exposes measurable redirecting-web-port, HTTPS-upgrade, HSTS-covered, and non-HTML web-surface counts so mixed web edge posture can be triaged from the scan itself without separate follow-up header checks.
Surface: internet-speed-test Improvement: added a trend and congestion tracker that saves jitter, packet loss, loaded latency, and bufferbloat per run and compares the current result against the user's own recent median and best measurements Impact: each run now exposes measurable download drift, upload drift, ping drift, and bufferbloat drift versus personal baseline so peak-hour congestion and line degradation can be spotted from the built-in history instead of manual spreadsheet comparison. Open live surface
Surface: mx-lookup Improvement: added per-family SMTP reachability auditing that probes sampled IPv4 and IPv6 MX endpoints separately and classifies each exchanger as dual-stack reachable, IPv4-only reachable, IPv6-only reachable, or unreachable on sampled paths Impact: each run now exposes measurable dual-stack, IPv4-only, IPv6-only, and unreachable MX target counts plus per-family sampled connection latency so inbound mail IPv6 rollout gaps can be spotted without separate manual SMTP tests per address family. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-31 21:57 UTC and 2026-03-31 23:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: ns-lookup Improvement: added delegated nameserver recursion exposure auditing that directly probes every authoritative nameserver with an unrelated A lookup and reports recursion-available flags, open recursion detections, possible recursion cases, and restricted responders Impact: each run now exposes measurable open-recursion, restricted, and ambiguous nameserver counts plus per-nameserver RA and answer evidence so authoritative DNS security drift can be spotted without separate manual recursion testing. Open live surface
Surface: tls-expiry-monitor Improvement: added live OCSP stapling and Must-Staple auditing across resolved endpoints by probing stapled OCSP responses during the TLS handshake and parsing TLS Feature coverage from the served leaf certificate Impact: each run now exposes measurable stapled-versus-unstapled endpoint counts, OCSP response-status coverage, stapling state variants, and Must-Staple coverage so revocation posture can be verified directly at the serving edge instead of inferred only from published OCSP URLs. Open live surface
Surface: dns-leak-test Improvement: added dual-provider metadata consensus for both the public IP path and detected resolver path using ip-api plus ipwho.is, with confidence grading and softer mismatch scoring when providers drift Impact: each run now exposes 2-provider country and ASN consensus for both sides and is expected to cut false leak alerts caused by single-provider geolocation or ASN drift while showing clear metadata-confidence evidence.
Surface: spf-checker Improvement: added a flattened SPF publishing planner that converts the expanded live authorization graph into a copy-ready ip4 or ip6 record, estimates TXT size, flags 255-plus and 450-plus character risk, and suggests exact TXT string split chunks Impact: each run now exposes 1 deployable flattened SPF draft plus measurable token count, character length, chunk count, and uncovered A or MX IP carryover so operators can move over-limit SPF policies toward zero DNS lookup dependence without manual flattening or TXT split math. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-31 17:57 UTC and 2026-03-31 19:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: reverse-dns Improvement: added reverse-zone DNSSEC auditing that checks DS delegation, DNSKEY presence, KSK and ZSK split, and algorithm visibility for each discovered reverse zone Impact: each run now exposes measurable signed, unsigned, and incomplete reverse-zone DNSSEC counts plus live key and algorithm evidence so PTR trust can be evaluated without separate DS or DNSKEY dig queries. Open live surface
Surface: ipv6-checker Improvement: added browser-race style IPv4-versus-IPv6 winner analysis that runs paired provider races and reports which family wins, ties, or succeeds alone per round Impact: each run now exposes 6 paired first-connection race outcomes plus clear IPv4-win, IPv6-win, tie, and family-only totals so dual-stack users can see expected browser path preference without manually comparing separate latency tables.
Surface: whois-lite Improvement: added RDAP lifecycle freshness auditing with renewal-window, last-change age, transfer recency, RDAP refresh age, reinstantiation visibility, and deletion-event signals Impact: each run now exposes 8 concrete lifecycle signals plus a healthy-watch-high-risk verdict so renewal urgency, stale registration metadata, and recent ownership or recovery events can be triaged without manual RDAP event parsing. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-31 13:57 UTC and 2026-03-31 15:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: dnssec-validator Improvement: added live negative-answer DNSSEC proof auditing that queries a random nonexistent hostname per resolver and inspects NXDOMAIN authority data for NSEC or NSEC3 evidence, AD visibility, and authority-section type coverage Impact: each run now exposes measurable resolver-level NSEC and NSEC3 proof counts plus direct NXDOMAIN proof visibility so authenticated denial-of-existence can be checked on the real negative-answer path instead of inferred only from apex metadata.
Surface: port-checker Improvement: added live HTTP response auditing on web ports with status line, redirect target, HTTPS-upgrade visibility, HSTS presence, server header capture, and content-type evidence Impact: each run now exposes measurable HTTP status, redirect, HTTPS-upgrade, HSTS, and server-header counts so web-service posture can be triaged directly from the port scan without separate HTTP header follow-up. Open live surface
Surface: website-pagespeed Improvement: added a cache TTL efficiency audit that classifies Lighthouse cache findings into short-cache, uncacheable, and long-cache asset buckets with host-level flagged-byte visibility and median cache-lifetime reporting Impact: each run now exposes measurable flagged-asset count, flagged-byte volume, host spread, uncacheable count, and median TTL so repeat-visit browser caching gaps can be triaged without manual Lighthouse JSON parsing. Open live surface
Surface: http-headers Improvement: added rate limit surface analysis that normalizes modern RateLimit headers, legacy X-RateLimit families, Retry-After pacing, reset timing, and quota utilization into one audit panel Impact: each run now exposes up to 11 concrete quota telemetry signals with utilization and pacing evidence so API throttling posture can be checked without separate manual header parsing. Open live surface
Surface: security-headers-score Improvement: added HSTS preload readiness auditing that checks final HTTPS status, max-age, includeSubDomains, preload token, and a dedicated preload verdict with scoring impact Impact: each run now exposes 5 concrete HSTS preload signals and removes the manual browser preload checklist for 100% of analyzed URLs. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-31 09:57 UTC and 2026-03-31 11:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: redirect-checker Improvement: added redirect canonicalization intent analysis that classifies each hop as HTTPS upgrade or downgrade, WWW or apex normalization, cross-host shift, port change, trailing slash cleanup, index-file cleanup, path case normalization, path rewrite, path expansion, or path shortening with a dedicated summary and per-hop labels Impact: each run now exposes measurable canonicalization counts across 13 rewrite patterns so SEO, migration, and routing teams can see exactly what each redirect hop is doing without manual URL-diff inspection. Open live surface
Surface: traceroute-viewer Improvement: added hop address-scope auditing that classifies each visible hop as public, private RFC1918, CGNAT, unique-local IPv6, link-local, transition, loopback, documentation, or other special-use space with a dedicated signal panel and per-hop scope notes Impact: each run now exposes measurable non-public-hop, CGNAT-hop, first-public-hop, and last-non-public-hop visibility so nested routing, ISP carrier NAT, and legacy tunnel paths can be diagnosed without separate manual IP-range checks. Open live surface
Surface: dns-lookup Improvement: added DNSSEC and rollover record support for DS, DNSKEY, CDS, and CDNSKEY with parsed key-role and algorithm visibility plus a dedicated audit table Impact: each run now exposes measurable DS, DNSKEY, CDS, and CDNSKEY coverage with KSK-like versus ZSK-like split and algorithm counts so live DNSSEC delegation and rollover readiness can be checked without separate raw dig queries. Open live surface
Surface: cidr-subnet-calculator Improvement: added explicit IPv4 and IPv6 start-end range analysis with smallest-covering CIDR output plus exact CIDR cover decomposition Impact: each run now turns a raw IP range into 1 summary CIDR and the exact block list needed to represent it without manual binary subnet math or separate range-to-CIDR tools. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-31 05:57 UTC and 2026-03-31 07:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: user-agent-analyzer Improvement: added reduced UA detection with browser identity recovery from Client Hints and live runtime signals Impact: each run now exposes measurable UA-reduction confidence plus recovered browser version and platform-detail evidence so frozen Chromium UA strings can be separated from full-fidelity identities without separate manual Client Hints inspection. Open live surface
Surface: ip-reputation-lookup Improvement: added live abuse mailbox deliverability validation that checks whether published RDAP abuse contact domains actually accept mail via MX, implicit MX, or Null MX Impact: each run now exposes measurable abuse-mail-reachable, abuse-mail-unreachable, and abuse-Null-MX endpoint counts so published-but-undeliverable abuse contacts can be spotted without separate MX follow-up. Open live surface
Surface: cdn-waf-detector Improvement: added live edge network ownership auditing that enriches each forced endpoint probe with ASN, network owner, and country evidence and flags mixed-ownership edge rollouts across the tested IP set Impact: each run now exposes measurable tested-edge ASN and owner consistency so ambiguous header-only CDN or WAF detections can be cross-checked against real edge network footprint in the same report. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-31 01:57 UTC and 2026-03-31 03:57 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: http2-http3-checker Improvement: added active Alt-Svc authority verification that parses advertised h3 authorities and ports, safely probes up to 3 public advertised Alt-Svc targets, and reports whether each advertised authority actually negotiates HTTP/3 Impact: each run now turns HTTP/3 Alt-Svc hints into measurable verified-versus-failed advertised-authority evidence across up to 3 advertised targets, reducing false confidence from header-only h3 advertising when the advertised authority or port does not actually serve HTTP/3.
Surface: dns-propagation Improvement: added modern DNS record propagation support for HTTPS, SVCB, CAA, and SOA plus canonical answer normalization for service-binding parameters, TTL-bearing SOA fields, and CAA values Impact: each run now supports 4 additional high-value DNS record workflows and reduces false propagation drift from parameter-order or formatting differences when comparing modern HTTPS or SVCB answers across resolvers. Open live surface
Surface: tls-checker Improvement: added direct IP endpoint support with optional SNI and hostname-match override so certificates can be checked against origin IPs, load balancer addresses, and non-DNS test endpoints while still validating the intended hostname Impact: each run now supports a clear new origin-IP verification workflow and exposes measurable direct-IP versus hostname-target context with explicit SNI basis, removing the separate openssl s_client plus manual hostname check step for this common TLS debugging case.
Surface: robots-sitemap-validator Improvement: added live hreflang auditing on sampled sitemap URLs to detect missing self-references, duplicate language codes, invalid alternate targets, x-default gaps, and cross-host alternates Impact: each run now exposes measurable hreflang cluster counts and sample-level alternate evidence so multilingual sitemap issues can be spotted without separate page-source checks.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-30 21:53 UTC and 2026-03-30 23:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: bulk-dns Improvement: added bulk HTTPS service binding auditing that parses HTTPS RR records for ALPN, alias-mode, ECH, and IPv4 or IPv6 hints across every checked domain Impact: each run now exposes measurable HTTPS-RR, ALPN, ECH, alias-mode, and address-hint coverage counts so modern HTTP endpoint rollout gaps can be spotted across up to 100 domains without separate dig HTTPS follow-up. Open live surface
Surface: reverse-ip-lite Improvement: added live-site clustering that groups sampled domains by final registrable root with page-title fallback so aliases, mirrors, and tenant variants collapse into shared site clusters instead of looking like separate properties Impact: each run now exposes measurable live-site-cluster, multi-domain-cluster, clustered-domain, and largest-cluster counts so reverse-IP noise from duplicate live sites is reduced into actionable grouped evidence. Open live surface
Surface: ip-location-lookup Improvement: added optional reference-target comparison that resolves a second IP, hostname, or URL and measures closest, median, P90, and farthest target-to-reference geolocation distance with same-city, same-country, and same-ASN overlap verdicts Impact: each run now supports a clear origin-vs-edge or user-vs-service workflow with measurable cross-target distance bands and overlap counts, removing separate manual geo comparison steps. Open live surface
Surface: geo-latency-estimator Improvement: added dual-provider geolocation consensus using ip-api and ipwho.is with per-endpoint country alignment, coordinate-drift distance, provider evidence, and explicit location-confidence grading Impact: each run now exposes measurable source and target geo-confidence plus per-endpoint coordinate drift in km so location-based RTT estimates can be trusted or discounted without separate geo cross-checking.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-30 17:53 UTC and 2026-03-30 19:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: email-deliverability-check Improvement: added DKIM selector strength auditing that classifies common selectors by key type, estimated key size, revoked status, and testing-mode flags with a dedicated selector-strength table and summary check Impact: each run now exposes measurable strong, weak, revoked, and Ed25519 selector counts so weak DKIM signing posture can be spotted without separate key parsing or DNS follow-up. Open live surface
Surface: dmarc-checker Improvement: added a recommended fixes table with ready-to-publish DMARC and external reporting authorization TXT examples generated from the live lookup Impact: turns each weak or misconfigured DMARC result into immediate copy-ready DNS actions, reducing manual remediation drafting from multiple steps to 0 for the common fix paths. Open live surface
Surface: webrtc-leak-test Improvement: added multi-probe exposure persistence auditing that classifies leaked public, private, local IPv6, and mDNS candidate addresses as stable, recurring, or transient across the STUN probe set Impact: each run now exposes measurable stable, recurring, and transient leak counts plus per-address STUN recurrence percentages so repeatable WebRTC leaks can be separated from one-off candidate noise without manual probe-by-probe comparison.
Surface: internet-speed-test Improvement: added burst-versus-sustained throughput profiling that compares the early transfer window against the sustained final window for both download and upload, with peak headroom and hold-up verdicts Impact: each run now exposes measurable early-versus-sustained speed change and peak-to-sustained headroom so short burst speed can be separated from long-transfer reality without manual stopwatch sampling. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-30 13:53 UTC and 2026-03-30 15:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: ipv4-checker Improvement: added dual-provider IP metadata consensus using ip-api and ipwho.is with per-IP provider coverage and alignment-versus-drift reporting for country and ASN context Impact: each run now exposes measurable provider-response coverage plus aligned, partial-drift, drifting, and single-provider IP counts so single-source geolocation or ASN misreads can be spotted without separate external IP intelligence cross-checks.
