Look up any DNS record type: A, AAAA, MX, NS, TXT, SOA, CAA, SRV, CNAME, DS, TLSA, HTTPS, SVCB
Resolution diagnostics — returns ok / nxdomain / servfail / timeout / degraded
Full diagnosis combining resolution + DNSSEC — start here when something is broken
SPF, DKIM, DMARC, and BIMI audit with A–F grade and prioritized fix recommendations
MX health + provider detection (Google Workspace, M365, Proofpoint, 35+ providers)
DNSSEC chain of trust — returns secure / insecure / bogus / indeterminate
Key inventory, signature expiry, algorithm assessment, rollover readiness
Check propagation across 16 global resolvers: Google, Cloudflare, Quad9, China, Korea, Russia
Certificate validity, expiry countdown, domain match, issuer, chain completeness
TTL advisory with step-by-step migration lowering plan
Compare all authoritative nameservers — catches lame delegation and SOA mismatches
Probe 75 common subdomains + crt.sh Certificate Transparency logs — surfaces exposed dev/staging environments
+7 more tools listed on main page