Website Toolkit DEVv1.245.0

DNS Propagation

Help
Member Login
Website Toolkit · Your web operations toolkit

What do you want to check?

Explore DNS, websites, email, and launch readiness. Choose a tool to get started.

Manage favorites

    Browse tools

    Star a tool for quick access.

    DNS and Domain Checks

    DNS Lookup Single-record DNS lookups and live resolver results. Open tool DNS Propagation Resolver-by-resolver propagation checks. Sign in required Reverse IP Lookup Provider-backed passive DNS view of domains observed on an IP address. Sign in required Hosting Provider Lookup Estimate DNS, edge/CDN, origin hosting, and mail providers from evidence and confidence scoring. Sign in required WHOIS Lookup WHOIS registry lookups for domains. Sign in required DNS Delegation & DNSSEC Analyzer Visualize a sampled parent-to-authoritative delegation path and inspect independently validated DNSSEC evidence. Open tool Registrar Lookup Registrar, IANA, and nameserver details. Sign in required

    Website and HTTP Checks

    Website Inspection Inspect one URL with coordinated website checks. Open tool Technology Detection Identify public website technology and infrastructure from bounded passive evidence. Open tool SSL Check Certificate issuer, expiry, and SAN inspection. Sign in required Redirect Tester Redirect chain and final URL verification. Sign in required Certificate Inventory & Issuance Watch Review bounded Certificate Transparency issuance evidence and manage private opt-in issuance watches. Open tool Crawlability & Indexability Check Inspect crawl permission, indexing directives, canonicals and sitemap references separately. Open tool IPv4 / IPv6 Comparison Compare independent IPv4 and IPv6 connections, TLS identity, HTTP status, redirects and expected content. Open tool Social Sharing Preview Inspect Open Graph metadata and view an approximate sharing card with bounded image and URL diagnostics. Open tool Website Link Checker Crawl a bounded same-origin path scope and find broken navigation links, redirects and staging references. Open tool Header Check Final response header inspection. Sign in required Status Check HTTP status and timing checks for URLs. Sign in required Port Scanner TCP port reachability checks with presets, service guesses, and risk highlights. Sign in required CDN Detector Detect common CDN signals from the target host. Sign in required

    Launch and Migration

    DNS Zone Validator Validate a zone file for its destination provider with a guided import walkthrough. Open tool Redirect Import Tester Upload multiple 301 redirect import sheets and catch loops, duplicate conflicts, bad targets, and export clean files. Sign in required Launch Readiness Go-live analyzer for DNS, SSL, redirects, and headers. Sign in required Domain Snapshot Capture a broad domain-state snapshot for DNS, SSL, registrar, and edge clues. Sign in required Page Resource Audit Scan a page for broken images, missing scripts/styles, mixed content, slow resources, and off-domain launch references. Sign in required Client DNS Handoff Build private client-facing DNS change packets with verification tracking. Sign in required DNS Zone File Compare Upload or paste a DNS zone file and compare it against live DNS before migration. Sign in required DNS Migration Readiness Combine zone-file compare, live DNS, provider evidence, and watcher targets into one migration readiness workspace. Sign in required

    Monitoring and History

    Site Monitor Monitor public website responses and expected content from the Website Toolkit server. Sign in required Domain Watch Monitor registration dates and status for registered domains, with low-noise renewal reminders. Sign in required DNS Watcher Persistent DNS watch jobs that run in the background with cron. Sign in required Reports Build polished read-only reports, exports, and shareable outputs from saved workflows and current tool results. Sign in required

    Email Diagnostics

    Email Deliverability Tester Assess MX, SPF, DMARC, DKIM, BIMI, MTA-STS, TLS-RPT, and sender DNS health. Open tool Inbound Message Spam Test Receive one private test message and review authentication, sender DNS identity, delivery-path, reputation, and safe content evidence. Open tool