Surface: uptime-response-checker Improvement: added Server-Timing observability that parses live Server-Timing headers across all 5 repeated probes, surfaces per-run metric names, and aggregates per-metric coverage plus avg, min, max, and spread durations Impact: each run now exposes measurable Server-Timing coverage, unique metric-set drift, and backend-timing ranges so cache-versus-origin variability can be spotted without separate header parsing or DevTools inspection. Open live surface
Surface: spf-checker Improvement: added flattened authorization overlap auditing that detects narrower inline CIDRs and resolved A or MX authorization IPs already covered by broader published SPF networks Impact: each run now exposes measurable redundant-inline-network and resolved-IP-covered counts so unnecessary SPF sprawl can be spotted before flattening or cleanup work. Open live surface
Surface: asn-lookup Improvement: added direct ASN input support with RIPE Stat ASN profile and announced-prefix footprint summaries Impact: the tool now supports a clear AS12345 or 12345 lookup workflow and exposes measurable announced-prefix count, IPv4-versus-IPv6 prefix mix, and prefix-length spread without needing a separate sample IP first. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-30 09:53 UTC and 2026-03-30 11:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: cdn-waf-detector Improvement: expanded active edge verification from IPv4-only to mixed IPv4 and IPv6 probing with per-endpoint family labels plus an IPv4-versus-IPv6 rollout verdict that reports provider-signature and challenge-page drift between address families Impact: each run now exposes measurable IPv4-only, IPv6-only, aligned-dual-stack, or family-drift outcomes so split-family CDN or WAF deployments can be spotted without manually comparing separate address-family checks. Open live surface
Surface: mx-lookup Improvement: added live STARTTLS certificate auditing per MX target with hostname-match checks, issuer and subject evidence, expiry-day visibility, and explicit handshake-failure classification Impact: each run now exposes measurable valid-certificate coverage plus hostname-mismatch, expiring-or-expired, and handshake-or-certificate-failure counts so broken inbound mail TLS posture can be spotted without separate SMTP TLS probes. Open live surface
Surface: ns-lookup Improvement: added direct authoritative NS RRset consistency auditing with lame-delegation detection, per-nameserver AA visibility, returned-NS-set evidence, drift details, and latency summary metrics Impact: each run now exposes measurable matching-authority count, lame-or-non-authoritative nameserver count, and RRset-drift evidence so stale or misconfigured delegated nameservers can be spotted without separate dig NS @ns cross-checks. Open live surface
Surface: whois-lite Improvement: added RDAP secureDNS versus live parent DS alignment auditing with delegationSigned visibility, RDAP DS count, algorithm and digest summaries, and mismatch verdicts when registry metadata disagrees with live DNSSEC delegation Impact: each run now exposes measurable parent-DS-versus-RDAP DS counts plus aligned-signed, aligned-unsigned, parent-child-mismatch, child-parent-mismatch, or RDAP-inconsistent outcomes so DNSSEC rollout ambiguity can be spotted without separate RDAP and DS cross-checks. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-30 05:53 UTC and 2026-03-30 07:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: port-range-scanner Improvement: added IPv4-versus-IPv6 exposure drift auditing with per-port family rollout verdicts, family-specific open coverage counts, endpoint family labels, and dual-stack summary totals Impact: each run now exposes measurable aligned, family-drift, IPv4-only, and IPv6-only port counts plus per-port IPv4 and IPv6 open coverage so dual-stack firewall or load-balancer mismatches can be spotted without manually comparing mixed address rows.
Surface: dns-leak-test Improvement: parallelized the 5 EDNS resolver rounds with 3 concurrent workers while preserving per-round evidence order and exposing total probe runtime in the summary Impact: expected to cut typical resolver-test wait time by roughly 40-60% versus the previous fully sequential flow while keeping the same leak classification coverage and round diagnostics.
Surface: ipv6-checker Improvement: added IPv6 competitiveness analysis with per-provider IPv4-versus-IPv6 reliability and median-latency comparison plus a browser-race verdict Impact: each run now exposes measurable provider-level reliability deltas and IPv6-latency gaps so working-but-deprioritized IPv6 paths can be spotted without separate manual dual-stack timing tests.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-30 01:53 UTC and 2026-03-30 03:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: tls-expiry-monitor Improvement: added Certificate Transparency SCT auditing with per-endpoint embedded SCT visibility, SCT-count drift detection, sample CT log IDs, and rollout coverage verdicts across resolved IPs Impact: each run now exposes measurable SCT-visible endpoint count, SCT-count variants, and full-versus-partial CT coverage so incomplete certificate transparency rollout can be spotted without manually opening x509 extension details. Open live surface
Surface: reverse-dns Improvement: added authoritative reverse-zone SOA serial consistency checks across visible nameservers with per-nameserver serial evidence, alignment versus drift verdicts, and partial-response visibility Impact: each run now exposes measurable aligned, drifted, and partial-or-unresponsive reverse-zone counts plus per-IP responding-nameserver and unique-serial totals so out-of-sync PTR authorities can be spotted without separate dig @ns SOA checks. Open live surface
Surface: redirect-checker Improvement: added redirect cacheability auditing with per-hop Cache-Control, Expires, cacheable-versus-non-cacheable classification, TTL visibility, and high-risk cached temporary redirect detection Impact: each run now exposes measurable cacheable permanent, cacheable temporary, high-risk cached temporary, and long-lived redirect counts so sticky misdirects and accidentally cached 302 or 307 responses can be spotted without separate manual header inspection. Open live surface
Surface: tls-checker Improvement: added live OCSP, CRL, and CA issuer endpoint reachability probing with per-endpoint status reporting and aggregate health counts Impact: each run now exposes measurable reachable, failed, and unsupported revocation-endpoint totals so broken certificate support infrastructure can be spotted without separate manual URL checks.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-29 21:53 UTC and 2026-03-29 23:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: http-headers Improvement: added live conditional revalidation auditing that replays ETag and Last-Modified validators against the final URL and reports whether the server answers with 304 Not Modified, 200 OK, or another status Impact: each run now exposes measurable validator replay coverage, conditional HTTP status, and revalidation latency so broken cache-validator handling can be spotted without separate manual curl If-None-Match or If-Modified-Since tests. Open live surface
Surface: website-pagespeed Improvement: added render-blocking resource analysis with per-file and per-host blocking-time breakdowns for mobile and desktop Lighthouse runs Impact: each run now exposes measurable blocking-file count, unique blocking-host count, total estimated render-blocking time, and top-blocker share so CSS and synchronous script paint delays can be triaged without digging through raw Lighthouse audits. Open live surface
Surface: dnssec-validator Improvement: added DNSSEC algorithm posture auditing that classifies DNSKEY and DS algorithm families, DS digest types, KSK-versus-ZSK role separation, deprecated SHA-1 carryover, and parent-child algorithm mismatches Impact: each run now exposes measurable KSK, ZSK, deprecated-signing, SHA-1-DS, and algorithm-mismatch counts so stale parent anchors and legacy DNSSEC posture can be spotted without manually decoding flags and algorithm numbers.
Surface: cidr-subnet-calculator Improvement: added native IPv6 compare-target overlap and membership auditing plus smallest-covering-supernet planning for pasted IPv6 hosts and CIDRs Impact: each run now exposes measurable inside, disjoint, contained, supernet, and overlap counts for IPv6 target lists and returns 1 aggregate covering IPv6 CIDR so IPv6 subnet-fit and route-summary checks no longer require manual prefix math. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-29 17:53 UTC and 2026-03-29 19:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: port-checker Improvement: upgraded explicit-TLS auditing on FTP, SMTP, submission, POP3, and IMAP so the checker now attempts AUTH TLS, STARTTLS, or STLS handshakes and inspects the upgraded certificate instead of only reporting that upgrade support was advertised Impact: each run now exposes measurable upgraded-TLS-certificate verification count plus hostname-mismatch and certificate-expiry evidence on ports 21, 25, 110, 143, and 587 so false confidence from STARTTLS-advertised-only services is reduced to 0 for successfully upgraded endpoints. Open live surface
Surface: dns-lookup Improvement: added common SRV service discovery auditing for SIP, submission, autodiscover, XMPP, CalDAVS, and CardDAVS with per-service record counts, target hosts, ports, fallback visibility, and detailed priority or weight evidence Impact: each run now checks 9 common SRV service labels and exposes measurable published-service, unique-target, unique-port, and secure-port-service counts so service-discovery DNS gaps can be spotted without separate manual SRV queries. Open live surface
Surface: traceroute-viewer Improvement: added latency accumulation profiling that buckets positive hop-to-hop RTT growth into access-edge, mid-mile, and far-edge route zones with dominant-zone verdicting and targeted fix guidance Impact: each run now exposes measurable positive-RTT-growth totals, per-zone shares, and dominant-zone percentages so users can tell whether latency builds near the user, in transit, or near the destination without manually summing hop deltas. Open live surface
Surface: http2-http3-checker Improvement: added address-family rollout classification that distinguishes dual-stack consistent support from IPv4-only, IPv6-only, family-drift, and single-family partial rollouts for HTTP/2 and HTTP/3 Impact: each run now exposes 2 explicit family-level rollout verdicts so users can spot why IPv4 and IPv6 visitors may negotiate different protocol versions without manually comparing endpoint tables.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-29 13:53 UTC and 2026-03-29 15:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: user-agent-analyzer Improvement: added fingerprinting exposure auditing that scores visible runtime and Client Hints signal categories plus high-entropy values like full browser versions, platform version, CPU architecture, bitness, device model, language spread, timezone, cores, and memory Impact: each run now exposes measurable visible-signal-category and high-entropy-signal counts with a low, moderate, or high exposure verdict so fingerprintability can be judged without manually interpreting raw navigator and Client Hints data. Open live surface
Surface: security-headers-score Improvement: added dedicated Content-Security-Policy risk auditing with unsafe-inline, unsafe-eval, wildcard, insecure http:, data:, and blob: source visibility plus missing object-src, base-uri, and framing-control checks Impact: each run now exposes measurable CSP danger counts and report-only-only posture so weak CSP deployments can be triaged without manually parsing policy directives. Open live surface
Surface: bulk-dns Improvement: added batch DNSSEC posture auditing with DS, DNSKEY, and RRSIG visibility plus per-domain verdicts for delegated-and-signed, partial, DNSKEY-without-DS, island-or-stale-parent, or unsigned states Impact: each run now exposes measurable DNSSEC chain-visible, partial-visibility, DNSKEY-without-DS, island-or-stale-parent, and no-DNSSEC domain counts so signed delegation gaps can be spotted across up to 100 domains without separate DNSSEC lookups. Open live surface
Surface: robots-sitemap-validator Improvement: added sitemap sample canonical auditing that extracts rel=canonical from live pages, resolves relative canonicals, and classifies each sampled URL as self-aligned, missing, mismatch, invalid, or cross-host Impact: each run now exposes measurable self-canonical, missing-canonical, mismatch, and cross-host-canonical sample counts so sitemap-to-canonical drift can be spotted without manually opening sampled pages.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-29 09:53 UTC and 2026-03-29 11:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: reverse-ip-lite Improvement: added co-hosting confidence classification that combines forward DNS status, live web posture, and ASN continuity into high, medium, low, or unknown verdicts per returned domain Impact: each run now exposes measurable high-confidence active co-host count, medium-confidence count, low-confidence stale-row count, and unknown count so live co-hosts can be separated from parked or stale reverse-IP leftovers without manual cross-checking. Open live surface
Surface: dmarc-checker Improvement: added wildcard external-report authorization detection for rua and ruf destinations alongside source-domain authorization mode reporting Impact: external DMARC report targets that authorize via *._report._dmarc are now classified correctly instead of being counted as missing authorization, reducing false-negative authorization alerts for wildcard-enabled providers to 0 for those cases. Open live surface
Surface: email-deliverability-check Improvement: added DMARC external report-destination authorization auditing for rua and ruf mailto targets with per-destination authorization host, TXT evidence, and same-domain versus external classification Impact: each run now exposes measurable authorized-versus-unauthorized external DMARC report destination counts so silent aggregate or forensic report drop-offs can be spotted without separate _report._dmarc TXT checks. Open live surface
Surface: webrtc-leak-test Improvement: added host-candidate masking analysis with fully-masked, partially-masked, and unmasked verdicts plus raw-local-IP and mDNS coverage metrics Impact: each run now exposes measurable raw private IPv4 host count, raw local IPv6 host count, mDNS-masked host count, and masking coverage percentage so partial browser privacy masking is visible without manually diffing ICE candidates.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-29 05:53 UTC and 2026-03-29 07:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: ip-reputation-lookup Improvement: added live RPKI route-validation checks per resolved endpoint with origin ASN, validated prefix, route-validity details, and cross-endpoint RPKI drift verdicting Impact: each run now exposes measurable RPKI valid, invalid, not-found, and unknown endpoint counts so route-origin trust gaps can be spotted without a separate BGP or RPKI lookup. Open live surface
Surface: ip-location-lookup Improvement: added dual-provider location disagreement analysis with per-endpoint coordinate-delta distance, chosen-provider visibility, and medium-or-high drift verdicting when ip-api and ipwho.is disagree Impact: each run now exposes measurable provider-geo-drift endpoint count and worst provider delta in km so low-confidence geolocation results can be spotted before acting on a single provider result. Open live surface
Surface: asn-lookup Improvement: added route observability analysis with RIS peer visibility percentages, visible-origin counts, route-object counts, and active-origin mismatch detection per resolved endpoint Impact: each run now exposes measurable full-versus-partial-versus-low visibility counts, average visibility percentage, multi-origin IP count, and origin-mismatch count so weak or unstable global BGP exposure can be spotted without separate RIPE routing-status checks. Open live surface
Surface: dns-propagation Improvement: added authoritative TTL freshness classification that compares each public resolver's dominant TTL against the authoritative median and labels caches as fresh, mid-life, near expiry, or higher-than-authority anomalies Impact: each run now exposes measurable fresh, mid-life, near-expiry, and higher-than-authority resolver counts so cache-age spread and suspicious TTL inflation can be spotted without manual TTL math. Open live surface
Ops update: Recent changes (read-only) monitoring/verification pass completed for My-IP-IS at 2026-03-29 01:53 UTC and 2026-03-29 03:53 Europe/Amsterdam; no substantive change detected in last 4h; no Stripe/product/pricing changes.
Surface: ipv4-checker Improvement: added public IPv4 /24 prefix stability analysis that groups all detected public candidates by network prefix, shows which request signals share the same /24, and classifies the result as single-path, same-prefix rotation, mixed overlap, or cross-prefix drift Impact: each run now exposes measurable unique-public-IPv4 and unique-/24-prefix counts plus shared-prefix group count so simple address rotation can be separated from genuinely different egress networks without manual prefix comparison.
Surface: port-range-scanner Improvement: added per-open-port TLS and STARTTLS posture auditing with certificate subject, issuer, days-left, and hostname-match analysis across scanned endpoints Impact: each run now exposes measurable TLS-capable-open, STARTTLS-ready, hostname-mismatch, and expiring-within-30-days counts so exposed encrypted services and weak mail-upgrade rollout gaps can be spotted without a separate certificate check.
Surface: internet-speed-test Improvement: added directional load-sensitivity analysis that measures loaded latency separately during download and upload phases, identifies which direction causes the larger queueing spike, and classifies the interactive-risk impact Impact: each run now exposes measurable download-loaded and upload-loaded median latency deltas plus a dominant-pressure verdict so bufferbloat can be traced to download saturation, upload saturation, or both without manual side-by-side testing. Open live surface
Surface: uptime-response-checker Improvement: added cache validator and freshness drift auditing with ETag, Last-Modified, Cache-Control, Vary, and Age parsing across repeated probes Impact: each run now exposes measurable validator coverage, ETag and Last-Modified drift, cache-policy drift, stale-by-age run count, and Age spread so inconsistent CDN or edge-cache behavior can be spotted without manual header diffing. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-28 21:53 UTC and 2026-03-28 22:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: mx-lookup Improvement: added MX target alias-compliance auditing that follows live CNAME chains, flags alias loops, shows effective final hosts, and downgrades deliverability posture when MX targets are not direct address-bearing hosts Impact: each run now exposes measurable alias-using MX target count and total alias-hop count so RFC-invalid mail routing setups can be spotted without manual CNAME tracing. Open live surface
Surface: cdn-waf-detector Improvement: added active challenge-page and block-response detection across the final response and forced edge-endpoint probes using body phrase, title, header, and HTTP status signals Impact: each run now exposes a measurable challenged-edge count plus low, medium, or high confidence so CDN presence can be separated from a live WAF or bot-challenge response without manual page inspection. Open live surface
Surface: geo-latency-estimator Improvement: added a workload readiness planner that maps estimated best, typical, and congested RTT into competitive gaming, voice or video calls, remote desktop or SSH, and web or API verdicts with explicit latency-budget headroom Impact: each run now exposes 4 measurable use-case verdicts plus best, typical, and congested headroom against 4 latency budgets so users can judge interactive fit without translating raw RTT by hand.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-28 17:53 UTC and 2026-03-28 18:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: spf-checker Improvement: added flattened SPF authorization-surface auditing that expands the live SPF graph into explicit ip4 and ip6 networks plus resolved A and MX sender IPs, with widest-prefix and duplicate-network collapse visibility Impact: each run now exposes measurable authorized IPv4 and IPv6 network counts, wide-network entry counts, duplicate-network collapse count, and resolved A/MX sender IP totals so overly broad sender allowance can be spotted without manual SPF flattening. Open live surface
Surface: dns-leak-test Improvement: added resolver network-prefix diversity analysis with IPv4 /24 and IPv6 /48 grouping, family mix visibility, and shared-prefix verdicting across all successful rounds Impact: each run now exposes measurable unique-prefix count, dominant-prefix share, and shared-prefix-versus-cross-prefix drift so users can distinguish simple resolver IP rotation from true multi-network DNS egress changes without manual prefix comparison.
