NetScope/Overview
ConnectingNS
NETWORK OPERATIONS CENTER

One workspace. Total network visibility.

Diagnose DNS, email delivery, reputation, and network health with one coherent set of tools.

⌕
Try
DNS resolvers
—Curated public endpoints
Webhook inboxes
—Temporary capture endpoints
Email test sessions
—Unique temporary inboxes
Service status
—API and diagnostic engine

Explore diagnostics

From quick checks to in-depth troubleshooting

ⓘ
Real measurements, clear provenance. Global anycast addresses are labeled as such. Geographic vantage points require remote probe deployment; the local engine does not fabricate worldwide results.

DNS Intelligence

Resolve records from independent, explicitly selected public DNS servers.

Live DNS
Run a lookup to see live responses, DNS records, TTL and latency.

SPF Include Explorer

Follow nested include and redirect policies and estimate their DNS lookup complexity.

SPF diagnostics
Enter a domain to inspect its SPF policy tree.

Domain & Email Health

Enter a domain or an email address to assess delivery-related DNS configuration.

Automated
MX, SPF, DMARC, NS, MTA-STS, TLS-RPT and essential DNS checks will appear here.

Email Test Lab

Send a real email through your existing system to a unique Postfix-hosted test address.

Postfix Ingress
ⓘ
Configure the MAIL_TEST_DOMAIN MX record and expose SMTP port 25 before using live test addresses. Test sessions expire after 24 hours.
No test session selected. Create a unique address to begin.

Recent sessions

Email Header Analyzer

Paste complete email headers or load an .eml message to visualize transport hops, authentication claims, ARC and SRS forwarding.

Message diagnostics
ⓘ
The input is parsed in memory and is not persisted by NetScope. Reported SPF, DKIM, DMARC and ARC headers are unverified claims; hop information can be forged before the trusted receiving server. Use the Email Test Lab for actual authentication checks.
Paste headers or upload an EML file to see the transport timeline and authentication overview.

Delivery Troubleshooter

Paste a bounce, NDR, or SMTP rejection message for evidence-based diagnosis.

Message analysis
Your diagnostic findings and recommended remediation steps will appear here.

Webhook Inspector

Generate an unguessable HTTP endpoint and inspect incoming requests, headers and bodies.

Request capture
ⓘ
Endpoints remain valid for 24 hours and retain the 50 most recent requests (256 KiB per body). Avoid sending credentials or sensitive data. Common credential headers are redacted.
Create a capture endpoint, then send requests to its unique URL.

Recent endpoints

Port Analyzer

Bounded TCP connections, service banners, HTTP response headers and your custom User-Agent.

Public targets only
Only test systems you own or are authorized to assess. NetScope restricts network destinations and request volume.
Enter a target and explicit ports.

SSL Certificate Analyzer

Inspect live TLS certificates, chain, expiration and cryptographic properties.

Run a TLS inspection.

Local Certificate Converter

Certificate and private-key conversion occurs entirely in this browser. No upload is performed.

Browser-only
PFX is generated entirely in-browser with AES-256-CBC/PBKDF2 encrypted PKCS#8 and a SHA-256 PKCS#12 integrity MAC. Source keys never leave this tab. Input must be unencrypted PKCS#8 or RSA PKCS#1 PEM. Always verify the output certificate and private key match before deploying.
No file has been converted.

Visual Traceroute

Hop-by-hop network timeline with latency, private/public address classification, reverse DNS, ASN and ownership.

Measurements originate at the NetScope server, not the browser. Private hops are never sent to GeoIP services; public-hop ASN/GeoIP is approximate.
Run a traceroute to see hops.

WHOIS / RDAP

Modern registry lookup for domains and public IPv4/IPv6 addresses, with expandable original registry data.

Enter a registry object.

Real-time Blacklist (RBL) Check

Check public sending IP addresses, or enter a domain to resolve its A/AAAA records and check their reputation.

Results depend on the DNSBL operator's query policy.

What Is My IP?

Report the connecting IPv4 or IPv6 address, then examine registration, ASN and approximate geography.

Detect the public address visible to this NetScope server.

IPv4 and IPv6 independently

To test both families, deploy NetScope with distinct IPv4-only and IPv6-only HTTPS hostnames. The same dual-stack URL cannot guarantee both families are used.

Resolver inventory

Provider identity, public IP, region and anycast classification.

Catalog

IPv4 subnet calculator

Calculate range, network address, usable count and mask.