Choose Your Operation
Pick a diagnostic tool. Reports stay in place when you switch tools.
What is my public IP address?
Your displayed address is the public IP seen by this website. If you're using a VPN, proxy, or corporate network, it may not be your router's actual WAN address.
Investigate Another Public IP
Enter a public IPv4 or IPv6 address to inspect its network operator, ASN, and approximate location.
Public addresses only. Submitted IPs are sent to ipapi.is for network and geolocation data. Results are estimates, not proof of an ISP, physical address, or a person's location. No lookup occurs until you submit.
Public IP and WAN IP explained
What is my public IP?
Your public IP is the IPv4 or IPv6 address this website sees for your connection. Select Reveal My IP above to check it without entering an address.
What is my WAN IP?
WAN means wide area network. Your router's WAN IP is the address assigned to its internet-facing interface. It often matches your public IP, but can differ with carrier-grade NAT, VPNs, or another upstream router.
Is my public IP the same as my private IP?
No. Private IP addresses are used inside home and office networks. Your public IP is the address seen by external services. Your IP can also change when you reconnect or your provider reassigns it.
Your internet-facing address, minus the interrogation.
Test HTTPS connectivity and inspect security headers. Certificate details coming later.
DNS Reconnaissance
Interrogate public DNS using Cloudflare DNS-over-HTTPS. Inspect address, mail, delegation, and policy records. Results reflect the resolver's view, not necessarily authoritative servers.
Queries: A, AAAA, MX, TXT, CNAME, NS, SOA, CAA, plus _dmarc TXT, DS and DNSKEY. DNSSEC AD flags are reported by a validating resolver, not independently verified. SPF and DMARC findings are advisory. SPF recursion explores published includes and redirects with safety limits. Counts are potential lookup paths, not a substitute for a sender-specific SPF evaluation; Direct authoritative comparison is available for A, AAAA, MX, and NS via TCP/53 where reachable; blocked or timed-out servers are explicitly reported.
HTTPS Security Reconnaissance
Test public HTTPS connectivity and inspect response security headers. Inspect HTTPS response security now, and review the independent Certificate Intelligence module being developed for a dedicated TLS scanning backend. Certificate fields are never inferred from HTTP responses.
◉ CERTIFICATE INTELLIGENCE // ENGINE PENDING
Independent TLS scanning backend not connected. No certificate inspection has been performed. The HTTPS check above cannot reveal the certificate chain or expiration.
Not assessed
Not assessed
Not assessed
Not assessed
Not assessed
Future phase — not assessed
This module will require a separately hosted, independently operated TLS probe. No third-party SSL grading service is used. Until the backend is configured, all certificate values remain explicitly unassessed.
Scope: HTTPS requests to the submitted public hostname; redirects are followed only when opted in (maximum 3 hops). A successful connection confirms HTTPS reachability, not a complete certificate or TLS security audit. Scans are rate-limited.
WHOIS Lookup & RDAP Intelligence
Looking for a WHOIS lookup or wondering who owns a domain? Search public domain registration and IP allocation records using RDAP, the modern successor to traditional WHOIS. Registry disclosure policies vary.
RDAP information comes from public registry records using IANA registry discovery (domains) or ARIN referral (IPs). Contact details may be redacted; records can be incomplete or stale. A registration record does not prove current website ownership. Requests are sent only after you submit.
Free WHOIS lookup: who owns a domain?
Enter a domain name above to look up available registration information, including the registrar, registration dates, name servers, and any publicly disclosed registrant details. You can also search a public IP address to inspect its registered network allocation.
What is WHOIS?
WHOIS is a long-established way to query domain registration information. RDAP (Registration Data Access Protocol) provides structured registration data and is increasingly used in place of older WHOIS services.
Can a WHOIS lookup tell me who owns a website?
Not always. Privacy protections and registry policies often hide personal contact information. Domain registration details do not necessarily identify the person or organization operating a website.
Is WHOIS the same as an IP lookup?
No. A domain WHOIS or RDAP lookup concerns domain registration; an IP RDAP lookup shows allocation and network registration information, which may not identify an individual user.
DNS Propagation Intelligence
Compare DNS answers across multiple public recursive resolvers. Differences can indicate caching, resolver policies, or an ongoing DNS change—not necessarily a global propagation failure.