Surface: reverse-dns Improvement: added reverse-zone nameserver address diversity auditing with per-NS A and AAAA resolution, dual-stack visibility, and IPv4 /24 plus IPv6 /48 concentration analysis Impact: each run now exposes measurable dual-stack-authority, single-stack-only, and low-diversity-prefix counts so weak reverse-DNS delegation resilience can be spotted without separate NS address lookups. Open live surface
Surface: whois-lite Improvement: added internationalized domain name support with Unicode-to-punycode normalization, original-input visibility, and explicit ASCII WHOIS target output Impact: the tool now supports a clear new IDN lookup workflow for domains like bücher.de while exposing both Unicode and ASCII forms so non-ASCII domain checks no longer fail at input validation. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-28 13:53 UTC and 2026-03-28 14:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: ipv6-checker Improvement: added IPv6 /64 prefix stability analysis with per-provider address-versus-prefix comparison, unique interface-ID counts, and explicit stable-prefix versus prefix-churn verdicting across repeated probes Impact: each run now exposes measurable unique-public-IPv6, unique-/64-prefix, and unique-interface-ID counts so privacy-extension address rotation can be separated from VPN path switching or prefix churn without manual IPv6 diffing.
Surface: website-pagespeed Improvement: added Lighthouse page-weight and third-party concentration analysis with per-device resource-type transfer shares, heavy-resource counts, provider main-thread share, and provider transfer totals Impact: each run now exposes measurable total page weight, request count, heavy resource-type count, top resource share, third-party provider count, and top provider main-thread share so slow pages can be triaged faster without exporting Lighthouse JSON. Open live surface
Surface: tls-expiry-monitor Improvement: added cross-endpoint certificate-chain drift analysis with exact chain-profile grouping, chain-length and issuer drift detection, and handshake spread visibility across resolved IPs Impact: each run now exposes measurable unique-chain-profile count, chain-length-variant count, unique-leaf-issuer count, and endpoint handshake spread so inconsistent edge certificate deployment can be spotted without manual per-IP chain comparison. Open live surface
Surface: port-checker Improvement: added implicit-TLS certificate auditing on open HTTPS, SMTPS, IMAPS, and POP3S ports with hostname-match checks, issuer visibility, SAN count parsing, and expiry-day analysis Impact: each run now exposes measurable certificate hostname-mismatch, expiring-within-30-days, and already-expired counts so open encrypted ports can be triaged for certificate drift without separate TLS inspection. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-28 09:53 UTC and 2026-03-28 10:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: security-headers-score Improvement: added browser reporting and telemetry auditing with Report-To, Reporting-Endpoints, NEL, CSP report-only, and COOP report-only parsing plus endpoint-group linkage and same-origin versus cross-origin endpoint analysis Impact: each run now exposes measurable report-group count, unique telemetry endpoint count, same-origin-versus-cross-origin endpoint totals, linked-reporting coverage, and NEL sampling or retention gaps so silent policy-reporting failures can be spotted without manual header and JSON inspection. Open live surface
Surface: dnssec-validator Improvement: added denial-of-existence method auditing with per-resolver NSEC and NSEC3PARAM detection, set hashes, and consensus reporting Impact: each run now exposes measurable NSEC and NSEC3PARAM record counts plus resolver-level method visibility so classic NSEC versus NSEC3-style signing can be distinguished without separate manual queries.
Surface: redirect-checker Improvement: added redirect cookie handoff and hardening auditing with per-hop Set-Cookie parsing, Secure and SameSite=None checks, host-only versus domain-scoped visibility, prefix integrity validation, and cross-host cookie-risk detection Impact: each run now exposes measurable cookie-setting hop counts, secure-versus-insecure cookie totals, host-only-versus-domain-scoped totals, SameSite=None-without-Secure count, and prefix-issue count so redirect login and tracking flows can be triaged without manual Set-Cookie inspection. Open live surface
Surface: http-headers Improvement: added cross-origin isolation and CORS surface auditing with COOP, COEP, CORP, Access-Control-Allow-Origin, credential mode, allowed-method/header counts, exposed-header counts, and cache-variance warnings Impact: each run now exposes measurable allowed-method, allowed-request-header, and exposed-response-header counts plus explicit isolation and CORS risk states so over-broad browser data exposure and incomplete SharedArrayBuffer-ready isolation can be spotted without manual header interpretation. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-28 05:53 UTC and 2026-03-28 06:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: ip-reputation-lookup Improvement: added RDAP ownership and abuse-contact auditing with registry, holder, allocation-type, IP-range, abuse-ready endpoint counts, and holder-drift analysis across resolved endpoints Impact: each run now exposes measurable unique-holder, unique-RIR, and abuse-contact coverage so mixed ownership behind one hostname and missing abuse escalation paths can be spotted without separate RDAP lookups. Open live surface
Surface: user-agent-analyzer Improvement: added live locale and timezone coherence auditing from browser runtime metadata, including timezone name, UTC offset, and language-region mismatch checks Impact: each run now exposes measurable timezone-offset consistency and locale-region drift signals so spoofed browser identity, emulator fingerprints, or remote-session anomalies can be spotted without separate JS timezone inspection. Open live surface
Surface: ns-lookup Improvement: added direct delegated nameserver SOA consistency checks with per-authority AA flag visibility, serial distribution, and nameserver query latency Impact: each run now exposes measurable direct-authority nameserver count, usable authoritative-answer count, unique SOA serial count, drifted nameserver count, and median query time so hidden out-of-sync authorities can be spotted without separate dig @ns checks. Open live surface
Surface: cidr-subnet-calculator Improvement: added native IPv6 CIDR calculation and IPv6 child-subnet split planning with compressed and expanded range visibility Impact: the tool now supports a clear new IPv6 planning workflow by exposing measurable host-bit counts, exact-or-power-of-two subnet size output, and up to 256 generated child IPv6 subnets per run without manual hex math. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-28 01:53 UTC and 2026-03-28 02:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: dns-lookup Improvement: added HTTPS and SVCB record auditing with parsed ALPN, ECH, alias-mode, and address-hint visibility plus automatic DoH fallback when the local resolver cannot return those modern record types Impact: each run now exposes measurable HTTPS-SVCB record count, advertised ALPN set, ECH-enabled count, alias-mode count, and IPv4-versus-IPv6 hint totals so HTTP/3 and service-binding rollout gaps can be spotted without separate dig type65 or DoH checks. Open live surface
Surface: traceroute-viewer Improvement: added distance-versus-latency segment analysis that compares hop-to-hop RTT growth against the geographic fiber floor for each geolocated route segment Impact: each run now exposes measurable geo-comparable segment count, efficient-segment count, inflated-segment count, worst inflation factor, and worst excess RTT so routing detours or queueing can be separated from unavoidable physical distance without manual latency math. Open live surface
Surface: port-range-scanner Improvement: added multi-endpoint open-port overlap analysis with shared-port, exclusive-port, and pairwise overlap scoring across every resolved IP Impact: each run now exposes measurable shared-open and endpoint-exclusive port counts plus per-pair overlap percentages so uneven load-balancer exposure can be separated from consistent edge posture without manual row-by-row comparison.
Surface: robots-sitemap-validator Improvement: added recursive sitemap lastmod freshness auditing with missing, invalid, future-dated, and stale timestamp analysis across sitemap nodes Impact: each run now exposes measurable lastmod coverage and freshness buckets so outdated or opaque sitemap update signals can be spotted without manual XML inspection.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-27 21:53 UTC and 2026-03-27 22:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: dns-propagation Improvement: canonicalized record-answer comparison for TXT, MX, NS, CNAME, and IP literals so resolver format noise no longer counts as propagation drift Impact: expected to cut false mismatch and stale-resolver flags caused by trailing dots, TXT chunk formatting, MX host casing, and IPv6 text style differences across all supported record types. Open live surface
Surface: bulk-dns Improvement: added batch CAA certificate issuance policy auditing with issue, issuewild, iodef, and critical unknown-tag parsing for every checked domain Impact: each run now exposes measurable CAA-present, wildcard-authorized, incident-contact, and critical-unknown counts so certificate issuance guardrails and wildcard readiness can be triaged across up to 100 domains without separate CAA lookups. Open live surface
Surface: tls-checker Improvement: added leaf certificate scope and issuance-policy auditing with wildcard-versus-exact hostname coverage, extended key usage parsing, and full lifetime analysis against the 398-day public TLS baseline Impact: each run now exposes measurable wildcard-name count, exact-name count, maximum name depth, lifetime days, and server-auth visibility so mis-scoped or unusually long-lived certificates can be spotted without separate x509 parsing.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-27 17:53 UTC and 2026-03-27 18:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: reverse-ip-lite Improvement: added current-hosting drift analysis that samples forward-resolving co-hosted domains and compares each domain's live ASN and country against the source reverse-IP host Impact: each run now exposes measurable same-ASN, ASN-drift, same-country, country-drift, unique-ASN, and unique-country counts so stale reverse-IP leftovers can be separated from domains still hosted on the same network without separate IP intelligence lookups. Open live surface
Surface: ip-location-lookup Improvement: added geographic midpoint outlier analysis that measures each resolved endpoint against the shared centroid and flags edge-stray IPs Impact: each run now exposes measurable outlier count plus median and maximum centroid distance so CDN or anycast endpoint drift can be separated from a tight metro cluster without manual map comparison. Open live surface
Surface: geo-latency-estimator Improvement: added a TCP throughput planner that converts estimated path RTT into bandwidth-delay-product window requirements and window-limited throughput caps Impact: each run now quantifies the receive window needed to fill 4 common line rates and the throughput cap imposed by 4 common TCP window sizes so long-distance transfer limits can be estimated without manual RTT math.
Surface: internet-speed-test Improvement: added a transfer time planner that converts measured download and upload throughput into realistic large-file transfer estimates with asymmetry detection Impact: each run now estimates download and upload time for 4 common file sizes and exposes the measured down-vs-up ratio so backup, sync, restore, and large-send planning no longer needs manual Mbps-to-time math. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-27 13:53 UTC and 2026-03-27 14:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: webrtc-leak-test Improvement: changed the ICE probe engine from sequential to concurrent multi-probe execution while keeping per-probe diagnostics Impact: worst-case browser test time drops from about 28 seconds to about 7 seconds across the 4 built-in probes - up to 75% faster with the same leak coverage.
Surface: mx-lookup Improvement: added MX failover resilience analysis that detects duplicate targets, shared priority tiers, sampled IP overlap, and sampled IPv4 /24 plus IPv6 /48 concentration across published MX hosts Impact: each run now exposes measurable unique-target, unique-priority, duplicate-row, shared-prefix, and exact-overlap counts so paper redundancy can be separated from real inbound mail-path diversity without separate manual DNS comparison. Open live surface
Surface: email-deliverability-check Improvement: added recursive SPF DNS lookup-budget analysis with include and redirect expansion trace plus over-limit warnings Impact: each run now exposes a measurable SPF lookup count against the RFC 10-lookup limit so hidden SPF permerror risk can be spotted without separate manual recursion. Open live surface
Surface: uptime-response-checker Improvement: added 5-run response consistency analysis with content-type drift, partial body fingerprint drift, body-size spread, and page-title drift visibility alongside the uptime probe Impact: each run now exposes measurable unique content types, body fingerprints, page titles, and body-size spread so flaky edges, cached error variants, and intermittent maintenance pages can be spotted even when status codes stay green. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-27 09:53 UTC and 2026-03-27 10:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: dmarc-checker Improvement: added authentication readiness checks that discover SPF presence and common DKIM selectors on the sending domain alongside DMARC policy analysis Impact: each run now exposes measurable SPF record status plus common-DKIM-selector coverage across 8 selectors so domains with a DMARC policy but weak underlying alignment signals can be spotted without separate SPF and DKIM lookups. Open live surface
Surface: asn-lookup Improvement: added live BGP announcement visibility analysis that classifies each resolved IP as directly announced, covered by a less-specific route, or not visibly announced, with routed resource and holder evidence Impact: each run now exposes measurable direct-versus-covered-versus-unannounced endpoint counts so hidden route coverage gaps and non-announced targets can be spotted without separate BGP checks. Open live surface
Surface: ipv4-checker Improvement: added live IP metadata enrichment for every detected public header candidate with country, ASN, network, hosting, proxy, and mobile-path divergence analysis Impact: each run now exposes measurable country and network drift plus hosting and proxy flag counts so forged or mixed proxy-path IPv4 evidence can be spotted without separate IP lookups.
Surface: cdn-waf-detector Improvement: blocks localhost, private, reserved, and redirect-chain internal targets before any header or forced-edge probe runs Impact: expected 100% rejection of internal and redirect-to-internal destination checks, reducing SSRF and internal network probing risk across both initial and redirected requests. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-27 05:53 UTC and 2026-03-27 06:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: http2-http3-checker Improvement: blocks localhost/private/reserved targets before protocol probing Impact: expected 100% rejection of internal/private destination checks, reducing SSRF and internal network probing risk.
Surface: dns-leak-test Improvement: added resolver-scenario classification with public-path versus expected-route affinity scoring across the full resolver fleet Impact: each run now exposes measurable public-country, public-ASN, expected-country, and expected-ASN match counts so users can distinguish ISP leakage, stable third-party DNS, and split-DNS rotation without manually interpreting round data.
