Free DNS posture scan · no sign-up

Domain Explorer

Illuminate the hidden DNS structure of any domain, get a DNS Score, and receive recommendations for fixing issues

Standard: full record set + security analysis

Try

Queries go via public DoH resolvers. Results cached ≤ 30 min. DNS Panopticon provides informational analysis of DNS data for convenience only. Results may be incomplete or inaccurate and should not be relied upon as the sole basis for operational or security decisions. Always verify findings using authoritative sources and your own DNS infrastructure. Use of this site and its tools is at your own risk.

What a scan covers

Every record that decides whether your domain is trustworthy

  • NSDelegationName server redundancy, lame delegation and SOA health.
  • DSDNSSECWhether the chain of trust is present, valid, or silently broken.
  • TXTSPF & DMARCSpoofing protection: missing or duplicate records and policy strength.
  • MXMail routingMail exchangers, DKIM, MTA-STS, DANE and BIMI.
  • CAACertificate policyWhich authorities may issue certificates for the domain.
  • CNAMEAliases & wildcardsApex CNAMEs, CNAME loops and wildcard DNS.

More tools

Go deeper than a single scan