About
About dnsxray
A free DNS inspector that explains every record and flags the misconfigurations that matter — all in your browser.
Registrar dashboards and raw dig output tell you what your records are, but not whether
they’re correct. dnsxray reads every record type for a domain, explains what each one does, and runs heuristics for the
failure modes that quietly break sites and email: dangling-CNAME subdomain takeover, CAA records that block your
certificate, missing or duplicated SPF, CNAME conflicts, and fragile single-nameserver setups.
It has no backend — your browser queries public DNS-over-HTTPS resolvers (Google and Cloudflare) directly, so the domains you look up never reach a server of ours. No accounts, no logs.