Skip to main content
DFIRLab
ResearchIntel BriefingsPhishing CheckDomain LookupExposure ScannerPrivacy CheckAbout
PlatformNew
DFIRLab
Privacy Policy/RSS Feed/Sitemap

Security research, threat intelligence, and detection engineering.

© 2026 DFIR Lab. All rights reserved.

Free Tool

Domain Lookup

Comprehensive DNS, email security, TLS, and domain reputation analysis. Enter any domain to get a full health report.

You can paste a full URL — the protocol, path, and port will be stripped automatically. Supports any public domain.

What We Check

DNS Records
  • A, AAAA, MX, NS, TXT
  • SOA, CNAME, CAA
  • Provider identification
Email Security
  • SPF record + mechanisms
  • DMARC policy + tags
  • BIMI logo + VMC cert
  • MTA-STS policy
TLS / Certificates
  • Protocol version + cipher
  • Certificate chain
  • Expiry + SANs
  • Certificate transparency
Domain Intelligence
  • WHOIS / registration age
  • Reverse DNS (PTR)
  • IP blacklist check
  • Registrar info
About Domain Lookup

What does this tool check?

A comprehensive server-side analysis of any public domain — DNS records, email authentication, TLS certificates, registration data, and IP blacklist status.

DNS Records

A, AAAA, MX, NS, TXT, SOA, CNAME, CAA records with hosting provider identification.

Email Security

SPF, DMARC, BIMI, and MTA-STS validation. Detects policy gaps enabling spoofing.

TLS Certificates

TLS version, cipher, certificate validity, expiry, SANs, and CT log analysis.

IP Reputation

Checks resolved IPs against DNS-based blacklists (RBLs) for listing detection.

Health Score Methodology

The health score (0–100) is a weighted composite across four categories. Each check contributes pass, warn, or fail findings that produce the final grade.

A+ABCDF
Email Security
30%
TLS / Certificate
25%
Domain Reputation
25%
DNS Configuration
20%
How It Works
Step 01

Enter Domain

Type or paste any domain name or URL. The tool automatically strips the protocol, path, and port to extract the domain.

Step 02

Server-Side Analysis

Our backend resolves DNS records, connects to the domain for TLS inspection, queries blacklists, and validates email security policies.

Step 03

Health Report

Receive a health score (A+ to F) with detailed findings across DNS, email security, TLS, and domain reputation categories.

Need programmatic access? Use our API for automated domain lookups.

View API Documentation