DNS tools to check records and find what broke
Look up current records, trace referrals, compare cached answers, and check the DNS settings that affect websites, email, and certificates.
Choose a DNS check
DNS lookup
See the records returned by a public resolver or the domain's authoritative nameserver.
DNS trace
Follow referrals from the root servers to find where a lookup stops.
DNS change checker
Compare the authoritative answer with the copies still held by public resolver caches.
Nameserver checker
Check the parent handoff, glue records, and whether every nameserver answers.
DNSSEC checker
Validate the signed chain from the root to one DNS answer.
SOA checker
Compare the serial and timing values served by every nameserver.
CAA checker
Find which certificate authorities may issue normal and wildcard certificates.
Domain report
Check registration and live DNS together, then surface the places where they disagree.