Surface: spf-checker Improvement: added A, MX, and exists mechanism target health auditing across the expanded SPF graph with per-target DNS resolution status and exchanger reachability evidence Impact: each run now exposes measurable broken-A-MX-exists target counts and partial-or-unresolved mechanism references so hidden SPF authorization drift and delivery failures can be spotted without separate DNS follow-up. Open live surface
Surface: reverse-dns Improvement: added reverse-zone delegation analysis that discovers the authoritative PTR zone, shows visible NS coverage, and exposes SOA serial, refresh, retry, expire, and minimum TTL timers alongside PTR and FCrDNS results Impact: each run now exposes measurable reverse-zone coverage with delegated-zone-found, single-NS-risk, and multi-NS counts so broken PTR hosting and weak reverse delegation can be spotted without separate SOA and NS lookups. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-27 01:53 UTC and 2026-03-27 02:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: ns-lookup Improvement: added SOA timer risk analysis that interprets serial style, refresh, retry, expire, and minimum TTL values into refreshes-per-day, retry-attempt capacity, stale-secondary window, and warning-level operational verdicts Impact: each run now exposes measurable SOA timing capacity and risk signals so slow zone pickup, weak retry cadence, and short stale windows can be spotted without manual RFC math. Open live surface
Surface: whois-lite Improvement: added live registration-versus-delegation nameserver consistency auditing that compares WHOIS or RDAP nameservers against the currently delegated NS set and classifies aligned, partial mismatch, mismatch, live-only, and no-live-delegation-visible states with drift evidence Impact: each run now exposes measurable matched, registration-only, and live-only nameserver counts so stale registrar NS data and delegation drift can be spotted without separate WHOIS and NS cross-checks. Open live surface
Surface: ipv6-checker Improvement: added IPv6 interface identifier privacy analysis that flags EUI-64 style hardware-derived exposure, low-entropy stable patterns, and privacy-randomized temporary-looking interface IDs for every observed public IPv6 address Impact: each run now exposes measurable EUI-64-exposed versus privacy-randomized IPv6 address counts so users can spot privacy-extension gaps without manual interface-identifier inspection.
Surface: tls-checker Improvement: added live trust-chain verification with OpenSSL verify return codes, trusted-versus-untrusted verdicts, and warning extraction for self-signed or incomplete chains Impact: each run now exposes measurable trust status and concrete verification failure reasons so broken certificate paths can be spotted without separate openssl verification commands. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-26 21:53 UTC and 2026-03-26 22:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: redirect-checker Improvement: added per-hop query preservation auditing that classifies preserved, changed, dropped, and added parameters across the redirect chain with parameter-name evidence Impact: each run now exposes measurable query-preserved, query-changed, query-dropped, and query-added hop counts so broken campaign, SSO, and signed-link redirects can be spotted without manual URL diffing. Open live surface
Surface: http-headers Improvement: added response cookie hardening analysis with per-cookie Secure, HttpOnly, SameSite, session-versus-persistent, and __Secure-/__Host- prefix integrity auditing Impact: each run now exposes measurable secure-cookie, HttpOnly, SameSite-missing, and high-risk cookie counts so session hardening gaps can be spotted without manual Set-Cookie review. Open live surface
Surface: user-agent-analyzer Improvement: added live browser runtime capture with navigator and UAData cross-checking for platform, vendor, automation, touch, language, and device metadata against the pasted user agent Impact: each run now adds a third trust score with measurable runtime mismatch evidence so spoofed or automated browser claims can be caught even when the UA string alone looks plausible. Open live surface
Surface: dnssec-validator Improvement: added CDS and CDNSKEY rollover publishing analysis with parent-DS comparison and resolver-consensus checks Impact: each run now exposes published-versus-parent match counts and stale-parent rollover signals so DS update lag can be spotted without separate child-versus-parent DNSSEC checks.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-26 17:53 UTC and 2026-03-26 18:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: cidr-subnet-calculator Improvement: added aggregate covering supernet analysis for mixed IPv4 hosts and CIDRs with exact-versus-lossy summarization, gap detection, and coverage efficiency scoring Impact: each run now exposes the smallest summary route plus extra-address and gap counts so route aggregation risk can be measured without manual binary range math. Open live surface
Surface: port-checker Improvement: added IPv4-versus-IPv6 exposure split analysis per scanned port with dual-stack, IPv4-only, IPv6-only, and closed-on-both classification across resolved endpoints Impact: each run now exposes measurable family-level open counts and imbalanced-port totals so firewall drift and single-stack exposure are visible without manual endpoint comparison. Open live surface
Surface: tls-expiry-monitor Improvement: added leaf certificate lifecycle analysis with age, validity window, renewal-window position, and full presented-chain expiry bottleneck auditing Impact: each run now exposes measurable leaf lifecycle usage plus shortest chain days-left and expiring-or-expired chain certificate counts so renewal risk can be spotted before the leaf certificate is the only thing being watched. Open live surface
Surface: traceroute-viewer Improvement: added geographic route analysis with per-segment distance, visible route spread, long-haul jump detection, and geo backtrack signals relative to the final visible endpoint Impact: each run now exposes measurable geolocated-hop coverage, visible route kilometers, largest hop jump, and backtrack count so hairpinning and wrong-region transit can be spotted without manual map work. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-26 13:53 UTC and 2026-03-26 14:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: dns-lookup Improvement: added nameserver address and glue-risk auditing that checks each returned NS host for A and AAAA reachability, in-bailiwick status, and missing-glue exposure Impact: each run now exposes measurable nameserver coverage with checked-host, dual-stack, in-bailiwick, and missing-glue-risk counts so broken delegations can be spotted without manual NS follow-up. Open live surface
Surface: security-headers-score Improvement: added live CORS exposure audit with risk grading for wildcard or credentialed cross-origin access plus cache-safety checks via Vary: Origin Impact: each run now surfaces measurable CORS risk on the scored endpoint instead of limiting analysis to classic hardening headers only. Open live surface
Surface: dmarc-checker Improvement: added report-destination mail-path validation with MX, Null MX, and implicit-MX checks plus support for DMARC mailto size-limit parsing Impact: each run now exposes measurable mail-ready-versus-Null-MX-versus-no-mail-path counts across unique report destinations so broken DMARC reporting inboxes can be caught before aggregate or forensic reports disappear. Open live surface
Surface: bulk-dns Improvement: added batch DMARC policy parsing and common DKIM selector discovery alongside existing DNS, MX, SPF, and NS checks Impact: each run now exposes measurable DMARC enforced-versus-monitor-only-versus-missing counts plus DKIM-found-versus-missing coverage across up to 100 domains in one pass. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-26 09:53 UTC and 2026-03-26 10:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: robots-sitemap-validator Improvement: added live noindex detection on sampled sitemap URLs by checking meta robots, meta googlebot, and X-Robots-Tag signals Impact: each run now exposes measurable noindex-blocked sample counts so XML-valid sitemaps that list intentionally non-indexable pages can be caught in one pass.
Surface: website-pagespeed Improvement: added actionable Lighthouse issue tables for accessibility, best practices, and SEO on both mobile and desktop Impact: each audit now exposes up to 30 prioritized non-performance findings in one run instead of only category totals. Open live surface
Surface: reverse-ip-lite Improvement: added live web posture sampling that checks up to 12 co-hosted domains for reachable HTML pages, redirects, parking or placeholder signals, non-HTML responses, HTTPS success, and extracted page titles or final URLs Impact: each run now exposes measurable live-site versus parked-or-dead counts so reverse IP results can be triaged into real websites, redirects, and parking noise in one pass. Open live surface
Surface: email-deliverability-check Improvement: added live MTA-STS MX coverage validation that checks whether each published MX host matches at least one policy mx rule and shows per-host match evidence Impact: each run now exposes measurable covered-versus-uncovered MX counts so transport policies that publish MTA-STS but fail to protect all live mail exchangers can be identified in one pass. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-26 05:53 UTC and 2026-03-26 06:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: mx-lookup Improvement: added DANE and TLSA discovery per MX target with usage, selector, matching-type, DNSSEC AD visibility, and owner-name evidence Impact: each run now exposes measurable TLSA coverage across all published MX targets and separates plain STARTTLS-only mail routes from DANE-published deployments in one pass. Open live surface
Surface: http2-http3-checker Improvement: added protocol rollout diagnostics with entry-versus-final classification, per-endpoint IPv4 and IPv6 coverage counts, and explicit hint-only versus redirect-only versus partial-edge verdicts Impact: each run now exposes measurable active-support coverage across up to 4 resolved endpoints and separates rollout drift from mere DNS or Alt-Svc advertising so HTTP/3 and HTTP/2 rollout failures can be triaged in one pass.
Surface: asn-lookup Improvement: added routed-prefix footprint analysis with unique prefix counts, IPv4 versus IPv6 endpoint split, RIR coverage, prefix-length spread, and single-edge versus multi-prefix versus multi-ASN verdicting Impact: each run now exposes measurable route-spread evidence across up to 4 resolved endpoints so CDN and failover topology drift no longer hides behind ASN counts alone. Open live surface
Surface: security-headers-score Improvement: added Permissions-Policy exposure auditing that counts disabled, restricted, wildcard, and remote-origin directives and flags overexposed sensitive browser features Impact: each run now exposes measurable feature-scoping evidence so weak feature allowlists and risky wildcard permissions no longer hide behind a header-present-only pass. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-26 01:53 UTC and 2026-03-26 02:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: webrtc-leak-test Improvement: added per-family HTTP baseline comparison for IPv4 and IPv6 plus local-topology hint analysis from related-address and subnet exposure Impact: each run now separates IPv4 mismatch, IPv6-only exposure, and hidden local network hints into measurable family-level leak signals so split-tunnel and dual-stack VPN leaks no longer hide behind one mixed public IP comparison.
Surface: ip-location-lookup Improvement: added edge-footprint analysis with widest-endpoint distance, geographic midpoint, timezone drift, and per-endpoint network prefix visibility across up to 4 resolved IPs Impact: each run now measures endpoint spread in kilometers and classifies the target as single-endpoint, single-metro, regional, multi-region, or global so CDN and anycast geolocation drift becomes visible without manual map comparisons. Open live surface
Surface: dns-propagation Improvement: added authoritative nameserver baseline checks that query the discovered zone authority directly and compare each public resolver answer against that baseline Impact: each run now exposes authoritative consensus, public-resolver match count, and stale-resolver count so propagation lag can be separated from zone-level inconsistency without manual dig comparisons. Open live surface
Surface: internet-speed-test Improvement: added a household concurrency planner that estimates simultaneous HD video calls, 4K streams, low-latency gaming sessions, backup-heavy devices, and mixed-use headroom using measured download, upload, ping, jitter, loss, and loaded-latency pressure Impact: each run now converts raw speed metrics into 5 concrete parallel-capacity estimates so users can see when upload or latency becomes the real bottleneck before multiple people or devices pile onto the line. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-25 21:53 UTC and 2026-03-25 22:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: ip-reputation-lookup Improvement: added resolved-endpoint reputation drift analysis that compares risk bands, ASN spread, country spread, and hosting or proxy classification across all checked IPs for the same hostname or URL Impact: each run now exposes measurable endpoint-consistency evidence with risk spread, medium-or-higher endpoint count, unique ASN and country counts, and a low-medium-high drift verdict instead of assuming one resolved IP represents the whole target. Open live surface
Surface: user-agent-analyzer Improvement: added Client Hints cross-checking for Sec-CH-UA, platform, mobile, arch, bitness, model, and full-version metadata with structured mismatch scoring against the pasted User-Agent string Impact: each run now validates up to 8 extra browser-supplied identity signals so spoofed Chrome, Edge, Safari, and Firefox claims can surface as measurable UA-versus-Client-Hints drift instead of relying on raw UA text alone. Open live surface
Surface: cdn-waf-detector Improvement: expanded provider coverage with role-aware detection for Bunny CDN, QUIC.cloud, Azure Front Door, Google Cloud CDN or Armor, and StackPath, plus explicit CDN-versus-WAF labeling in the verdict and evidence output Impact: each run now identifies up to 5 additional modern edge providers and shows their likely role directly so CDN-only and WAF-backed setups no longer collapse into one generic provider guess. Open live surface
Surface: dns-leak-test Improvement: added resolver fleet analysis that counts unique resolver IPs, countries, and ASNs across all successful rounds and lists per-resolver share, average latency, and EDNS geo hint Impact: each run now exposes measurable split-DNS evidence with resolver, country, and ASN diversity counts so mixed-provider or cross-country DNS leakage no longer hides behind one dominant resolver.
Surface: ipv4-checker Improvement: added special-use IPv4 range classification that separates RFC1918, CGNAT, loopback, link-local, documentation, multicast, benchmark, and other reserved tokens in header evidence and proxy-chain analysis Impact: each run now exposes measurable per-range token counts and per-signal range-type evidence so private and reserved header contamination no longer collapses into one generic bucket.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-25 13:53 UTC and 2026-03-25 14:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: spf-checker Improvement: added macro-aware SPF path analysis that detects macro-driven mechanisms across the expanded include and redirect graph and classifies sender-dependent versus domain-dependent behavior Impact: each run now exposes measurable macro-token and sender-dependent count evidence so dynamic SPF branches no longer hide behind a static 10-lookup estimate. Open live surface
Surface: reverse-dns Improvement: added PTR hostname sharing analysis that classifies each reverse hostname as dedicated, small shared, or broad shared and shows same-family versus other-family forward coverage Impact: each run now exposes measurable forward-target counts and hostname-sharing risk so generic pooled reverse DNS no longer looks equivalent to a dedicated mail-ready PTR. Open live surface
Surface: port-range-scanner Improvement: added per-port endpoint consistency analysis that classifies each scanned port as consistently open, partial exposure, mixed non-open, or consistently closed across all resolved IPs Impact: each run now exposes measurable open-coverage percentages and cross-endpoint drift evidence so partial load-balancer or CDN exposure no longer requires manual row-by-row comparison.
Surface: geo-latency-estimator Improvement: added route-profile-aware latency modeling that classifies endpoint pairs as metro, domestic, same-continent, or intercontinental and applies routing inflation guidance plus transoceanic risk notes instead of using straight-line distance alone Impact: each run now exposes measurable route class and inflation-factor evidence so long-haul and submarine-like paths no longer look unrealistically similar to regional routes.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-25 09:53 UTC and 2026-03-25 10:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: uptime-response-checker Improvement: added edge endpoint consistency probing that forces direct checks against up to 4 resolved IPs for the same host and reports per-endpoint status, latency, TTFB, and drift signals Impact: each run can now expose partial CDN or load-balancer failures with measurable healthy-endpoint rate, unique-status count, and endpoint latency spread instead of hiding behind repeated same-path checks. Open live surface
Surface: robots-sitemap-validator Improvement: added live sitemap URL sampling that fetches indexed pages from discovered urlset files and flags non-indexable pages, cross-host redirects, and non-HTML landings Impact: each run now verifies up to 6 real sitemap URLs across sampled child sitemaps so broken or off-host sitemap entries become visible without manual spot-checking.
Surface: tls-checker Improvement: added revocation visibility with OCSP stapling availability status, Must-Staple detection, and extracted OCSP, CA issuer, and CRL URLs from the certificate Impact: each run now exposes up to 4 revocation and stapling signals so responders can verify revocation coverage and stapling support posture without separate certificate parsing steps.
