Inspect any public domain the way an attacker would: DNS records from two resolvers, DNSSEC status, and registration data. Both tools send only the domain you enter to public DNS resolvers or RDAP directories. Nothing you enter is stored.
Each tool runs a real check against the domain you enter and returns actionable, plain-language results.
Query DNS records from Cloudflare and Google side by side, compare TTLs, and check DNSSEC.
See a domain's registrar, registration and expiry dates, status, and nameservers, with a domain-age phishing flag.
The DNS Lookup Tool shows a domain's DNS records, which control where its website and email are delivered, compares two resolvers, and checks DNSSEC. Domain Lookup uses RDAP, the successor to WHOIS, to show registration details such as the registrar, key dates, and status.
Attackers read them to map an organization before an attack. Forgotten records can point to services you no longer control and allow a subdomain takeover, and a domain that is allowed to expire can be registered by someone else. Reviewing them regularly closes these gaps.
No. They show what anyone can see about a domain from the outside. An IT security audit or penetration test goes further and tests whether the services behind those records can actually be exploited.