    Bulk Operations

    Batch DNS Lookup DNS data for multiple domains at once. Sign in required Batch DNS Propagation Resolver-by-resolver propagation checks for multiple DNS records with live change monitoring. Sign in required Batch Status Check multiple URLs for status and redirects. Sign in required

    Utilities

    IP Address Public IP details and browser connection information. Sign in required Password Generator Generate secure passwords and secret links. Sign in required Secure Note Create private notes and one-time note links. Sign in required CSR Decoder Decode CSR subject and SAN details. Sign in required

    Member workspace

    Member Portal Manage your account, notifications, and member workspace. Sign in My Snapshots Return to your saved snapshots, reports, and shared results. Sign in required
    Recent history

    Jump back in

    Recent checks will appear here after you run a tool.
    Toolbox

    All tools

    DNS Lookup Single-record DNS lookups and live resolver results.
    DNS Delegation & DNSSEC Analyzer Visualize a sampled parent-to-authoritative delegation path and inspect independently validated DNSSEC evidence.
    Website Inspection Inspect one URL with coordinated website checks.
    Technology Detection Identify public website technology and infrastructure from bounded passive evidence.
    Certificate Inventory & Issuance Watch Review bounded Certificate Transparency issuance evidence and manage private opt-in issuance watches.
    Crawlability & Indexability Check Inspect crawl permission, indexing directives, canonicals and sitemap references separately.
    IPv4 / IPv6 Comparison Compare independent IPv4 and IPv6 connections, TLS identity, HTTP status, redirects and expected content.
    Social Sharing Preview Inspect Open Graph metadata and view an approximate sharing card with bounded image and URL diagnostics.
    Website Link Checker Crawl a bounded same-origin path scope and find broken navigation links, redirects and staging references.
    DNS Zone Validator Validate a zone file for its destination provider with a guided import walkthrough.
    Email Deliverability Tester Assess MX, SPF, DMARC, DKIM, BIMI, MTA-STS, TLS-RPT, and sender DNS health.
    Inbound Message Spam Test Receive one private test message and review authentication, sender DNS identity, delivery-path, reputation, and safe content evidence.
    History

    Recent checks

    Recent checks will appear here after you run a tool.
    Favorites

    Pinned tools

    Tap the star beside a tool to pin it here.
    Mobile app

    Settings & install

    Install on iPhone

    Open this site in Safari, tap Share, then choose Add to Home Screen. It launches like a standalone app without the App Store.

    Theme

    Use the palette button in the top bar to switch light, dark, blue, terminal, or purple mode.

    👤 Member Login

    DNS Record Lookup

    Help: check a DNS record ↗

    Find the currently published DNS records for one hostname, then filter, copy, export, save, or share the result.

    Enter a hostname such as example.com or _dmarc.example.com.
    Ready for a DNS lookupEnter a hostname and record type to see its published values and resolver details.

    DNS Propagation Checker

    Check one DNS record across authoritative and public resolvers. Add expected values when you want a clear match-versus-lagging comparison.

    Add one or more values to label matching resolvers and identify lagging answers. Separate multiple values with commas, pipes, semicolons, or new lines.
    Authoritative + recursive resolver sampling. Use Global/Launch when a cutover needs more confidence than a quick spot check.
    Controls how each resolver's complete RRset is evaluated.
    Auto-refresh is off. No completed refresh yet. Choose an interval to monitor this one record without building a batch.

    Reverse IP Lookup

    Provider: ViewDNS

    Uses passive DNS / provider intelligence to show domains observed on an IP address. Results are not authoritative DNS data.

    Use this when you want a provider-backed passive DNS view. This is not a live DNS query and it should not be treated as complete or authoritative.

    Hosting Provider Lookup

    Evidence-based Confidence rated

    Estimate the DNS provider, CDN/WAF/edge layer, likely origin host, and mail provider from DNS, HTTP, TLS, PTR, and ASN evidence.