Surface: http-headers Improvement: added cache behavior analysis with effective TTL, shared-cache readiness, validator coverage, Vary and Set-Cookie risk checks, and edge-cache policy visibility Impact: each run now exposes up to 10 cache diagnostics plus warning counts so CDN and browser caching misconfigurations can be triaged in one fetch instead of separate header interpretation. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS at 2026-03-25 05:53 UTC and 2026-03-25 06:53 Europe/Amsterdam; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: whois-lite Improvement: added live DNSSEC delegation auditing with DS record discovery, algorithm and digest-type visibility, and signed-vs-unsigned hardening verdicts Impact: each run now exposes measurable DS coverage with live key-tag and digest evidence so unsigned delegation risk is visible without a separate DNSSEC lookup. Open live surface
Surface: reverse-ip-lite Improvement: added registrable-root clustering that collapses repeated subdomains into apex-style root groups with shared-vs-exclusive root counts, largest-cluster visibility, and per-root sample domains Impact: each run now exposes up to 20 root clusters plus 4 new root-level concentration metrics to cut false co-hosting diversity from wildcard or tenant subdomain inflation. Open live surface
Surface: website-pagespeed Improvement: added lab-vs-field drift analysis that compares mobile Lighthouse metrics against Chrome UX Report p75 Core Web Vitals and classifies each comparable metric as aligned or drifting Impact: each run now exposes up to 3 direct lab-vs-real-user verdicts plus aligned, drifting, and missing counts to cut false Lighthouse-only conclusions. Open live surface
Surface: email-deliverability-check Improvement: added MTA-STS policy validation and TLS-RPT reporting checks alongside existing SPF, DMARC, DKIM, and BIMI analysis Impact: each run now validates 3 additional mail transport hardening signals and exposes live MTA-STS policy fetch status plus TLS-RPT rua coverage. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: traceroute-viewer Improvement: added route-loop and detour detection that flags repeated hop IPs plus ASN re-entry after leaving a network, with dedicated loop signal evidence and summary counters Impact: expected to reduce routing-loop and transit-detour triage from manual hop comparison to one run with measurable repeated-hop and ASN re-entry counts. Open live surface
Surface: ipv6-checker Improvement: added IPv6 address-type analysis that classifies observed public IPv6 results as native global, NAT64 synthesized, 6to4, Teredo, IPv4-mapped, or other atypical paths alongside the existing dual-stack probe Impact: expected to reduce IPv6 misdiagnosis from one family-level pass or fail result to one run with explicit transition-mechanism evidence and measurable unique IPv6 type visibility.
Surface: redirect-checker Improvement: added client-side redirect discovery with meta refresh and JavaScript navigation detection alongside standard HTTP Location tracing Impact: expected to reduce missed browser-only redirect paths from 1 blind spot to visible classified hops in one run, with separate HTTP-vs-client redirect counts and explicit redirect evidence. Open live surface
Surface: ns-lookup Improvement: added resolver-path SOA serial consistency checks across system, Google, and Cloudflare with serial distribution, drift detection, and per-resolver timing evidence Impact: expected to reduce hidden DNS propagation and cache-drift triage from separate SOA lookups to one run while exposing measurable unique-serial count, drifting-resolver count, and lookup latency. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: dnssec-validator Improvement: added validating-resolver verdict checks with AD flag, RCODE, answer count, and resolver comment evidence across Cloudflare, Google, and Quad9 Impact: expected to reduce bogus DNSSEC triage from multiple separate resolver tests to one run while exposing measurable validation-consensus and SERVFAIL or no-AD outcomes.
Surface: mx-lookup Improvement: added reverse-DNS trust auditing for sampled MX IPs with PTR discovery, forward-confirmed reverse DNS validation, and dynamic-hostname risk flags Impact: expected to cut mail-host trust triage from separate PTR and forward-DNS checks to one run while exposing measurable forward-confirmed, missing-PTR, and dynamic-risk counts. Open live surface
Surface: cidr-subnet-calculator Improvement: added subnet overlap and membership analysis for pasted IPv4 hosts or CIDRs with equal-contained-supernet-partial-overlap-disjoint verdicts and per-target details Impact: expected to reduce subnet-scope validation from repeated manual comparisons to one run across multiple hosts and ranges while exposing measurable inside-outside and overlap counts. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: tls-expiry-monitor Improvement: added live OCSP and CRL endpoint extraction with revocation URL reachability checks, latency, HTTP status, and final URL evidence Impact: expected to cut certificate incident triage time by exposing whether published revocation infrastructure is reachable in one run instead of requiring separate certificate parsing and manual OCSP or CRL URL testing. Open live surface
Surface: port-checker Improvement: added application-aware service fingerprint hints with TLS or STARTTLS evidence and per-port exposure-risk guidance for open results Impact: expected to reduce first-pass port triage time by turning open-port findings into measurable service detections plus encrypted-ready and cleartext-risk counts in one run. Open live surface
Surface: dns-lookup Improvement: added multi-public-resolver consistency checks for A, AAAA, NS, and MX with per-resolver latency and TTL evidence Impact: expected to cut false-positive DNS interpretations by showing resolver drift in one run and flagging propagation or cache mismatch cases that are invisible from a single-system lookup. Open live surface
Surface: bulk-dns Improvement: added run-level DNS timing resilience metrics (median, P95, slowest, and slow-domain outlier count at dynamic 95th-percentile-based thresholds) to surface resolver-performance regressions in one post-run summary Impact: expected to cut DNS triage time by highlighting per-batch latency outliers directly and enabling faster identification of domain-level DNS response bottlenecks when checking up to 100 domains. Open live surface
Ops update: Monitoring/verification pass completed for My-IP-IS; no substantive tool/product changes in last 4h and no Stripe/product/pricing changes.
Surface: port-range-scanner Improvement: added open-port exposure risk intelligence with per-result Critical, High, Medium, or Info classification and port-specific remediation guidance plus risky-open summary counters Impact: expected to reduce first-pass exposed-service triage time by highlighting critical and high risk open ports directly in one run and quantifying risky exposure as Critical/High counts.
Surface: asn-lookup Improvement: added geo-divergent ASN detection that flags ASNs resolving across multiple countries in one run and reports impacted IP count plus country spread evidence Impact: expected to reduce anycast and CDN route-misread triage time by exposing cross-country ASN spread directly instead of manual per-IP country comparison. Open live surface
Surface: robots-sitemap-validator Improvement: added recursive sitemap tree validation that follows sitemapindex child loc entries with per-node HTTP or XML checks, cross-host detection, and aggregate URL-entry counting up to 16 sitemap nodes in one run Impact: expected to reduce false sitemap healthy conclusions by exposing broken child sitemap nodes and nested coverage gaps that top-level sitemap.xml checks miss.
Surface: ipv4-checker Improvement: added proxy-chain diagnostics for X-Forwarded-For and Forwarded with client-side and edge-side candidate extraction, chain depth, and private or invalid token integrity checks Impact: expected to reduce proxy misattribution and spoof-triage time by exposing up to 2 chain perspectives and measurable chain contamination counts in one run.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: dns-propagation Improvement: added resolver TTL intelligence with per-round TTL range capture, per-resolver dominant-answer TTL median, consensus TTL median, and estimated max convergence window derived from current resolver TTLs Impact: expected to reduce DNS change ETA guesswork by exposing measurable cache-expiry windows in one run and improving propagation triage speed when answers are mismatched. Open live surface
Surface: security-headers-score Improvement: added cross-origin isolation readiness audit with COOP and COEP policy validation, explicit readiness verdict, and targeted remediation notes Impact: expected to reduce misconfigured isolation deployments by exposing missing or weak COOP and COEP combinations in one run and improving SharedArrayBuffer readiness triage speed. Open live surface
Surface: dmarc-checker Improvement: added nearest-parent DMARC policy discovery for subdomains with effective-policy host and domain visibility, inheritance depth, and inherited-policy risk findings when sp is not explicit Impact: expected to reduce false no-DMARC conclusions for subdomains by recovering inherited policy context in one run and surfacing measurable parent-depth evidence for faster remediation. Open live surface
Surface: dnssec-validator Improvement: added DNSKEY RRSIG validity-window analysis across Cloudflare, Google, and Quad9 resolvers with per-resolver counts for valid, expired, and not-yet-valid signatures plus earliest-expiry visibility Impact: expected to reduce false DNSSEC healthy conclusions by exposing signature-timing failures in one run and surfacing expiry risk within a 72h warning window.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: http2-http3-checker Improvement: added resolved-endpoint protocol drift analysis that probes up to 4 A/AAAA IPs with forced-host handshakes and reports per-IP HTTP/2 and HTTP/3 negotiation plus latency evidence Impact: expected to reduce false single-endpoint protocol conclusions by exposing partial edge support and measurable endpoint-level drift in one run.
Surface: cdn-waf-detector Improvement: added active endpoint consistency probing that forces direct checks against up to 4 resolved edge IPs with per-IP HTTP status, probe latency, and detected provider set, plus drift verdicting when provider signatures differ across endpoints Impact: expected to reduce false single-endpoint CDN or WAF conclusions by validating provider fingerprints across multiple live edge IPs in one run and exposing measurable per-endpoint divergence evidence. Open live surface
Surface: webrtc-leak-test Improvement: added multi-STUN diagnostics with per-probe ICE timing and NAT mapping stability analysis (consistent endpoint vs port-varying or multi-egress behavior) plus public-IP mismatch evidence Impact: expected to improve leak-triage accuracy by validating endpoint behavior across 3 STUN probes instead of a single probe and exposing measurable per-probe candidate and timing diagnostics in one run.
Surface: reverse-dns Improvement: added PTR mail-posture intelligence with multi-resolver PTR count analysis, dynamic-hostname risk detection, and per-IP SMTP trust grading alongside FCrDNS evidence Impact: expected to reduce mail-reputation triage time by turning PTR ambiguity and dynamic naming signals into explicit good-warning-risk outcomes in one run. Open live surface
Surface: internet-speed-test Improvement: added use-case readiness analysis that maps measured download, upload, ping, jitter, loss, and loaded-latency bufferbloat into workload verdicts for video calls, cloud gaming, 4K streaming, and cloud backup Impact: expected to reduce interpretation time by converting 6 raw metrics into 4-5 actionable workload readiness outcomes in a single run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: website-pagespeed Improvement: added automatic CrUX origin-level fallback when URL-level field data is missing, plus explicit field-data coverage visibility and CWV good-metrics pass summary Impact: expected to reduce no-data Core Web Vitals verdicts by recovering p75 field metrics from origin scope and showing measurable CWV pass coverage in one run. Open live surface
Surface: whois-lite Improvement: added nameserver address diversity auditing with live A and AAAA resolution checks per nameserver plus IPv4 /24 and IPv6 /48 concentration detection and unresolved nameserver risk scoring Impact: expected to reduce DNS resilience blind spots by exposing nameserver resolution failures and single-prefix concentration in one lookup with measurable resolved-nameserver and prefix-diversity counts. Open live surface
Surface: ip-location-lookup Improvement: added dual-provider consensus geolocation per endpoint using ip-api plus ipwho.is with agreement scoring across country, city, ASN, and coordinates plus confidence grading and low-consensus endpoint counting Impact: expected to reduce single-provider geolocation misclassification risk by validating up to 4 agreement signals per endpoint and surfacing low-consensus endpoints directly in one run. Open live surface
Surface: user-agent-analyzer Improvement: added browser-token version extraction and cross-family consistency auditing with major-version drift checks (Edge vs Chrome), synthetic multi-browser token detection, and Safari Version-token integrity validation Impact: expected to improve spoofed UA detection accuracy by surfacing token-composition anomalies in one run with explicit version evidence instead of relying on generic mismatch hints. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: email-deliverability-check Improvement: added BIMI readiness auditing with DMARC eligibility gating, default._bimi TXT parsing, and live HTTPS logo URL reachability plus content-type validation Impact: expected to reduce brand-indicator rollout failures by surfacing BIMI policy blockers and logo-hosting issues in one run with explicit HTTP and MIME evidence. Open live surface
Surface: tls-checker Improvement: added certificate-chain public key strength auditing with per-certificate algorithm and key-size analysis plus weak-key detection and protocol exposure risk classification based on legacy versus modern TLS support Impact: expected to reduce hidden weak-crypto risk by surfacing weak chain keys and legacy TLS enablement in one run with explicit weak-key counts and protocol risk verdicts.
Surface: spf-checker Improvement: added recursive include and redirect target health validation that checks each referenced domain for missing or multiple SPF records and surfaces target-level status with evidence Impact: expected to reduce hidden SPF PermError risk by exposing broken include or redirect dependencies in one run with explicit affected-target counts. Open live surface
Surface: dmarc-checker Improvement: added multi-resolver DMARC TXT validation with system DNS plus Cloudflare and Google DNS-over-HTTPS, including resolver consensus and mismatch evidence in the report Impact: expected to reduce resolver-specific false negatives by validating DMARC visibility across up to 3 independent resolver paths in one run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: geo-latency-estimator Improvement: added active TCP RTT baseline probing from the My-IP-Is server with per-target estimate-vs-measured delta analysis across resolved endpoints Impact: expected to reduce geo-only latency guesswork by adding measurable median RTT evidence and model deviation visibility per target in one run.
Surface: mx-lookup Improvement: added MTA-STS MX policy coverage validation that checks whether each published MX host matches at least one policy mx pattern and flags uncovered targets Impact: expected to reduce false mail transport security confidence by exposing partial MTA-STS enforcement coverage as a measurable matched-target ratio in one run. Open live surface
Surface: bulk-dns Improvement: added authoritative nameserver diversity audit that resolves NS host IPs and flags IPv4 /24 and IPv6 /48 concentration risk plus unresolved NS host evidence per domain Impact: expected to reduce DNS failover blind spots by surfacing single-network nameserver concentration and resolution gaps across up to 100 domains in one run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: uptime-response-checker Improvement: added per-run network timing breakdown with cURL total, TTFB, server processing time, DNS lookup, TCP connect, and TLS handshake metrics plus run-level averages for TTFB and server time Impact: expected to reduce root-cause triage time by separating network path latency from server response latency in one run instead of relying on a single total response metric. Open live surface
Surface: http-headers Improvement: added redirect security-header drift analysis that compares first-hop versus final-hop values for each tracked security header and flags removed, changed, or added headers with a chain risk level Impact: expected to reduce false confidence on redirecting sites by exposing security header degradation across hops in one run instead of checking only the final response. Open live surface
Surface: ip-reputation-lookup Improvement: upgraded IP metadata enrichment to query ip-api and ipwho.is in one run with provider consensus checks for ASN, country, hosting, and proxy or VPN classification plus a side-by-side provider comparison table Impact: expected to reduce single-provider misclassification risk by surfacing cross-provider mismatches directly and increasing reputation confidence visibility from 1 source to up to 2 sources per checked IP. Open live surface
Surface: dns-leak-test Improvement: expanded resolver analysis to 5 rounds with dominant-share classification and full per-round resolver evidence including IP, country, ASN, and latency Impact: expected to reduce false leak alarms on rotating resolvers by distinguishing fixed, primary-with-rotation, and high-rotation DNS patterns in one run.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: reverse-ip-lite Improvement: added cross-IP overlap matrix with Jaccard similarity plus all-IP shared-domain and exclusive-domain counters for multi-endpoint targets Impact: expected to cut co-hosting drift triage time by showing whether resolved endpoint IPs share the same domain pool in one run instead of manual side-by-side comparison. Open live surface
Surface: ipv6-checker Improvement: added DNS64 and NAT64 detection using multi-provider DNS-over-HTTPS checks for synthesized AAAA responses on ipv4only.arpa with extracted /96 prefix evidence Impact: expected to reduce false IPv6-only misdiagnosis by distinguishing native dual-stack from IPv6-only plus NAT64 environments in one run.
Surface: dns-lookup Improvement: added DNS posture insights with zone-authority checks, dual-stack readiness summary, TTL spread analysis, and MX target address reachability audit for up to 5 exchangers Impact: expected to reduce DNS and mail-routing triage time by surfacing unresolved MX targets and key configuration gaps in a single lookup run. Open live surface
Surface: ns-lookup Improvement: added NS resilience audit with in-bailiwick glue-risk detection, dual-stack distribution analysis, and IPv4 /24 plus IPv6 /48 prefix concentration checks across authoritative nameservers Impact: expected to reduce DNS delegation outage triage time by exposing missing glue-like records and nameserver network concentration risks in a single lookup run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: ipv4-checker Improvement: added per-signal token integrity analysis that separates public IPv4, private or reserved IPs, and malformed tokens with anomaly-aware spoof risk scoring and integrity verdicts Impact: expected to reduce false trust in forwarded headers by exposing header contamination patterns and suspicious token mixes in one run.
