is it DNS?
net.isitdns/isitdnsLive DNS: dig any public resolver, audit a domain, walk a delegation, read the resolver board.
Score: 100/100
Handshake verified by our own probe.
Tools · 6
Check a domain that is not working: whether the name resolves in public DNS, then the eleven-check audit of its zone, each row ok, warn, fail or skipped with why. DNS only, not HTTP or TLS, and not fo…
Dig one name and type at one board resolver, or at Cloudflare, Google, Quad9 and AdGuard side by side (resolver all): records, flags, rcode, EDE, latency. Not for a whole domain: check_domain. Asked o…
Trace a delegation from the root to the authority, like dig +trace: each referral and its glue, the one server that answered at each zone cut and any dial that failed, the final answer and its TTLs. N…
Walk the DNSSEC chain from the root to one answer: DS and DNSKEY at each signed zone cut, key tags, signers, signature windows, the first link that breaks or goes insecure, and whether the zone where …
Sweep a zone's nameservers: the same names and types asked at a sample of its authoritative addresses, reporting disagreements, lame or silent servers, serial and TTL differences, the CAA in effect, a…
Read a domain's registration from its registry's RDAP server: each status with what it means for resolution, the registration, expiry and change dates, the nameservers, whether the delegation is signe…
Prompts · 4
Cloudflare, Google, Quad9 and AdGuard asked side by side for a signed reference record and for the name the person cares about: which answer, which fail, from the isitdns edge, right now.
The authoritative servers first, then Cloudflare, Google, Quad9 and AdGuard side by side with the TTL each reports, and until when an old answer can still be served from each of those caches.
Where mail for the domain goes (MX, null MX or the address fallback) and what receivers read to judge mail from it: SPF with its lookup count followed through every include, DMARC, DKIM for a selector…
A name answers SERVFAIL: whether the resolvers are failing validation (and on which key or signature) or cannot reach the zone at all, read from the public resolvers, the checking-disabled retry and t…
How to use
Claude Desktop or claude.ai: add a custom connector (Customize → Connectors; on Team and Enterprise plans an owner adds it under Organization settings → Connectors) with this server URL: https://isitdns.net/mcp
Cursor or Cline: add to your MCP config:
{
"mcpServers": {
"is_it_dns?": {
"url": "https://isitdns.net/mcp",
"transport": "streamable-http"
}
}
}