All Tools
Every DNS, network, email and web tool on DNS Blade — free forever, no signup, no ads.
DNS
Query 20+ global DNS resolvers in parallel.
Look up any DNS record type for a domain.
Find authoritative nameservers.
Mail exchange servers and priority.
Resolve CNAME aliases.
IP → hostname (PTR).
Resolve A / AAAA records.
Enumerate subdomains via CT logs.
Which CAs can issue TLS certs for a domain.
Zone serial, refresh, retry, expire timers.
All TXT records — SPF, DKIM, DMARC & verification tokens.
SIP, XMPP, Matrix, Minecraft & custom SRV records.
DS, DNSKEY & chain-of-trust validation.
RFC 9460 service binding — ALPN, ECH, IP hints.
TLS certificate association records (DANE).
ENUM & SIP URI service discovery.
Detect *.domain wildcard DNS records.
AAAA coverage on web, mail & DNS — graded A–F.
Bulk lookup — 12 record types in one query.
Detect Google, M365, Zoho + SPF senders.
Domain
Email deliverability
Parse & validate SPF record.
Parse & validate DMARC policy.
Build a DMARC TXT record.
Query DKIM public key for a selector.
Look up BIMI record and logo.
Parse raw email headers & delivery hops.
Check IP against 20+ DNSBL zones.
SMTP TLS enforcement (RFC 8461) + reporting.
IP & Network
Web & HTTP
Response headers, status, TLS.
Follow the redirect chain.
TLS cert issuer, validity, SANs.
Every TLS cert ever issued for a domain (crt.sh).
Grade HSTS, CSP, X-Frame-Options A–F.
Detect WordPress, Shopify, etc.
Build a robots.txt file.
Generate a sitemap.xml.
Developer
Pretty-print, validate & minify JSON.
Live JavaScript regex playground.
Percent-encode & decode URLs.
SHA-1/256/384/512 via Web Crypto.
Inspect JWT header, payload & claims.
Sign JWTs with HS256/384/512 in your browser.
Lint Content-Security-Policy for unsafe patterns.
Explain cron in English + preview next 10 runs.
UUID v4/v7, ULID, NanoID, KSUID — batch generate.
Convert curl to fetch, axios, Python, Go, PHP.
Unix epoch ↔ human date.
SEO-friendly URL slugs.
Campaign URLs for GA4, Plausible, Fathom.