We ask, never change
Ten fixed DNS queries are made. There is no zone transfer, port scan or automatic DNS update.
Public DNS evidence · plain English
Inspect the public records that route a website, receive email, identify DNS providers and signal certificate or DNSSEC policy, organised into a straightforward record map.
Inspect one public domain
Enter a domain or a business email address. We extract the domain and query a fixed, safe list of public DNS records.
Public DNS check. We look up the records published for this domain and organise them in one place. Nothing is changed.
A transparent resolver view
DNS is distributed and cached. This page is a point-in-time view from ACA's configured recursive resolver—not a worldwide propagation test.
Ten fixed DNS queries are made. There is no zone transfer, port scan or automatic DNS update.
An MX or NS gap may need attention. An apex CNAME, IPv6 address or CAA policy can be legitimately absent.
Visible DS and DNSKEY records are useful signals. This first release does not claim full chain validation.
Use the evidence yourself or ask ACA for a one-off domain and DNS review.
See one-off support