DNS Lookup
Queries A, AAAA, CNAME, MX, TXT, NS, SOA, SRV, CAA and PTR records over DoH, with TTL and the DNSSEC bit shown, from Cloudflare or Google.
A browser cannot ask a resolver for an MX or a TXT record, so this asks one for you — Cloudflare or Google, over DNS-over-HTTPS — and shows every answer with its TTL and whether the resolver validated it with DNSSEC. It is dig for people who do not have dig to hand.
This one talks to a public DNS resolver on our server, because a browser cannot look up mail or text records directly. Only the hostname and record type are sent — never a file.
How to use it
Type the hostname
The name as it appears in the zone: example.com for the apex, www.example.com for the subdomain. They are different names and can hold different records.
Pick the record type
A and AAAA are addresses, MX is mail, TXT holds SPF and verification strings, NS is delegation, CAA says which CA may issue. Clicking a type runs the query immediately.
Switch resolvers when something looks wrong
Cloudflare and Google cache independently. If they disagree, you are looking at a change that has not expired out of one cache yet — which is usually the real answer to "why is my new record not live".
Common questions
Does the query leave my browser?
Yes, and this is one of the few pages here where it does. The hostname and record type go to our server, which forwards them to the public resolver. No file is ever sent, and nothing is stored.
What does the DNSSEC mark mean?
It means the resolver checked the zone’s signatures and they held. It is the resolver’s verdict, not ours, and its absence usually means the zone is simply unsigned rather than that something is wrong.
It says no records but I know I set one
Check the exact name — a record on www does not answer for the apex — and remember the resolver may still be holding a cached negative answer for as long as the zone’s SOA minimum. Try the other resolver, then wait.
Why is there no PTR for my server?
A reverse record lives in the address block, not in your domain, so only whoever holds the block — your hosting provider or ISP — can create it. Asking them is the only route.
Feed it from
WHOIS Lookup
Shows domain registration, registrar, nameservers and expiry, plus RDAP data where it exists.
My Connection Info
Shows your public IP, its network and everything this tab reveals — browser, screen, language, time zone, connection — and names what a website genuinely cannot see, starting with your MAC address.
IP Address Info
Shows your public IP or any address with its reverse name, ASN, announcing network, prefix and registry country from Team Cymru’s DNS data — no city-level geolocation.
Subnet Calculator
Expands a CIDR block into network, broadcast, usable range and host count, for IPv4 and IPv6.
Next
These accept what this tool produces, so the result can go straight in.
DNS Propagation Check
Queries the same record from public DoH resolvers — Google, Cloudflare, Quad9, OpenDNS, AdGuard, NextDNS, Mullvad, DNS.SB, AliDNS — and shows which still hold the old answer.
Mail Deliverability Check
Checks a domain’s MX, SPF, DKIM and DMARC records together and explains why mail would be rejected.
SSL Certificate Checker
Connects to a host, shows the served chain, expiry, protocol and cipher support, and flags chain gaps.
WHOIS Lookup
Shows domain registration, registrar, nameservers and expiry, plus RDAP data where it exists.
HTTP Request Builder
Composes and sends a GET/POST/PUT/PATCH/DELETE/HEAD request with custom headers and a body, and shows the status, headers, body and timing — without ever forwarding cookies or Authorization.
Barcode Generator
Generates EAN-13, UPC, Code128, Code39 and ITF barcodes with check digits and print-ready output.