Check a domain in a few seconds

Enter a domain and the tool reads its name servers, addresses, mail records and certificate. No signup.

Most used: SPF, DMARC, SSL, WHOIS.

DNS

A, AAAA, CNAME, MX, NS, TXT, SOA and CAA records with TTL.

TXT records named one by one: SPF, DKIM, DMARC and ownership tokens.

Name servers, addresses, mail and DNSSEC in one report.

Whether a record change has reached the public resolvers yet.

Mail servers, priorities, IP addresses and PTR records.

Syntax, the include chain and the ten DNS lookup limit.

One valid record from the services you use, with the lookups counted.

The public key, its length and errors in the record.

A 2048 bit key pair made in your browser, with the record to publish.

Policy, rua and ruf addresses, alignment and errors.

Issuer, expiry, SAN list, chain and TLS protocol.

Network owner, range, PTR record and abuse contact.

The PTR record and whether it matches the host name.

Response code, redirects and security headers.

Registrar, dates, status and name servers from the registry.

Queries go directly to the public DNS servers, so you see the record, its TTL and which server answered.

Results are not published and do not become separate pages. The domain you enter stays in your browser.

Every tool shows the record and then says what exactly is wrong and what to do about it.