dnsutil.app
4 free lookups a day · no signup

See exactly how a domain's DNS resolves

Trace the real delegation path from the root servers down to the authoritative nameservers, see every record and TTL, and spot GSLB/load-balancing signals, DNSSEC gaps, and single points of failure.

Full delegation trace
Root → TLD → authoritative, every hop timed, not just the final answer.
Per-site GSLB health
Every authoritative server queried directly — see who's up and who disagrees.
DNSSEC & security findings
Single points of failure, low TTLs, DNSSEC gaps, flagged automatically.