    This tool intentionally says “likely” because CDN, WAF, and reverse-proxy layers can hide the real origin host.

    WHOIS Domain Lookup

    Pull registry WHOIS data with a cleaner registrar/date/status summary first, then raw output when you need the messy details.

    Website Toolkit checks authoritative RDAP registration data and retains legacy WHOIS as a separately labeled compatibility source.

    TLS & HTTPS Diagnostics

    Check certificate trust, hostname coverage, resolved IPv4/IPv6 endpoints, redirects, and HSTS evidence in one browser-focused review.

    Pins the TLS connection to one public endpoint while preserving the hostname for SNI and certificate validation.
    OptionsOptional
    Compare an apex, www, or alternate hostname against the primary endpoint.

    301 Redirect Testing

    Redirect Import Tester

    Upload one or more 301 redirect import spreadsheets, combine them into one validation run, catch loops/conflicts, and export clean files before WordPress or WP Engine import.

    Fixed-file exports
    Ready: Upload redirect lists to catch import blockers before they hit WordPress or WP Engine.

    HTTP Header Inspection

    Repeatable header diagnostics with saved profiles, cache interpretation, CORS checks, and baseline drift comparison.

    No profile — inspect headers without profile validation.
    Cookie Security Inspector

    Apply expectations to the observed cookies. A profile does not establish what a cookie is used for. Values are excluded from findings.

    Invalid combinations and cookie prefix requirements are always checked.

    CORS / Preflight Diagnostics
    Profiles and baselines use MySQL when available. Built-in profiles still work without saved custom profile storage.

    HTTP Status Check

    Run one-off checks or reusable launch smoke-test route sets with assertions and baseline drift history.

    Expected Behavior and Route Set
    One route per line. Format: URL/path | expected status | expected final URL | redirect count | title contains | body contains | body not contains | canonical URL

    Port Scanner

    TCP reachability checks with presets, service guesses, latency, and safer next steps.

    Custom ports are added to the selected preset. Use commas, spaces, or ranges like 8000-8010.
    Advanced Scan Options
    Use this for authorized troubleshooting and firewall validation. Keep scans small and intentional.

    Launch Readiness

    Technology Detection

    Identify public website technology from passive HTTP and DNS evidence. Application, hosting, CDN and DNS attribution stay separate.

    Standard Detection inspects one public page and up to five redirects. Use an ordinary path without query parameters or credentials. HTTPS is preferred when no scheme is supplied.

    No JavaScript execution, linked asset downloads, authenticated checks or endpoint probing. Results show observed public evidence, confidence and coverage limitations.

    Check a small batch of websites

    Sign in to review up to five unique public websites, then check them one at a time within your existing quota. Keep this page open. Stop finishes the current check and leaves other targets unrun.

    Review targets before starting. Editing the draft preserves captured results below.

    Compare saved technology snapshots

    Compare earlier and later saved captures of the same website without running another check. Sign in to use your private snapshot library.

    Open snapshot library

    Save two Technology Detection captures to compare their evidence. Up to 200 matching library entries are shown.

    Monitor technology changes

    Save private schedules for public websites. Complete, comparable captures can show evidence changes; missing markers do not prove product removal.

    Load your monitors to check scheduling availability.

    Sign in to manage private technology monitors. Up to 20 saved monitors per account, including archived monitors.

    Unified Website Inspection

    Inspect one public URL with selected tools. Checks run sequentially and may take several minutes. Results are samples, not a security audit.

    Checks to run

    Crawlability & Indexability Check

    Inspect crawl permission, indexing directives, canonicals and sitemap references separately.

    Public HTTP/HTTPS URLs on standard ports, without credentials or query parameters.

    Crawl a bounded same-origin path scope and find broken navigation links, redirects and staging references.

    Public HTTP/HTTPS URLs on standard ports, without credentials or query parameters.

    Crawl stays on this origin and within the starting URL's directory. Query URLs, external sites and action-like paths are excluded. A redirect to another origin needs a new explicit run.

