DNS Lookup & Health Inspector
Query full DNS record sets, verify email authentication (SPF, DMARC, DKIM), evaluate DNSSEC & CAA security, and detect misconfigurations in seconds.
Unable to resolve DNS
Please check the domain name and try again.
Run a live DNS health check
Enter a domain above to inspect record sets, email authentication, DNSSEC and global propagation.
Queried in 0ms · Total Records: 0 · Just now
Automated Health & Security Findings
12 Automated Rule ChecksAll Queried DNS Records
Raw and resolved records returned by authoritative & recursive resolvers
| Type | Value / Target | TTL | Action |
|---|
Sender Policy Framework (SPF)
Specifies authorized mail sending IPs and mechanisms (RFC 7208)
Domain-based Message Authentication (DMARC)
Policy for handling unaligned messages and forensic reporting
DomainKeys Identified Mail (DKIM)
Cryptographic public keys for verifying email signatures
DNSSEC Security Extensions
Cryptographic authenticity and anti-spoofing verification (DS / DNSKEY)
Certification Authority Authorization (CAA)
Restricts which Certificate Authorities are authorized to issue SSL certificates
Global DNS Resolver Propagation
Testing resolution across major worldwide Anycast DNS nodes
Authoritative Nameservers Synchronization
Querying authoritative nameservers directly for SOA serial parity