is it DNS?

isitdns is a DNS looking glass with monitors. Every answer is a live measurement from the isitdns seat, stamped with the time it was read and where it was read from, never a cached or mocked result.

Tools: dig asks any public resolver, or any public address, for a record over DoH, DoT, or Do53 over TCP or UDP, with DNSSEC, CD, ECS, NSID and RD=0 as knobs, and returns the answer in the shape dig prints plus the JSON. check_domain runs eleven checks on a domain (delegation, DNSSEC chain, DS against a live DNSKEY, glue, recursion policy, mail posture, TTLs, TCP fallback) and reports what each found, with no score and no grade. trace walks the delegation from the root. sweep_domain asks every authoritative nameserver of a zone the same questions with recursion off and compares them server by server, with CAA and ACME DNS-01 readiness. resolver_status is the live board of public resolvers with the verdict of every isitdns seat that voted this round; resolver_history is their incident record; dns_events is the days several resolvers were unhealthy at once; top_domains is the daily health of the domains isitdns monitors; ksk_board is the RFC 8509 root key sentinel across those resolvers.

Prompts walk the tools in order for the common questions: why a domain does not load, whether something is intercepting DNS, whether a zone's DNSSEC is right, and whether public DNS is having trouble right now. Each keeps the answer scoped to this name, these resolvers and this moment.

Free, no account, no key. Read-only: nothing here changes any DNS. Rate limit 100 tool calls a minute per address. Documentation at isitdns.net/agents.