Surface: traceroute-viewer Improvement: added per-hop ASN enrichment with automatic transit handoff timeline and ASN transition scoring integrated into findings and route-quality metrics Impact: expected to reduce peering-boundary root-cause time by surfacing exact ASN change hops and transition count in one run instead of manual per-hop ownership lookups. Open live surface
Surface: redirect-checker Improvement: added redirect method safety analysis that classifies each hop as POST rewrite-risk (301/302/303) or method-preserving (307/308) and adds chain-level risk verdicts with hop counts Impact: expected to reduce form-submit and API redirect breakage triage time by surfacing method-loss risk in one run instead of manual status-code interpretation per hop. Open live surface
Surface: robots-sitemap-validator Improvement: added robots Sitemap directive integrity audit that normalizes and validates up to 8 declared sitemap URLs with live HTTP reachability, XML root validation, entry counts, and cross-host or cross-scheme risk detection Impact: expected to reduce missed indexing breakages by surfacing broken or risky robots-declared sitemap targets in a single run instead of requiring separate manual checks per directive.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: cidr-subnet-calculator Improvement: added VLSM host-group planner that accepts comma-separated required host counts and auto-allocates best-fit child subnets in descending order with overflow detection and per-group waste visibility Impact: expected to reduce manual subnet design work from multi-step spreadsheet planning to one run by generating right-sized CIDR allocations, usable ranges, and leftover-capacity evidence in a single output. Open live surface
Surface: tls-expiry-monitor Improvement: added per-endpoint TLS crypto strength analysis with public-key algorithm and key-size checks plus weak-signature detection (SHA-1 or MD5) and endpoint-level weak-crypto evidence in summary and probe table Impact: expected to reduce missed weak-certificate deployments across multi-endpoint hosts by surfacing weak key or signature posture in every successful endpoint handshake run. Open live surface
Surface: http2-http3-checker Improvement: added HTTPS DNS record ALPN hint analysis (type HTTPS) and merged it with Alt-Svc and active protocol probes to classify DNS-advertised versus actively negotiated HTTP/2 and HTTP/3 support Impact: expected to reduce false protocol-not-supported conclusions on edge configurations where h2 or h3 is advertised via DNS or Alt-Svc but not negotiated on the tested request path.
Surface: port-checker Improvement: added automatic per-endpoint timeout retry with endpoint-level stability classification (open, intermittent-open, timeout, closed) and attempt-latency evidence for each probe Impact: expected to reduce transient false-closed outcomes on jittery links by rechecking timeout-prone probes once and surfacing intermittent exposure directly in one run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: asn-lookup Improvement: upgraded lookups to run ip-api and ipwho.is in parallel per IP with ASN consensus classification and mismatch evidence in per-IP results Impact: expected to reduce single-provider ASN misclassification risk by surfacing cross-provider ASN disagreements and dual-source coverage counts in one run. Open live surface
Surface: dnssec-validator Improvement: added multi-resolver DNSSEC consistency analysis using Cloudflare, Google, and Quad9 DNS-over-HTTPS with DS and DNSKEY RRset hash comparison and resolver consensus status Impact: expected to reduce resolver-specific false DNSSEC conclusions by surfacing cross-resolver RRset drift and cache inconsistency in a single validation run.
Surface: port-range-scanner Improvement: added lightweight service fingerprinting on open ports with protocol-aware banner probing and per-endpoint service and banner evidence in the result table Impact: expected to reduce manual follow-up verification steps by surfacing probable service type and first-response banner inline for up to 40 open ports per scan.
Surface: dns-propagation Improvement: upgraded propagation checks to run 3 rounds per resolver with dominant-answer aggregation, resolver drift detection, and per-resolver answer stability scoring plus a raw per-round evidence view Impact: expected to reduce single-sample false propagation conclusions by requiring repeated resolver agreement and surfacing transient cache drift in one run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: whois-lite Improvement: added EPP status risk intelligence with transfer-lock visibility and critical lifecycle status detection (pendingDelete, redemptionPeriod, hold, pendingTransfer) integrated into scoring and fix guidance Impact: expected to reduce missed domain hijack and deletion risk signals by surfacing status-derived transfer and lifecycle exposure in one lookup instead of manual EPP status interpretation. Open live surface
Surface: reverse-dns Improvement: added multi-resolver PTR consensus analysis with system resolver plus Google and Cloudflare DNS-over-HTTPS fallback and drift visibility per resolver Impact: expected to reduce resolver-specific false no-PTR outcomes by recovering missing PTR answers and exposing cross-resolver disagreement in one run for faster reverse-DNS reliability triage. Open live surface
Surface: security-headers-score Improvement: added redirect-chain aware scoring with entry-versus-final header drift detection and HTTPS-downgrade penalty logic Impact: expected to reduce false strong-security conclusions on redirecting sites by exposing per-run header continuity risk and downgrade findings in one scan. Open live surface
Surface: internet-speed-test Improvement: added loaded-latency and bufferbloat analysis by sampling latency during download and upload rounds and folding the latency-under-load delta into the premium verdict Impact: expected to reduce false good-network conclusions on congested links by surfacing idle-vs-loaded latency inflation in one run for faster real-time traffic diagnosis. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: geo-latency-estimator Improvement: added an application transaction planner that converts path RTT into estimated cold HTTPS, warm connection, HTTP/3, and interactive session setup times Impact: expected to cut user-facing wait-time estimation from manual 1-4 RTT math to 0 steps and expose warm-vs-cold savings directly in one run.
Surface: user-agent-analyzer Improvement: added UA consistency scoring with spoofing and token-conflict detection (browser-engine mismatch, platform-token conflicts, and unusual headless markers) plus explicit issue evidence Impact: expected to cut manual UA spoof triage time by surfacing high-confidence inconsistency findings in one run instead of manual token cross-checking. Open live surface
Surface: cdn-waf-detector Improvement: added per-redirect-hop provider timeline with transition detection that shows when CDN or WAF signatures appear, disappear, or change across each HTTP hop Impact: expected to reduce redirect-path triage time by showing the exact hop where edge-provider handoff occurs instead of comparing mixed final headers manually. Open live surface
Surface: website-pagespeed Improvement: added ranked Lighthouse optimization opportunities for mobile and desktop with per-audit estimated time and transfer-size savings Impact: expected to cut performance-triage time by surfacing the top 6 highest-impact fixes per device profile in one run instead of manual audit-by-audit sorting. Open live surface
Surface: geo-latency-estimator Improvement: added multi-endpoint pair matrix analysis with min-median-max typical RTT spread and ranked shortest source-target IP pairs Impact: expected to reduce false single-endpoint latency assumptions by exposing endpoint path variance in one run for dual-stack and load-balanced targets.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: spf-checker Improvement: added recursive SPF include and redirect expansion with cycle detection, expanded DNS lookup budget estimation, void-lookup detection, and a live SPF dependency trace Impact: expected to reduce false SPF pass assumptions by exposing over-limit include graphs and missing SPF dependencies in one run instead of base-record-only estimates. Open live surface
Surface: tls-checker Improvement: added full certificate chain analysis with per-certificate role, signature algorithm, and expiry visibility plus chain-wide earliest-expiry and expired-certificate risk flagging Impact: expected to cut hidden intermediate-certificate expiry misses by surfacing chain bottlenecks and stale chain elements in one run instead of leaf-only checks.
Surface: ip-reputation-lookup Improvement: expanded input from IP-only to IP, hostname, or URL with automatic multi-endpoint resolution and per-endpoint risk scoring across up to 4 public A and AAAA targets Impact: expected to cut false single-endpoint conclusions by exposing highest-risk and average-risk drift across load-balanced or dual-stack targets in one run. Open live surface
Surface: mx-lookup Improvement: added MTA-STS and TLS-RPT policy auditing with live _mta-sts and _smtp._tls TXT detection, HTTPS policy-file parsing, and validity checks for mode, mx patterns, max_age, and rua destinations Impact: expected to cut false mail-security-ready assessments by exposing transport-policy and reporting misconfigurations in the same run instead of requiring separate DNS and policy checks. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: webrtc-leak-test Improvement: added ICE path classification and risk logic based on host, srflx, prflx, and relay candidate types with relay-only posture detection and transport visibility per candidate Impact: expected to reduce false high-risk leak flags by separating direct local host exposure from relay-only sessions while improving VPN triage accuracy in a single run.
Surface: dmarc-checker Improvement: added external DMARC report destination authorization auditing for rua and ruf mailto targets using source-domain specific _report._dmarc TXT checks with per-destination evidence Impact: expected to reduce false report-ready assessments by surfacing unauthorized third-party report mailboxes and invalid report URIs in the same run. Open live surface
Surface: ip-location-lookup Improvement: added multi-endpoint geolocation consistency scanning across up to 4 resolved A and AAAA IPs with endpoint-level evidence table and country-city-ASN drift detection Impact: expected faster CDN and anycast triage by exposing geolocation and ASN divergence across endpoints in one run instead of single-IP assumptions. Open live surface
Surface: bulk-dns Improvement: added per-MX target A or AAAA resolution auditing (up to 5 MX hosts) plus SPF record integrity checks that flag missing or multiple SPF records per domain Impact: expected to cut false mail-ready assessments by surfacing unroutable MX targets and SPF misconfiguration signals in the same bulk run instead of requiring separate MX host and TXT audits. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: cdn-waf-detector Improvement: added entry-versus-final provider detection with drift analysis that highlights provider changes across redirects Impact: expected faster CDN and WAF routing incident triage by exposing edge-only versus final-only provider signatures in one run. Open live surface
Surface: uptime-response-checker Improvement: added per-run endpoint telemetry with resolved endpoint IP, negotiated HTTP version, and effective final URL plus run-summary drift counters for unique endpoint IPs, final URLs, and HTTP versions Impact: expected faster load-balancer and edge-route incident triage by exposing backend or protocol drift directly in one 5-run check instead of manual packet and redirect comparison. Open live surface
Surface: ns-lookup Improvement: added parent-child delegation consistency audit that compares parent NS delegation with child authoritative NS records and flags aligned, partial mismatch, or mismatch states with exact host diffs Impact: expected faster DNS delegation incident triage by removing manual cross-checking and exposing stale or split NS sets in one run. Open live surface
Surface: reverse-ip-lite Improvement: added forward DNS validation for each discovered co-hosted domain with verified, stale, and unresolved status plus resolved A/AAAA evidence Impact: expected to reduce false co-hosting assumptions by showing whether each returned domain still resolves back to the tested IP in the same run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: email-deliverability-check Improvement: added live SMTP reachability and STARTTLS coverage probing across up to 3 MX hosts with per-host handshake evidence and connect timing Impact: expected to cut false-ready mail assessments by exposing transport-layer delivery blockers and TLS support gaps in a single run instead of DNS-only checks. Open live surface
Surface: http-headers Improvement: added case-insensitive security-header detection and a quality-scored posture audit with per-header warnings for weak values (for example short HSTS max-age, unsafe CSP directives, and unsafe Referrer-Policy) Impact: expected to reduce false missing-header reports caused by header casing to near zero and cut manual header-quality interpretation from multiple checks to one scored run. Open live surface
Surface: dns-leak-test Improvement: upgraded detection to run 3 resolver rounds with stable-resolver selection, resolver-stability confidence, unique-resolver drift visibility, and public-IP endpoint fallback Impact: expected lower single-sample false positives by requiring repeated resolver agreement and exposing confidence as round-based stability percentage.
Surface: ipv6-checker Improvement: upgraded to a multi-provider reliability probe that runs 3 rounds per family across ipify and local API endpoints with pass ratio, median latency, and per-attempt evidence Impact: expected lower false IPv6 failure diagnosis by requiring repeated cross-provider confirmation instead of a single endpoint check and exposing reliability as pass percentage.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: tls-expiry-monitor Improvement: added multi-endpoint TLS consistency probing across up to 4 resolved A/AAAA IPs with per-endpoint handshake status, hostname-match evidence, and certificate fingerprint comparison Impact: expected faster load-balanced certificate incident triage by reducing manual per-IP TLS checks from multiple runs to one run with direct drift detection. Open live surface
Surface: port-checker Improvement: upgraded scans to resolve and test up to 4 public A and AAAA endpoint IPs per target port with endpoint-level evidence Impact: expected to reduce false closed results on dual-stack and round-robin hosts by validating each configured port across multiple live endpoints in one run. Open live surface
Surface: redirect-checker Improvement: added per-hop security transition analysis with cross-host redirect detection and HTTPS-downgrade flags plus entry-versus-final host comparison Impact: expected faster open-redirect and transport-downgrade triage by surfacing host-boundary jumps and insecure protocol transitions in one run without manual hop inspection. Open live surface
Surface: dns-lookup Improvement: added loop-safe CNAME chain tracing with per-hop canonical target mapping, alternate-target notes, terminal host detection, and automatic A or AAAA endpoint count expansion for each hop Impact: expected to reduce multi-step alias-debug workflow from separate CNAME plus A/AAAA checks to one run with up to 10 traced hops and explicit terminal endpoint visibility. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: ipv4-checker Improvement: added cross-header IPv4 agreement analysis with parsed candidate evidence per signal and automatic spoof-risk classification (Low, Medium, High) based on mismatch count and corroborating headers Impact: expected faster proxy-chain and forged-header triage by reducing manual header comparison from multiple checks to one run with explicit agreement signals and conflict counts.
Surface: cidr-subnet-calculator Improvement: added optional child subnet split planning that expands an input IPv4 CIDR into a target prefix and returns per-child network, broadcast, usable range, and usable-host counts with safe truncation at 512 rows Impact: expected to reduce manual subnet-allocation work from repeated single-subnet calculations to one run that can generate up to 512 planned child subnets with full addressing evidence. Open live surface
Surface: http2-http3-checker Improvement: added entry-point versus final-destination protocol probing with redirect-chain downgrade detection and first-redirect visibility for both HTTP/2 and HTTP/3 checks Impact: expected faster edge-to-origin misconfiguration diagnosis by showing where protocol support drops in a single run instead of requiring separate manual no-redirect and follow-redirect tests.
Surface: asn-lookup Improvement: added resilient dual-provider ASN intelligence with automatic fallback from ip-api to ipwho.is and per-IP source attribution plus source-coverage summary Impact: expected lookup completion rate increase during upstream throttling or outages by allowing one provider failure without losing the whole run and exposing evidence of which source served each result. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: dnssec-validator Improvement: added cryptographic DS-DNSKEY chain validation that computes DNSKEY key tags and RFC digest matches (SHA-1, SHA-256, SHA-384) and flags delegation mismatches with per-DS evidence Impact: expected validation accuracy increase by eliminating DS-plus-DNSKEY false positives and surfacing real stale-parent or rollover mismatch cases in one run.
Surface: traceroute-viewer Improvement: added per-hop packet-loss estimation and min-avg-max jitter telemetry plus automatic bottleneck detection that flags high-loss and large latency-jump hops with endpoint evidence Impact: expected faster network path triage by reducing manual hop comparison and loss spotting from multiple traceroute passes to one run with ranked bottleneck signals. Open live surface
Surface: robots-sitemap-validator Improvement: added robots.txt crawl-rule simulation that parses User-agent Allow and Disallow groups and evaluates wildcard versus Googlebot access decisions across common sensitive paths with matched-rule evidence Impact: expected faster SEO and crawler-policy debugging by turning manual rule interpretation into one run with explicit allowed or blocked decisions per path and agent.