Queries use public DNS-over-HTTPS services. Resolver responses may be anycast, cached, filtered, or unavailable. This is a resolver-consistency snapshot, not a geographic worldwide propagation measurement.
Safe Links Intelligence
Decode Microsoft Defender Safe Links rewrites to reveal the embedded destination. Processing happens entirely in your browser; this tool never opens or requests the destination.
A decoded URL is not a safety verdict. This tool does not invoke Microsoft's protection checks or determine whether a site is malicious. Avoid opening unknown destinations. Input and decoded destinations are not sent to our server by this tool. Destroy the Evidence removes the report from the screen, not copies elsewhere or browser/system logs.
Network Speed Test
One-click connection test to Cloudflare's network. Approximately 12–15 seconds.
No traffic generated until you start the test.
Estimates reflect your browser's connection to Cloudflare, not a certified ISP line-speed result. Tests transfer data and may consume mobile bandwidth. Packet loss is not measured. Cloudflare and browser limits can affect high-speed results.
Continuous Route Investigator
Capture repeated traceroute probes from your own Windows computer, then inspect the report privately in your browser.
01 / Run local probe
Browsers cannot perform TTL-limited ICMP traceroute. Download the readable PowerShell script and run it locally; it does not upload your data.
↓ Download Configured PowerShell Probe
Run from PowerShell in the folder where you saved the script: .urnafterpinging-route-probe.ps1
The downloaded script contains your selected destination and duration. Review the script before running it. Run it from PowerShell in its saved folder using the command above. It generates a local JSON report for import below. IPv4 only; local execution policies may restrict scripts.
02 / Analyze local results
or click to choose a burnafterpinging-route-*.json file
No report loaded.
Important: a nonresponding router may still forward traffic normally. The last responding hop does not necessarily identify a faulty device. ICMP filtering, asymmetric paths, rate limiting and truncated sweeps affect interpretation.
Suspicious File Detonator
Inspect PDF and Office attachments locally without opening them in a document application. Static indicators cannot establish that a file is safe.
Local-only inspection. Files are not uploaded or executed.
About the preview: This is a simplified, read-only conversion of extractable file contents for inspection—not a native document viewer. Original formatting, layout, images, fonts, charts, and other elements may be missing or appear differently.
Limitations
Initial version checks file signatures, PDF structural markers, Office ZIP entry names, SHA-256 and archive metadata. The optional read-only preview extracts document text and worksheet data; it never evaluates formulas or macros. It does not scan compressed PDF streams or perform antivirus scanning. No findings does not mean a file is safe. Never open a suspicious attachment merely because this tool found no indicators.
Sender Authenticity Investigator
Investigate whether a message's headers support a claimed sender. Compare against a known-good email. Authentication passing does not prove the mailbox owner sent it.
All analysis runs in your browser. No message data is uploaded by this tool.
What this investigation can and cannot prove
SPF, DKIM and DMARC authenticate domains or sending infrastructure, not the human sender. Mail clients and IPs are frequently hidden or omitted; new Outlook and Outlook on the web may be indistinguishable. Header fields can be forged, and a legitimate account used by an attacker can pass all checks. For possible Microsoft 365 account takeover, correlate Exchange mailbox audit events, message trace, and Entra sign-in records. Do not treat a client mismatch as proof of compromise.
Privacy: pasted or loaded messages remain in browser memory. The tool does not send content to Burn After Pinging. Clearing the report removes it from this page, not from browser history, downloaded files, or your device.
Secure Password & Passphrase Generator
Generate random credentials locally using your browser's cryptographic random-number generator. No password is transmitted to Burn After Pinging.
Generated locally; not saved by this tool. Clipboard history may retain copied passwords. Use a password manager.
Free Password Generator & Random Passphrase Generator
Use this free password generator to create strong random passwords with custom length, uppercase and lowercase letters, numbers, and special characters. Or generate a memorable random passphrase with a chosen number of words. All credentials are created privately in your browser.
How do I create a strong password?
Choose a long, unique password for every account. A password manager can generate, save, and autofill passwords. For memorable credentials, choose a sufficiently long random passphrase.
Is this online password generator private?
Yes. Generation uses your browser’s cryptographic random-number generator. This tool does not send generated passwords or passphrases to our servers. Avoid copying secrets on shared devices.