Professional DNS health checks, IP intelligence, email authentication, and security tools — free and open.
DNSChkr is a free DNS and network intelligence platform that provides system administrators, DevOps engineers, and security professionals with real-time diagnostic tools for DNS records, email authentication, IP geolocation, and infrastructure security. Unlike many online DNS tools that rely on cached results or limited record types, DNSChkr queries live infrastructure directly — returning authoritative DNS records, global propagation status across 30+ servers, IP geolocation with 7-tier threat detection, and email authentication validation for SPF, DKIM, and DMARC. The platform processes zone file data daily across 1,900+ top-level domains, tracking over 240 million domain records to power its rankings, provider analytics, and security research.
Start with the DNS Inspector for a scored health report covering nameservers, mail routing, DNSSEC, and 25+ automated checks. Monitor global resolution with the Propagation Checker, look up any IP with What's My IP, verify mail authentication with the MX Record Lookup, or check if your server is flagged on any blocklist with the Blacklist Checker.
Inspect DNS records, monitor global propagation after changes, and browse the full TLD directory. The DNS Inspector generates scored health reports covering nameserver configuration, SOA records, DNSSEC status, and common misconfigurations across 25+ automated tests.
Look up any IP address for geolocation, ASN, hosting provider, and threat intelligence data. Identify your own public IP, scan remote hosts for open ports, and check whether an address appears on abuse or threat databases — all powered by MaxMind GeoLite2 and curated threat feeds.
Validate the DNS records that protect your email from spoofing and improve deliverability. Check MX routing, verify SPF, DKIM, and DMARC configurations, and test SMTP connectivity to confirm your mail server accepts connections and responds correctly.
Scan domains and IPs against DNSBL blocklists, check for malware or phishing flags across 17 threat vendors, audit HTTP security headers, and probe for open TCP/UDP ports. Use these tools to verify your infrastructure's security posture before and after deployments.
Understand the full resolution path from stub resolver to authoritative nameserver, including recursion, caching, and TTL behavior.
Learn why DNS changes don't take effect instantly and how TTL values, resolver caches, and negative caching affect propagation timing.
Common misconfigurations that break email authentication — from SPF record limits to DKIM key rotation and DMARC alignment issues.
The chain of trust from root to authoritative zone, how RRSIG and DS records work, and why DNSSEC adoption still lags behind.
DNSChkr processes zone file data daily across 1,900+ TLDs. The statistics below reflect our latest snapshot.
Total Domains
258,579,167
Indexed from zone files
TLDs Tracked
1,929
Active TLD zones
Avg DNSSEC Adoption
8.6%
Across all tracked TLDs
Top DNS Provider
GoDaddy
48,234,660 domains