Surface: webrtc-leak-test Improvement: added HTTP-vs-WebRTC public IP mismatch detection by fetching the browser HTTP public IP and comparing it against discovered public ICE candidates, with explicit mismatch flagging in the leak summary Impact: expected faster VPN leak triage by collapsing a manual two-step cross-check into one run and immediately surfacing split-tunnel or partial-protection signals.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: mx-lookup Improvement: added live SMTP capability probing per MX target with EHLO-based STARTTLS detection, reachability notes, and banner evidence plus aggregate STARTTLS coverage in the summary Impact: expected faster mail security triage by replacing separate manual SMTP checks with one run that shows TLS-ready versus plaintext-only MX posture across all exchangers. Open live surface
Surface: security-headers-score Improvement: added response-cookie hardening analysis that scores Set-Cookie flags per cookie (Secure, HttpOnly, SameSite) and detects SameSite=None without Secure while folding cookie posture into the final security score Impact: expected higher web-hardening accuracy by exposing cookie-level risk evidence in one run and reducing missed session-cookie misconfigurations during header audits. Open live surface
Surface: reverse-dns Improvement: expanded lookup input to accept IP, hostname, or URL and run PTR plus forward-confirmed reverse DNS checks across all resolved A and AAAA endpoints with per-endpoint evidence output Impact: expected higher diagnosis accuracy on multi-IP and dual-stack targets by replacing single-IP PTR checks with one run that returns endpoint-level pass-fail FCrDNS results. Open live surface
Surface: whois-lite Improvement: added resilient registration-data fallback by resolving IANA RDAP bootstrap servers and auto-merging RDAP registrar, lifecycle events, statuses, and nameservers when WHOIS output is missing or partial, plus explicit data-source visibility Impact: expected higher lookup reliability on WHOIS-restricted registries and thinner responses by restoring key ownership and expiry fields in one run instead of failing with empty WHOIS output. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: cdn-waf-detector Improvement: upgraded detection to be redirect-aware with per-provider weighted confidence scoring from header-key, header-value, and DNS CNAME evidence across both initial and final hosts Impact: expected higher provider identification accuracy and clearer triage by exposing high-medium-low confidence with explicit scores and dual-host DNS evidence in one run. Open live surface
Surface: port-range-scanner Improvement: upgraded scanner to normalize URL or host input, resolve and scan all target A/AAAA addresses, and support mixed port lists plus ranges with open, closed, and timeout states Impact: expected higher scan accuracy on multi-IP hosts and faster operator workflow by reducing per-IP rescans and manual port list expansion into one run with endpoint-level evidence.
Surface: reverse-ip-lite Improvement: rebuilt into a true reverse IP checker with domain, URL, or IP input normalization, public-IP guardrails, automatic A/AAAA resolution, per-IP co-hosted domain discovery, and lookup timing plus source visibility Impact: expected faster co-hosting investigations by replacing plain DNS resolve output with one run that returns shared-domain evidence and unique domain counts across up to 3 resolved IPs. Open live surface
Surface: internet-speed-test Improvement: added robust multi-round accuracy mode using trimmed averages for download, upload, and ping plus a measurement-confidence score derived from round spread and packet loss Impact: expected lower outlier bias and clearer reliability grading by replacing single-mean reporting with repeatability-aware results and explicit confidence scoring per run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: website-pagespeed Improvement: added Chrome UX Report Core Web Vitals field-data verdicts (LCP, INP, CLS p75 plus good-user share and status) and full Lighthouse category breakdown for mobile and desktop Impact: expected faster performance triage by replacing score-only output with real-user CWV pass or fail evidence and 6 additional diagnostic signals per run. Open live surface
Surface: user-agent-analyzer Improvement: rebuilt analysis to parse browser and version, operating system, device type, rendering engine, and weighted bot or crawler risk signals with a 0-100 score plus one-click current-UA fill Impact: expected faster traffic triage by replacing class-only output with 6 additional diagnostics and stronger bot evidence in a single run. Open live surface
Surface: ip-location-lookup Improvement: rebuilt lookup to accept IP, hostname, or URL input with public-IP guardrails, automatic DNS resolution, and provider fallback from ip-api to ipwho.is plus resolved-target and data-source visibility Impact: expected higher lookup reliability by reducing single-provider failure cases and cutting input-prep steps from multiple manual conversions to one run. Open live surface
Surface: dns-propagation Improvement: rebuilt propagation checker with URL or domain normalization, multi-record support (A, AAAA, CNAME, MX, TXT, NS), resolver latency telemetry, and consensus mismatch analysis across 4 public DNS-over-HTTPS resolvers Impact: expected faster DNS incident triage by replacing single-output A checks with one run that quantifies propagation agreement percentage, mismatch count, and resolver timing evidence. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates confirmed within last 4h; no Stripe/product/pricing changes.
Surface: dmarc-checker Improvement: rebuilt DMARC analysis to normalize URL and email-domain input, detect multiple-record PermError risk, parse and validate key tags (p, sp, pct, adkim, aspf, rua, ruf, fo, ri), and produce a scored findings report Impact: expected faster email-authentication triage by reducing manual DMARC policy parsing and syntax validation from multiple DNS and RFC checks to one run with explicit risk findings and a 0-100 posture score. Open live surface
Surface: dns-leak-test Improvement: rebuilt the page into an active DNS leak audit that detects resolver egress via EDNS, enriches both public IP and resolver IP with ASN and country metadata, and produces evidence-based risk scoring with optional expected-country and expected-provider validation Impact: expected faster and more accurate VPN DNS leak triage by replacing static instructions with one-run mismatch evidence and prioritized leak risk signals.
Surface: ns-lookup Improvement: rebuilt NS lookup into a delegation-aware audit that normalizes URL or host input, walks parent zones to find effective authoritative NS records, adds SOA context, and resolves each nameserver to A and AAAA with address-health visibility Impact: expected faster DNS delegation triage by replacing single-query NS output with one run that exposes effective zone source, resolver trace timing, and nameserver reachability evidence. Open live surface
Surface: geo-latency-estimator Improvement: rebuilt estimator to accept source and target as public IP, hostname, or URL with public A or AAAA resolution, reject private or reserved endpoints, and output best-case, typical, and congested RTT models plus one-way estimate and resolution evidence Impact: expected higher triage accuracy and fewer false assumptions by replacing single-point IP-only estimation with multi-endpoint validated modeling and explicit IP evidence in one run.
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive updates detected within last 4h; no Stripe/product/pricing changes.
Surface: spf-checker Improvement: rebuilt SPF analysis with URL-host normalization, multiple-SPF PermError detection, DNS lookup budget estimation against the RFC 10-lookup limit, include and redirect extraction, and policy risk findings Impact: expected faster email authentication triage by replacing manual SPF parsing and lookup counting with one run that highlights hard failures and near-limit risks. Open live surface
Surface: tls-checker Improvement: rebuilt the checker into a full TLS posture probe with URL or host and port normalization, certificate hostname validation, expiry risk classification with days remaining, negotiated cipher and protocol telemetry, chain-length visibility, and active TLS 1.0-1.3 support probing Impact: expected faster certificate incident triage by replacing fragmented manual checks with one run that shows hostname trust fit, expiry urgency, and protocol compatibility evidence.
Surface: ip-reputation-lookup Improvement: expanded the checker into a scored reputation audit with public-IP guardrails, multi-source DNSBL snapshot (Spamhaus, SpamCop, SORBS, Barracuda), and reverse-DNS plus forward-confirmed PTR validation with explicit evidence Impact: expected faster abuse triage by replacing separate blacklist and PTR checks with one run that surfaces DNSBL hit count, FCrDNS status, and weighted risk reasoning. Open live surface
Surface: bulk-dns Improvement: upgraded from basic A or NS output to a full bulk DNS readiness audit with URL-host normalization, duplicate suppression, A and AAAA plus MX and NS evidence, null-MX detection, per-domain DNS timing, and run-level summary counters Impact: expected faster multi-domain triage by replacing repeated single-domain checks with one run that surfaces web and mail DNS posture and likely misconfigurations. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive updates present within last 4h; no Stripe/product/pricing changes.
Surface: email-deliverability-check Improvement: upgraded from basic presence checks to a full deliverability readiness audit with domain normalization, MX and null-MX detection, SPF record count and policy checks, DMARC policy/pct/rua parsing, common DKIM selector discovery, and a pass-fail scorecard with DNS evidence Impact: expected faster mail setup triage by replacing manual MX/SPF/DMARC/DKIM cross-checking with one run that reports actionable failures and a readiness score. Open live surface
Surface: robots-sitemap-validator Improvement: rebuilt validation into active robots.txt and sitemap.xml checks with URL normalization, redirect and status telemetry, Sitemap directive extraction, XML structure validation, and issue summary output Impact: expected faster crawler-readiness triage by replacing manual fetch and XML inspection steps with one run that surfaces status, structure, and actionable errors.
Surface: ipv4-checker Improvement: replaced single REMOTE_ADDR check with proxy-aware public IPv4 detection across CF-Connecting-IP, True-Client-IP, X-Forwarded-For, X-Real-IP, and Forwarded plus source-confidence and evidence table output Impact: expected higher detection accuracy behind CDN or reverse-proxy setups and faster troubleshooting by exposing which header produced the final IPv4 result.
Surface: http-headers Improvement: rebuilt header fetch with redirect-aware HEAD-to-GET fallback, per-hop header chain parsing, final-response security-header checklist, and fetch telemetry including total time, redirects, and negotiated HTTP version Impact: expected faster header debugging by collapsing multi-step redirect and security verification into one run with explicit evidence and timing context. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates detected within last 4h; no Stripe/product/pricing changes.
Surface: dns-lookup Improvement: upgraded lookup to accept URL-host input normalization, added CAA and SOA coverage, TXT segment stitching, public-domain guardrails, and per-record-type resolver timing summary Impact: expected faster DNS triage by replacing multi-tool validation and type-by-type checks with one run that shows coverage and lookup performance evidence. Open live surface
Surface: mx-lookup Improvement: upgraded MX analysis with null-MX detection, implicit MX fallback detection, and per-MX target A/AAAA resolution health evidence Impact: expected faster inbound mail routing triage by reducing manual RFC fallback checks and MX target DNS validation from multiple lookups to one run. Open live surface
Surface: ipv6-checker Improvement: replaced static IPv6-only detection with active dual-stack probing that tests IPv4-only and IPv6-only browser reachability, includes per-probe latency, explicit fail reasons, and clear network-mode classification Impact: expected faster IPv6 incident triage by reducing manual cross-check steps from multiple external tests to one in-page run with direct pass-fail evidence.
Surface: traceroute-viewer Improvement: added strict public-target validation with URL-host normalization and DNS resolution filtering to block private or reserved destinations before running traceroute Impact: expected 100% rejection of localhost or private-network tracing attempts and clearer run context by showing resolved public target IPs. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates detected within last 4h; no Stripe/product/pricing changes.
Surface: webrtc-leak-test Improvement: replaced raw candidate dump with structured WebRTC leak classification for public/private IPv4, public/local IPv6, and mDNS plus ICE type parsing, risk scoring, and timeout-safe completion Impact: expected faster privacy triage by reducing manual candidate interpretation from multiple parsing steps to one clear risk summary per run.
Surface: cidr-subnet-calculator Improvement: upgraded subnet math with strict IPv4 validation, wildcard mask, first-last usable range, total address count, and RFC 3021-correct /31 usable-host handling Impact: expected higher planning accuracy by removing /31 undercount errors and cutting manual subnet derivation steps from multiple calculations to one run. Open live surface
Surface: whois-lite Improvement: upgraded parsing to accept URL-style input, aggregate multi-status WHOIS lines, deduplicate nameservers, and expose days-to-expiry plus nameserver evidence Impact: expected faster domain hygiene triage by reducing manual WHOIS cleanup steps from multiple scans to one run. Open live surface
Surface: reverse-dns Improvement: added forward-confirmed reverse DNS (FCrDNS) validation with explicit pass/fail states, forward-IP evidence, and PTR mismatch notes Impact: expected faster mail-server and reputation troubleshooting by showing whether PTR hostname resolves back to the tested IP in one run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; substantive tool updates detected within last 4h; no Stripe/product/pricing changes.
Surface: asn-lookup Improvement: expanded lookup input to accept IP, hostname, or URL with multi-record DNS resolution and per-IP ASN distribution summary Impact: expected higher routing-analysis accuracy for CDN or multi-IP domains by exposing single-ASN vs multi-ASN posture in one run. Open live surface
Surface: tls-expiry-monitor Improvement: rebuilt probing to support URL or host with custom port, TLS handshake timing, SAN or CN hostname match validation, and full presented certificate-chain visibility Impact: expected faster certificate incident triage with fewer false host-match assumptions by showing expiry state, match evidence, and chain details in one run. Open live surface
Surface: dnssec-validator Improvement: upgraded validation from raw DS/DNSKEY counts to zone-apex-aware DNSSEC posture analysis with delegation mismatch states and DS or DNSKEY evidence tables Impact: expected higher accuracy for host inputs like www subdomains and faster triage by showing signed, unsigned, or broken delegation outcomes with actionable proof in one run.
Surface: redirect-checker Improvement: added relative redirect resolution with loop detection and per-hop timing plus final-hop summary Impact: expected higher trace accuracy on relative Location chains and faster troubleshooting with direct hop count, total probe time, and loop visibility in one run. Open live surface
Ops update: Recent changes (read-only) verification pass completed for My-IP-IS; monitoring active; no Stripe/product/pricing changes.
Surface: http2-http3-checker Improvement: replaced header-only protocol guess with redirect-aware active HTTP/2 and HTTP/3 probes plus Alt-Svc fallback evidence and final-hop telemetry Impact: expected lower false positives and faster debugging by showing negotiated protocol, final URL, redirects, status code, and probe time in one run.