    IPv4 / IPv6 Comparison

    Compare independent IPv4 and IPv6 connections, TLS identity, HTTP status, redirects and expected content.

    Public HTTP/HTTPS URLs on standard ports, without credentials or query parameters.

    A failed target connection is compared with a fixed Cloudflare IPv6 control where time permits. Results describe this collector's network vantage.

    DNS Delegation & DNSSEC Analyzer

    Visualize a sampled parent-to-authoritative delegation path and inspect independently validated DNSSEC evidence.

    Public HTTP/HTTPS URLs on standard ports, without credentials or query parameters.

    Social Sharing Preview

    Inspect Open Graph metadata and view an approximate sharing card with bounded image and URL diagnostics.

    Public HTTP/HTTPS URLs on standard ports, without credentials or query parameters.

    The card is approximate. One bounded raster image is fetched by the server; the browser receives an inline preview.

    Certificate Inventory & Issuance Watch

    Review bounded Certificate Transparency issuance evidence and manage private opt-in issuance watches.

    Public HTTP/HTTPS URLs on standard ports, without credentials or query parameters.

    Unexpired issuance history from the configured CT provider; this does not establish current endpoint health or ownership.

    My private issuance watches

    Sign in to manage owner-private issuance watches. Public inventory is separate from scheduled collection.

    Page Resource Audit

    Up to eight requests, 256 KiB per resource and 15 seconds total. No credentials or redirects; browser loading and changing-resource stability remain unverified.

    Scan one page for broken images, missing CSS/JS, failed resources, mixed content, redirects, slow assets, and staging/off-domain references before launch.

    Advanced audit options
    One pattern per line or comma-separated. Supports simple wildcards.
    Used only for this scan and not included in exports/shares.

    Domain Snapshot

    Capture a broad domain-state snapshot with DNS, mail/auth records, SSL, registrar details, and edge-provider clues.

    Email Deliverability Tester

    Check the DNS and transport-policy foundation behind a sending domain without receiving or retaining an email.

    DNS-based No inbox guarantee
    Scheduled published mail configuration

    Use the current scan inputs for owner-private scheduled DNS/policy checks. This does not send mail or prove message authentication. Operator scheduler setup and database acceptance are required.

    Inbound Message Spam Test

    Send a real message to a one-time private address and review authentication, sender DNS identity, delivery-path, and safe content evidence.

    Member-onlyOne message
    Sign in to generate a private test address and keep results in your account. Open member login

    📚 My Snapshots

    Review saved shares and snapshots from the frontend app without jumping into the member portal.

    Sign in to view your saved snapshots, reports, and shared outputs here. Open member login
    Loading your saved snapshots…

    Site Monitor

    Check public website responses from the Website Toolkit server. This is one location; a failed or blocked probe does not prove every visitor sees an outage.

    Open Site Monitor to load your monitors.

    Monitor portfolio

    Groups and tags are private organization. Each monitor keeps its own checks and alert policy.

    Manage private groups

    The scheduled runner must be configured by your administrator. Two consecutive checks confirm incidents or recovery from this location, not a worldwide outage. In-app alerts are on; email is off until you opt in. Maintenance suppresses alerts, not checks.

    Domain Watch

    Monitor a registered domain’s renewal date and registration status. This does not monitor DNS records or confirm that auto-renew is enabled.

    Sign in to monitor domain registrations. Open member login
    Open Domain Watch to load your portfolio.

    My DNS Watches

    See current DNS answers at a glance, resolve items that need attention, and run checks without leaving the workspace.

    Watch overview
    Search, filter, or run the watches shown below.
    Sign in and create a DNS watch to start tracking changes in the background.
    Validation Bundle Builder
    Validation Bundles
    Create a bundle to group DNS, SSL, header, and status checks for one launch.
    Launch Sessions
    Launch Sessions tie baselines, validation bundles, scheduled snapshots, and a timeline together so one domain launch can be monitored from one place.
    Launch Sessions
    Create a launch session to coordinate scheduled snapshots, baselines, validation bundles, and timeline events.

