VulScoreWEBSITE SECURITY

Website security. Clearly measured.

SECURITY · SSL · PERFORMANCE

Inspect your domain’s DNS

Look up public DNS records, record lifetimes, and resolver status.

The hostname is sent to Cloudflare’s public DNS-over-HTTPS resolver. URL paths and query strings are ignored. Maximum 15 seconds.

SAMPLE REPORT · ILLUSTRATIVE DATA

DNS records

demo.example

04 Nov 2026 · 17:04 UTC

This report contains fabricated sample data. No external requests were made.

Resolver: Cloudflare DNS over HTTPS. Records apply to the exact hostname entered, not automatically to its parent domain. Missing MX, NS, or CAA records on a subdomain may be normal. This is one resolver’s current view, not a propagation test.

A:1 answer records

Illustrative A record.

DNSSEC authenticated-data flag from resolver: not set. An unset flag alone does not prove DNSSEC is misconfigured.

A query answers
NameTypeTTL (seconds)Value
demo.example.A300192.0.2.10
MX:1 answer records

Illustrative mail exchange.

DNSSEC authenticated-data flag from resolver: not set. An unset flag alone does not prove DNSSEC is misconfigured.

MX query answers
NameTypeTTL (seconds)Value
demo.example.MX360010 mail.demo.example.
TXT:1 answer records

Illustrative TXT record.

DNSSEC authenticated-data flag from resolver: not set. An unset flag alone does not prove DNSSEC is misconfigured.

TXT query answers
NameTypeTTL (seconds)Value
demo.example.TXT300"v=spf1 -all"

Reports are not stored. Use Print / Save as PDF to keep these results.

Record types

A and AAAA identify addresses, CNAME aliases, MX mail routing, NS nameservers, SOA zone metadata, TXT text policies, and CAA certificate-authority restrictions.

Understand the answer

A successful query with no records differs from NXDOMAIN or a resolver error. Answer sections can include CNAME records as well as the requested type.

Privacy

Only the hostname and record types go to Cloudflare. The application does not store reports. Do not submit private hostnames or confidential information.