Understand the whole picture
Inspect website addressing, mail routing, aliases, nameservers, zone metadata, certificate policies and text records.
Inspect live DNS answers, visualize how your domain is configured, and find common mistakes—with explanations you can actually use.
A useful starting point for checking web hosting, email delivery, certificate settings and domain delegation.
Inspect website addressing, mail routing, aliases, nameservers, zone metadata, certificate policies and text records.
Catch duplicate SPF or DMARC records, conflicting aliases, null MX conflicts and resolver error conditions.
Compare two independent recursive resolvers without claiming a cached answer is a direct authoritative response.
No. DNS lookup queries request individual types and names. A recursive resolver cannot enumerate all records in a zone, and this tool does not perform zone transfers.
Resolvers cache answers for the TTL and can return different IP addresses because of routing, location, or upstream policies. Compare results after allowing for propagation and caches.
Not necessarily. MX is relevant to mail reception, CAA is optional, and DMARC is relevant to email policy. Missing records are presented as contextual guidance.
No. This browser tool uses supported public DNS-over-HTTPS resolvers for read-only lookups; it cannot edit zones or query arbitrary authoritative nameservers directly.
The entered hostname is sent to Cloudflare and/or Google DNS over HTTPS. Those external providers receive DNS query data and may apply their own privacy policies. PixelOkay does not require an account, and this tool does not store lookup history in your browser. The exported files are generated locally.
Query selected public DNS resolvers for chosen record types, compare returned answers and export captured lookup results.
Query A and MX records for a domain against both available providers, compare returned answers and export the captured response without treating missing data as proof of a configuration failure.
Queries send selected hostnames and record types to the chosen public resolvers over HTTPS. This is not offline or private local DNS and is not an authoritative delegation or complete DNSSEC audit. Caches, missing records and provider errors need context. SPF, DMARC and CAA checks are limited diagnostics. The tool does not edit records or enumerate subdomains. Provider availability and CORS behavior are unverified.
No. Selected names and query types are sent to the chosen public resolver providers over HTTPS.
No. Resolver caches, response limits and provider errors can affect results; review the context and authoritative setup separately.