    Client DNS Handoff

    Manage client DNS changes, monitor verification, and track handoff progress.

    Client handoff packages
    Loading handoff packages…

    📝 Reports

    Build polished read-only outputs from saved launch workflows and the current visible result from any supported tool.

    Use the new Report action on result panels for quick executive or technical outputs. This workspace handles saved launch sessions, validation bundles, and domain snapshot comparisons.
    Saved workflow export

    Validation Bundle

    Generate a clean read-only report from one existing validation bundle.

    Saved workflow export

    Launch Session

    Preserve the current launch-session state, timeline, and linked bundle context in one printable output.

    Comparison export

    Domain Snapshot Comparison

    Choose two stored snapshots for the same domain and turn the comparison into a client-friendly read-only report.

    Generated Reports

    Ready for output

    Generate a read-only report from a saved workflow or supported result panel.

    When a report is ready, this area will show the preserved title, summary metrics, share state, and quick export actions.

    DNS Zone Validator

    Prepare a zone file for your destination DNS provider. Review every change before importing.

    Step 1 of 6 — Upload

    Upload or paste your zone

    Private to this tab. Text exports up to 750,000 bytes. Refreshing closes this session; no zone is saved to your account or history.

    Discard this zone session?

    Your uploaded content and validation findings will be cleared.

    DNS Zone File Compare

    Paste or upload a DNS zone export and compare it against live DNS before a nameserver migration.

    Choose which records and risks should be emphasized. Comparison rules are controlled separately below.
    Text zone exports only. The file is read in this browser tab and sent as text for the comparison.

    DNS Migration Readiness Workspace

    Cutover planning Human review required

    Combine live DNS, zone-file comparison, provider intelligence, proposed records, and watcher targets into one migration readiness review.

    Used in the copy-ready client summary only.
    Zone-file style lines work best. These become suggested post-cutover watcher targets.
    This workspace does not change DNS. It creates a readiness checklist, migration summary, and watcher target suggestions to support the engineer’s final review.

    Batch DNS Operations

    Look up a simple list with one record type, or paste complete DNS record sets with a different type on each row.

    One hostname per line uses the default type. You can also paste Type/Name/Value blocks, copied tables, pipe, tab, CSV, or zone-file rows. Values are accepted for easy pasting; Bulk DNS always returns the current live answer.
    Expands relative names such as www, @, and _dmarc.
    Build a mixed-type batch without pasting. Each typed lookup is added to the same editable list above.

    Batch DNS Propagation Checker

    Check multiple DNS records across selected public resolvers, compare expected values, and monitor propagation changes without overlapping requests.

    Batch setupAdd records and choose resolver coverage. Edit setupHide setup

    Records to check

    Each row can use a different hostname, record type, and expected value.
    0 records ready Maximum 50 records per batch

    Match policy: All requires every expected value and allows extras. Any needs one match. Exact allows no missing or extra values.

    Paste a record list
    Resolver selection
    Filter 1

    Secure Password Generator

    Generate a unique password and share it with a one-time or expiring link.

    Generate Password

    characters
    Additional options

    Secure Note

    Choose how the link can be used

    CDN Detector

    Detects edge providers from live response headers first, then falls back to DNS and certificate hints when needed.

    What's My IP Address

    216.73.216.69
    Your Current IP Address

    Automatically detected from your connection • Click IP to copy

    Registrar Lookup

    Summarize registrar ownership clues, important dates, status locks, WHOIS path, and current nameservers without digging through raw WHOIS first.

    CSR Decoder

    Batch Status Check

    One HTTP or HTTPS URL per line. A hostname without a scheme is checked with HTTPS first. Duplicate URLs are allowed but will run more than once.