All tools
Domain tools
DNS, email authentication, SSL, security headers, CORS, CSP, HSTS, and redirect tools
Domain tools help site owners and developers verify launch readiness, email delivery setup, certificate authority rules, DNSSEC signals, SSL health, browser security headers, cross-origin policy, and public response behavior from one focused section.
Inspect DNS, MX, SPF, DMARC, DKIM, CAA, DNSSEC, BIMI, MTA-STS, and TLS-RPT records.Generate SPF and DMARC TXT records without external services.Analyze SSL, HTTP headers, Security Headers, CORS, CSP, HSTS, and redirect chains.
Domain tools
19 toolsDNS LookupLook up public A, AAAA, CNAME, NS, TXT, and MX DNS records.MX Record CheckerCheck which mail servers receive email for a domain.SPF Record CheckerFind and summarize the SPF TXT record used to authorize outgoing email.DMARC Record CheckerCheck the DMARC policy, reporting address, and alignment tags for a domain.DKIM Record CheckerLook up a DKIM public key TXT record from selector and domain.CAA Record CheckerCheck which certificate authorities are allowed to issue SSL certificates for a domain.DNSSEC CheckerCheck public DS and DNSKEY records used for DNSSEC validation.BIMI Record CheckerCheck the default BIMI TXT record for logo and certificate hints.MTA-STS Record CheckerCheck the _mta-sts TXT record used to advertise mail transport security policy updates.TLS-RPT Record CheckerCheck SMTP TLS reporting records for mail delivery security reports.SPF Record GeneratorGenerate an SPF TXT record from includes, IP addresses, and all policy.DMARC Record GeneratorGenerate a DMARC TXT record with policy, reports, percentage, and alignment options.SSL Certificate CheckerCheck the public TLS certificate issuer, expiry date, and authorization status.HTTP Headers ViewerView public response status and HTTP headers from a website.Security Headers CheckerCheck recommended browser security headers such as CSP, HSTS, X-Frame-Options, Referrer-Policy, and Permissions-Policy.CORS Policy CheckerInspect public CORS response headers and flag wildcard or credential risks.CSP AnalyzerAnalyze the Content-Security-Policy header, directives, and risky sources.HSTS CheckerCheck Strict-Transport-Security max-age, includeSubDomains, and preload readiness.Redirect Chain CheckerFollow public redirects and show each hop in the redirect chain.
Why this page matters
Check DNS records, MX, SPF, DMARC, DKIM, CAA, DNSSEC, BIMI, MTA-STS, TLS-RPT, SSL certificates, HTTP headers, security headers, CORS, CSP, HSTS, and redirect chains.
Category FAQ
No. They only read public DNS and website information.
The record may not exist, may not have propagated yet, or may be blocked by the resolver.