Best on- and offline DNS troubleshooting tools


Intodns is a great website to get a quick overview of  a domain and it also checks for errors in the domains configuration, the overview includes, but is not limited to the following:

  • name-server records
  • soa record
  • MX records
  • www A-records

DNS Propagation Checker

whatsmydns lets you instantly perform a DNS lookup to check a domain names current IP address and DNS record information against multiple name servers located in different parts of the world.

This allows you to check the current state of DNS propagation after having made changes to your domains records.

This page searches for the latest whois data and also displays  the following details:

  • Contact details
  • Registrant Organization
  • Registrar
  • Domain Status
  • Domain creation date
  • Domain expiry date

DNSdumpster is a FREE domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process.

Local tools (windows)


Nirsoft DomainHostingView

This tool is a one stop shop to check domains and where they are hosted and what email services they use.

DomainHostingView is a utility for Windows that collects extensive information about a domain by using a series of DNS and WHOIS queries, and generates HTML report that can be displayed in any Web browser.
The information displayed by the report of DomainHostingView includes: the hosting company or data center that hosts the Web server, mail server, and domain name server (DNS) of the specified domain, the created/changed/expire date of the domain, domain owner, domain registrar that registered the domain, list of all DNS records, and more.

Nirsofts tools and their website looks a little oldskool But the tools are actually very easy to use and very usefull


Nirsoft DNSDataView

This utility is a GUI alternative to the NSLookup tool that comes with Windows operating system. It allows you to easily retrieve the DNS records (MX, NS, A, SOA) of the specified domains. You can use the default DNS server of your Internet connection, or use any other DNS server that you specify. After retrieving the DNS records for the desired domains, you can save them into text/xml/html/csv file.

Nirsofts tools and their website looks a little oldskool But the tools are actually very easy to use and very usefull




Displays information that you can use to diagnose Domain Name System (DNS) infrastructure. NS

Usage information can be found here


Linux tools (command-line)


dig (domain information groper) is a flexible tool for interrogating DNS name servers. It performs DNS lookups and displays the answers that are returned from the name server(s) that were queried. Most DNS administrators use dig to troubleshoot DNS problems because of its flexibility, ease of use and clarity of output. Other lookup tools tend to have less functionality than dig.

Although dig is normally used with command-line arguments, it also has a batch mode of operation for reading lookup requests from a file. A brief summary of its command-line arguments and options is printed when the -h option is given. Unlike earlier versions, the BIND 9 implementation of dig allows multiple lookups to be issued from the command line.

Unless it is told to query a specific name server, dig will try each of the servers listed in /etc/resolv.conf.

When no command line arguments or options are given, dig will perform an NS query for “.” (the root).

It is possible to set per-user defaults for dig via ${HOME}/.digrc. This file is read and any options in it are applied before the command line arguments.

The IN and CH class names overlap with the IN and CH top level domains names. Either use the -t and -c options to specify the type and class, use the -q the specify the domain name, or use “IN.” and “CH.” when looking up these top level domains.

Usage information can be found here