Skip to main content
wp-config.org

Website and domain checks

DNS lookup and domain health check

Check public DNS records, compare resolver answers and review email policies and nameserver signals in one report.

  • Health report
  • Two resolvers
  • SPF, DMARC and DKIM

Free, no sign-up. Lookups and results are not saved by this site.

This tool needs JavaScript. Turn JavaScript on and reload the page.

DNS lookup

What you can do

  • Common DNS record lookups with TTLs

  • Google and Cloudflare answers compared

  • SPF, DMARC and optional DKIM checks

  • DNSSEC flags and sample nameserver checks

How to use it

  1. Enter the name

    Enter the domain or record name. For a reverse (PTR) lookup, enter a public IP address.

  2. Choose the report

    Choose a record type or the complete health report, pick the resolver and add a DKIM selector if you have one.

  3. Read the answers

    Review the values, the response status and the advice for each record, and download the report if you need a copy.

Read DNS answers with their context

This free DNS lookup can ask for one record type or prepare a health report for a domain. Reports include the common website and email records, their TTLs and DNSSEC signals. You can compare the answers from Google Public DNS and Cloudflare, and enter a real DKIM selector to check its public key.

Records with context

A, AAAA, CNAME, NS, SOA, MX, TXT, CAA, DS, DNSKEY and HTTPS records are in the health report. PTR, SRV and TLSA records can be looked up one at a time.

Email and nameservers

The report checks for SPF and DMARC, a null MX, SOA serial numbers, nameservers over TCP and UDP, recursion and the parent zone's delegation and glue where they can be reached. It never sends email, scans mail ports or tries a zone transfer.

Know the limits

Two anycast resolvers are not a worldwide propagation map, and they do not stand for separate countries. Different answers can come from cache ages, recent changes or location-aware DNS. Direct nameserver checks need outgoing port 53 access from this site's server and are marked unavailable when it is blocked. Finding an email policy or a DNSSEC flag is not a deliverability or security certificate. Read more about DNS responses and DNSSEC.

Related tools

  • WHOIS lookup

    Read public domain registration records.

  • Who is hosting?

    Identify the visible hosting network.

  • Nginx

    Prepare routing, HTTPS and cache configuration.