Surface: cdn-waf-detector Improvement: upgraded detection from single-header scan to combined redirect-aware header plus DNS CNAME evidence with per-provider proof output Impact: expected higher provider identification accuracy and faster troubleshooting by showing explicit detection evidence instead of a generic guess. Open live surface
Surface: security-headers-score Improvement: replaced binary header presence scoring with weighted quality validation and HEAD-to-GET fallback fetching Impact: expected higher scoring accuracy by distinguishing weak vs strong policies and reducing false fetch failures on HEAD-blocked endpoints. Open live surface
Surface: uptime-response-checker Improvement: added redirect rate percentage metric to the 5-run summary output Impact: each run now exposes redirect share (%) directly, reducing manual redirect-rate calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added closed latency p95 metric to scan summary output Impact: each run now exposes closed-port tail latency (ms) directly, reducing manual closed-latency p95 extraction from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added healthy SLA miss runs metric (>=500 ms with 2xx/3xx) to the 5-run summary output Impact: each run now exposes total healthy checks missing the <500 ms SLA as X/5 directly, reducing manual near-plus-slow healthy counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added open latency range metric (max-min) to scan summary output Impact: each run now exposes open-port latency spread in ms directly, reducing manual max-minus-min calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added dominant status code metric (most frequent HTTP code with run count) to the 5-run summary output Impact: each run now exposes the primary HTTP status pattern as code plus X/5 directly, reducing manual status-frequency counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added open latency p95 metric to scan summary output Impact: each run now exposes open-port tail latency (ms) directly, reducing manual open-latency p95 extraction from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added near-SLA healthy runs counter (500-999 ms and 2xx/3xx) to the 5-run summary output Impact: each run now exposes borderline-latency successful checks as X/5 directly, reducing manual 500-999 ms healthy-run counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added open latency IQR metric to scan summary output Impact: each run now exposes middle-50% open-port latency spread (ms) directly, reducing manual open p75-p25 calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added status stability rate percentage ((unchanged adjacent status transitions)/4) to the 5-run summary output Impact: each run now exposes HTTP status consistency (%) directly, reducing manual stable-transition calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added near-timeout rate percentage (>=900 ms) to scan summary output Impact: each run now exposes near-timeout probe share (%) directly, reducing manual near-timeout ratio calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added status code changes counter (run-to-run code flips) to the 5-run summary output Impact: each run now exposes HTTP status volatility as X/4 directly, reducing manual adjacent status-change counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added balanced probes counter (100-499 ms) to scan summary output Impact: each run now exposes mid-latency probes as X/total directly, reducing manual 100-499 ms counting from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added average failed-run latency metric to the 5-run summary output Impact: each run now exposes failed-check mean response time (ms) directly, reducing manual failed-run averaging from 1 step to 0. Open live surface
Surface: port-checker Improvement: added closed responsive rate percentage (<300 ms among closed ports) to scan summary output Impact: each run now exposes quickly-closed probe share (%) directly, reducing manual closed-under-300 ms calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added latency interquartile range (IQR) metric to the 5-run summary output Impact: each run now exposes middle-50% latency spread (ms) directly, reducing manual p75-p25 calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added latency interquartile range (IQR) metric to scan summary output Impact: each run now exposes middle-50% latency spread (ms) directly, reducing manual p75-p25 calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added error status rate percentage (4xx/5xx) to the 5-run summary output Impact: each run now exposes combined HTTP error-status share (%) directly, reducing manual (4xx+5xx)/5 calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added scan throughput metric (ports/s) to summary output Impact: each run now exposes effective scan speed directly, reducing manual ports-over-time calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added SLA pass rate within healthy statuses percentage to the 5-run summary output Impact: each run now exposes how many healthy (2xx/3xx) checks met the <500 ms SLA (%) directly, reducing manual SLA-within-healthy calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added median closed-port latency metric to scan summary output Impact: each run now exposes typical closed-probe response time (ms) directly, reducing manual closed-latency midpoint calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added healthy status rate percentage (2xx/3xx) to the 5-run summary output Impact: each run now exposes healthy HTTP status share (%) directly, reducing manual (2xx+3xx)/5 calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added responsive rate percentage (<300 ms) to scan summary output Impact: each run now exposes responsive-probe share (%) directly, reducing manual responsive-rate calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added timeout rate percentage to the 5-run summary output Impact: each run now exposes timeout share (%) directly, reducing manual timeout-rate calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added open slowdown factor (max/min latency ratio) to scan summary output Impact: each run now exposes worst-to-best open-port latency spread as a direct x-value, reducing manual max-to-min ratio calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added slowdown factor metric (max/min latency ratio) to the 5-run summary output Impact: each run now exposes worst-to-best latency spread as a direct x-value, reducing manual max-to-min ratio calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added timeout share of closed ports percentage to scan summary output Impact: each run now exposes closed-port timeout composition (%) directly, reducing manual timeout-versus-closed ratio calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added slowest successful-run latency to the 5-run summary output Impact: each run now exposes worst-case successful response time (ms) directly, reducing manual max success-latency extraction from 1 step to 0. Open live surface
Surface: port-checker Improvement: added open latency coefficient of variation percentage to scan summary output Impact: each run now exposes normalized open-port latency volatility (CV %) directly, reducing manual stddev-to-mean normalization from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added latency coefficient of variation percentage to the 5-run summary output Impact: each run now exposes normalized latency volatility (CV %) directly, reducing manual stddev-to-mean normalization from 1 step to 0. Open live surface
Surface: port-checker Improvement: added median open-port latency metric to scan summary output Impact: each run now exposes median open-port connect time (ms) directly, reducing manual open-latency midpoint calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: removed duplicated trailing closing markup after the document end Impact: expected 100% single valid HTML document ending, preventing malformed parser tail output. Open live surface
Surface: port-checker Improvement: added open latency standard deviation metric to scan summary output Impact: each run now exposes open-port latency spread (stddev ms) directly, reducing manual open-latency variability calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added slow healthy runs counter (>=1000 ms and 2xx/3xx) to the 5-run summary output Impact: each run now exposes degraded-but-successful checks as X/5 directly, reducing manual slow-success counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added average open-port latency metric to scan summary output Impact: each run now exposes mean open-port connect time (ms) directly, reducing manual open-latency averaging from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added fast healthy runs counter (<200 ms and 2xx/3xx) to the 5-run summary output Impact: each run now exposes strong-performance successful checks as X/5 directly, reducing manual sub-200 ms success counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added responsive probes counter (<300 ms) to the scan summary output Impact: each run now exposes responsive-latency probes as X/total directly, reducing manual <300 ms counting from 1 step to 0. Open live surface
Ops update: Recent changes read-only feed check completed; format and timestamps verified.
Surface: uptime-response-checker Improvement: added SLA pass runs counter (<500 ms and 2xx/3xx) to the 5-run summary output Impact: each run now exposes SLA-compliant checks as X/5 directly, reducing manual SLA pass counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: removed duplicated trailing closing markup after the document end Impact: expected 100% single valid HTML document ending, preventing malformed parser tail output. Open live surface
Surface: uptime-response-checker Improvement: added very fast runs counter (<50 ms) to the 5-run summary output Impact: each run now exposes sub-50 ms checks as X/5 directly, reducing manual <50 ms counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added very fast probes counter (<20 ms) to the scan summary output Impact: each run now exposes ultra-low-latency probes as X/total directly, reducing manual <20 ms counting from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added ultra fast runs counter (<100 ms) to the 5-run summary output Impact: each run now exposes very low-latency checks as X/5 directly, reducing manual <100 ms counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added very slow probes counter (>=2000 ms) to the scan summary output Impact: each run now exposes severe-latency probes as X/total directly, reducing manual >=2000 ms counting from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added very slow runs counter (>=2000 ms) to the 5-run summary output Impact: each run now exposes severe-latency checks as X/5 directly, reducing manual >=2000 ms counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added slow probes counter (>=500 ms) to the scan summary output Impact: each run now exposes moderate-latency probe pressure as X/total directly, reducing manual >=500 ms counting from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added fastest successful-run latency to the 5-run summary output Impact: each run now exposes best-case success response time (ms) directly, reducing manual fastest-success lookup from 1 step to 0. Open live surface
Surface: port-checker Improvement: added ultra-fast probes counter (<50 ms) to the scan summary output Impact: each run now exposes ultra-low-latency probes as X/total directly, reducing manual <50 ms counting from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added max failure streak counter to the 5-run summary output Impact: each run now exposes the longest consecutive failed-check sequence as X/5 directly, reducing manual failure-streak counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added explicit refused-connections counter and refused-rate percentage to the scan summary output Impact: each run now exposes connection-refused outcomes as X/total and %, reducing manual refused-error counting from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added explicit 3xx-runs counter to the 5-run summary output Impact: each run now exposes redirect-status checks as X/5 directly, reducing manual 3xx counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added fast probes counter (<100 ms) to the scan summary output Impact: each run now exposes low-latency probes as X/total directly, reducing manual fast-probe counting from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added explicit 2xx-runs counter to the 5-run summary output Impact: each run now exposes successful HTTP status checks as X/5 directly, reducing manual 2xx counting from 1 step to 0. Open live surface
Surface: http2-http3-checker Improvement: blocks localhost/private/reserved targets before protocol probing Impact: expected 100% rejection of internal/private destination checks, reducing SSRF and internal network probing risk.
Surface: port-checker Improvement: added near-timeout probes counter (>=900 ms) to the scan summary output Impact: each run now exposes slow-probe pressure as X/total directly, reducing manual near-timeout counting from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: removed duplicated trailing HTML fragments after the closing document tags Impact: expected 100% clean single document ending on this tool page, preventing malformed markup rendering artifacts. Open live surface
Surface: port-checker Improvement: removed duplicate broken closing tags at the end of the page markup Impact: expected 100% valid HTML document ending for this tool page, preventing parser quirks and ensuring consistent rendering. Open live surface
Surface: uptime-response-checker Improvement: added explicit 4xx-runs counter to the 5-run summary output Impact: each run now exposes client-error checks as X/5 directly, reducing manual 4xx counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added explicit hard-closed ports counter (closed minus timeouts) to the scan summary output Impact: each run now exposes non-timeout closed ports directly, reducing manual subtraction from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added explicit 5xx-runs counter to the 5-run summary output Impact: each run now exposes server-error checks as X/5 directly, reducing manual 5xx counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added per-scan latency standard deviation to the summary output Impact: each run now exposes latency spread (stddev ms), reducing manual variability calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added median successful-run latency to the 5-run summary output Impact: each run now exposes a robust success-only central latency metric (ms), reducing manual success-run midpoint calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added p95 per-port probe latency to the scan summary output Impact: each run now exposes tail probe latency (ms), reducing manual p95 estimation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added explicit success-runs counter to the 5-run summary output Impact: each run now exposes successful checks as X/5 directly, reducing manual percentage-to-count conversion from 1 step to 0. Open live surface
Surface: port-checker Improvement: added median per-port probe latency to the scan summary output Impact: each run now exposes median port probe time (ms), reducing manual middle-latency calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added explicit failure-rate percentage to the 5-run summary output Impact: each run now exposes failed-run ratio (%) directly, reducing manual failure-rate calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added closed-rate percentage to the scan summary output Impact: each run now exposes closed-port ratio (%) directly, reducing manual closed-rate calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added average successful-run latency to the 5-run summary output Impact: each run now exposes success-only mean response time (ms), reducing manual filtering/recalculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added timeout-rate percentage to the scan summary output Impact: each run now exposes timeout ratio (%) directly, reducing manual timeout-rate calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added max success streak metric to the 5-run summary output Impact: each run now exposes longest consecutive successful checks X/5, reducing manual streak counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added open-rate percentage to the scan summary output Impact: each run now exposes a direct open-port ratio (%), reducing manual ratio calculation from 1 step to 0. Open live surface
Heartbeat check: monitoring/verification pass completed; no substantive changes in last 4h.
Surface: uptime-response-checker Improvement: added fast-runs counter (<300 ms) to the 5-run summary output Impact: every run now exposes explicit fast-run count X/5, reducing manual sub-300 ms counting from 1 step to 0. Open live surface
Surface: port-checker Improvement: added fastest-open and slowest-open latency metrics to the scan summary Impact: each run now exposes 2 additional open-port latency extremes (ms), reducing manual min/max extraction from the result table from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added max redirect hops to the 5-run summary output Impact: every run now exposes worst-case redirect depth (max hops), reducing manual max-hop inspection from 1 step to 0. Open live surface
Surface: port-checker Improvement: added average scan time per port in the summary and per-open-port connect latency notes Impact: each run now exposes 1 new aggregate latency metric (ms/port) plus port-level connect timing, reducing manual per-port timing estimation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added average redirect hops metric to the 5-run summary output Impact: every run now exposes mean redirect depth (hops/request), reducing manual redirect-depth calculation from 1 step to 0. Open live surface
Surface: port-checker Improvement: added open/closed/timeout counters to the scan summary line Impact: each scan now exposes 3 explicit outcome counts (open, closed, timeout) without manual table counting. Open live surface
Surface: uptime-response-checker Improvement: added redirecting-runs counter to the 5-run summary output Impact: every run now reports explicit redirecting runs X/5, reducing manual redirect detection from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added slow-runs counter (>=1000 ms) to the 5-run summary output Impact: every run now reports explicit slow-run count X/5, reducing manual threshold checks from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added total test duration to the 5-run summary output Impact: 100% of runs now expose end-to-end check time in ms, reducing manual timing from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added failed-runs counter to the 5-run summary output Impact: every run now shows explicit failures X/5 (adds 1 new reliability metric and reduces manual failure counting from 1 step to 0). Open live surface
Surface: uptime-response-checker Improvement: added standard deviation latency to the 5-run summary output Impact: 100% of runs now include a dispersion metric to quantify response-time stability without manual calculation. Open live surface
Surface: uptime-response-checker Improvement: added p95 latency to the 5-run summary output Impact: 100% of runs now include a tail-latency metric for faster spike detection. Open live surface
Surface: uptime-response-checker Improvement: added timeout run count to the 5-run summary output Impact: timeout visibility increased from 0 to 1 explicit metric per run (shown as timeouts X/5). Open live surface
Surface: uptime-response-checker Improvement: added jitter (max-min latency) to the 5-run summary output Impact: adds a direct variability metric to 100% of runs and reduces manual variance calculation from 1 step to 0. Open live surface
Surface: uptime-response-checker Improvement: added median latency to the 5-run summary output Impact: reduces outlier skew in quick checks and adds one robust central metric to 100% of runs. Open live surface
Surface: uptime-response-checker Improvement: converted validation error messages to English-only wording Impact: 100% of user-facing validation errors in this tool are now consistently English. Open live surface
Surface: port-checker Improvement: added total scan duration output in milliseconds after each run Impact: gives immediate end-to-end timing visibility for 100% of scans and removes manual stopwatch checks. Open live surface
Surface: uptime-response-checker Improvement: added automatic 5-run summary with avg/min/max latency and success rate Impact: reduces manual interpretation from 4 calculations to 0 per check and speeds triage. Open live surface
Surface: port-checker Improvement: reduced per-port socket timeout from 2s to 1s and added explicit timeout note in results Impact: worst-case full 30-port scan time reduced from ~60s to ~30s (up to 50% faster). Open live surface
Surface: port-checker Improvement: blocks private/reserved localhost-style targets by validating public IP/hostname DNS resolution before scanning Impact: expected 100% rejection of internal/private destination scans (lower SSRF and internal probing risk). Open live surface
Surface: uptime-response-checker Improvement: blocks localhost/private/reserved targets via DNS/IP validation Impact: 100% blocking of internal/private destination hosts in this checker (SSRF risk significantly reduced). Open live surface
Surface: port-checker Improvement: support for port ranges in custom input (e.g. 8000-8010) Impact: up to 90% less manual input for contiguous scans (11 ports in 1 token instead of 11 separate values). Open live surface
Surface: port-checker Improvement: optional custom port list (comma-separated, max 30) Impact: scan coverage increased from 12 fixed ports to up to 30 targeted ports per check (+150% vs default). Open live surface
Tool: <strong>stats-dashboard</strong>| Improvement: “recent changes” now visible directly on login + dashboard and verified live.
Heartbeat check: monitoring/verification pass completed; no substantive changes in last 4h.
Heartbeat check: monitoring/verification pass completed; no substantive changes in last 4h.
Heartbeat check: monitoring/verification pass completed; no substantive changes in last 4h.
Stability recovery: full dashboard + range flow restored.
Stats auth restored with password flow and app-session passthrough.
Removed temporary debug overlay after timing verification.
App monitor UI cleanup: removed clutter lines per feedback.
/stats date/range controls split into explicit actions.