A dedicated toolbox for DNS diagnostics is now available at dremaxx.de/dns-tools. No account, no sign-in, free of charge.
What's in it
- Lookup and reverse lookup – optionally against a single authoritative nameserver, including header flags and the AUTHORITY section.
- Domain analysis – the full report on a name at a glance.
- Nameserver consistency – do all authoritative servers answer the same?
- Propagation – what public resolvers around the world are currently handing out.
- Email security – SPF including the complete include tree, plus DMARC, DKIM, MTA-STS, TLS-RPT and BIMI.
- DNSSEC – the chain of trust from the root down to your record, and the exact hop where it breaks.
- Delegation trace – the path from the root zone to the target, step by step. Zone cuts that no server announces are reconstructed and marked as such.
- Zone transfer check – whether your nameservers hand the entire zone to strangers.
Every answer is dated. A DNS result is only ever true of a moment: every query now carries the instant it was taken, and the email report names the source of each record – TTL, answering server, and whether the answer was authoritative.
The queries do not run in the browser but through a dedicated DNS engine that talks to the nameservers directly. That is the only way to ask an individual authoritative server, read header flags and walk a delegation.
A fair-use limit applies per caller; the remaining allowance is in the response headers. For AI agents the tools are also available as an MCP endpoint – the one module that needs no token at all.
Source: r/dremaxx · by /u/ydreher