DNS Checker and DNS Test Tool

Category	Status	Test	Details
Error		Domain not found	The domain maison-architecture74.org does not appear registered in WHOIS and has no public DNS records. It is likely available for registration.

Version 1.1.27 - beta (2026-06-08)

Major boost to the initial report display time thanks to deferred loading for heavier sections: DKIM, MX, SPF, SSL, CAA, HSTS, HTTPS, WWW, reputation, ports and DNS Found
Preserved the original report section order even when some sections are loaded asynchronously
Fixed anchors and sidebar navigation for DKIM, WWW and the newly deferred sections
Improved active-section tracking while scrolling after AJAX-loaded sections are inserted
Fixed DNS Found so it continues to include information collected by deferred sections
Fixed an internal translation token that could appear in TXT duplicate details
Reduced development WHOIS debug logs in server error logs

Version 1.1.26 - beta (2026-05-13)

Added shareable report caching for 24 hours with the creation date shown and a refresh button to force a new analysis

Version 1.1.25 - beta (2026-05-06)

Fixed DKIM false positives caused by DNS wildcards
DKIM records with an empty public key, such as v=DKIM1; p=, are no longer displayed as valid records
Improved the DNS found section to prevent non-existent DKIM TXT records from being listed
Only DKIM records containing a real public key are now displayed

Version 1.1.24 - beta (2026-05-01)

Fixed timeouts on domains delegated to nameservers whose IPs no longer respond, with a clear report warning instead of an endless load
Replaced several blocking DNS lookups with bounded queries so DNSprobe can keep diagnosing even when authoritative servers are unreachable
Added a global WHOIS lookup budget and removed the unbounded shell_exec fallback to prevent hangs under web PHP / open_basedir
Explicitly stops the expensive test pipeline when a parent delegation exists but no authoritative NS server responds
Added a delegation preflight before enriched WHOIS so DNSprobe shows only WHOIS and a clear error when the domain NS servers do not respond
Added the loading overlay when opening a report link directly or doing a full refresh, while keeping the public URL clean
Added 100 new funny loading messages in French and English because my girlfriend likes them

Version 1.1.23 - beta (2026-04-28)

Fixed detection of registered and delegated domains whose NS servers do not return any valid public DNS records
The Parent / NS section can now use nameservers found at the parent to diagnose broken delegations, even when public resolvers do not return any NS records
Improved the WHOIS only message to mention that a domain may point to NS servers where the DNS zone is not configured correctly
Added an internal structured DNS diagnostic to separate WHOIS, recursive DNS, parent delegation and authoritative server responses more clearly
Fixed NS comparison messages to avoid showing a false success when DNSprobe is only using the parent delegation
NS infrastructure tests (recursion, public IPs, TCP and ASN) can now run against nameservers delegated by the parent even when the domain zone itself does not respond
Added a warning when DNSprobe suspects that the domain DNS zone is not configured on the authoritative servers
Adjusted Lame NS and Stealth NS tests to better handle delegated domains whose zone does not respond
Continued the internal refactor to reuse the structured DNS diagnostic in the WHOIS, Preview and DNSSEC sections
The SOA section now reuses authoritative SOA records and serials collected by the DNS diagnostic when public resolvers do not return an SOA
The MX section now reuses effective nameservers and already resolved IPs more consistently to reduce redundant DNS queries
The TXT / SPF section now reuses already collected A, AAAA and MX records to reduce redundant DNS lookups and improve IPv6 coverage
Improved the DMARC section with more robust TXT parsing, multiple DMARC record detection and stricter escaping of displayed values
Fixed the DKIM section to use more robust DNS lookups, detect multiple DKIM TXT records, respect the default RSA value and display the optimal score correctly
Improved the BIMI section with safer DNS lookups, logo/certificate downloads with timeouts, independent DMARC policy checks and better handling of multiple BIMI records
Improved the SSL / HSTS / HTTPS sections with a single SNI-aware SSL fetch, proper SAN-first hostname validation, SNI-aware TLS testing and an HTTPS DNS display fix
Added SSL trust validation against the system CA store in addition to cryptographic chain link checks
Improved the WWW section by reusing already collected A/AAAA records, resolving CNAMEs over IPv4/IPv6, handling no-IP cases more accurately and centralizing ASN lookups
Improved the AXFR section to reuse effective NS servers from the DNS diagnostic and distinguish a clear AXFR refusal from an unreachable server
Improved the Ports section with a centralized port list, dynamic AJAX status updates, safer handling of private IPs and clearer messaging when no common ports are open
Improved the Reputation section with already collected IPv4/IPv6 addresses, dynamic AJAX status updates, better handling of non-public IPs and warnings when some DNSBL checks cannot be fully verified
Improved the DNS Found section with more common subdomains and SRV records, added SRV support to the inventory and added a Microsoft 365 audit when the domain appears to use Exchange Online
Added PTR records to DNS Found from already detected IPv4 and IPv6 addresses
Fixed PTR display in DNS Found when PHP returns PTR answers in the target or ptrdname field
Improved the Security Headers section with more efficient HTTP fetching, clearer messaging when headers cannot be retrieved, more accurate multi-cookie analysis and informational status for optional cross-origin headers
Replaced the optimal .htaccess block with a safer recommended starter configuration, without duplicates and with CSP, CORS, cookies and reporting kept as optional sections to adapt
Improved the WHOIS section with stricter escaping of displayed values, an IANA bootstrap based RDAP fallback and proper summary rebuilding when RDAP provides the data
Improved the RDAP summary in Extras with the same main fields as WHOIS, color-coded dates, enriched EPP statuses and nameserver comparison against current DNS
Made RDAP secureDNS information more explicit and hid the Contact information block when RDAP provides no public contact data
Improved the Preview section with Shotbot configuration moved to .env, clearer DNS messages, real refresh, IDN support, stale cache fallback and stronger proxy-side SSRF protection
Added a configurable delay before the Preview snapshot so web pages have more time to finish loading
Added an animated placeholder while Preview screenshots load and fixed the refresh button to force a new image
Fixed Preview refresh to keep the previous snapshot as fallback during a new render and avoid duplicate simultaneous requests
Relaxed the Microsoft 365 audit in DNS Found to accept newer Microsoft DKIM targets in addition to the onmicrosoft.com format
Relaxed the Microsoft 365 audit in DNS Found to accept both valid Microsoft enterpriseenrollment targets
Added a Google Workspace audit in DNS Found with detection of new and legacy Google MX records, SPF, DKIM and recommended DMARC checks
Fixed DNS Found TXT false positives when wildcard SPF responses appear on _mta-sts, _smtp._tls, default._bimi or DKIM selector names
Added the CAA section to display Certificate Authority Authorization records and compare the current SSL issuer with authorized authorities
Added the CAA Wiki page explaining issue, issuewild, iodef tags and best practices
Started the new Mail Tester tool with unique address generation, IP rate limiting, IMAP retrieval, processed-message deletion and temporary shareable reports

Version 1.1.22 - beta (2026-04-02)

Added better IPv6 support across several report sections
Modified the WWW section to display detected IPv4 and IPv6 addresses more clearly
Added an IPv4 / IPv6 comparison in the WWW section to check whether the root domain and the www subdomain appear to point to the same server or network
Modified the DNS found section to include AAAA records and better highlight IPv6 results
Added new FR / EN translation keys for the new IPv6-related messages
Fixed an issue in the ASN Information block where information was mostly displayed for IPv4
Fixed a regression introduced in the Ping section that prevented the test from completing properly
Improved Ping display to separate IPv4 and IPv6 results more clearly
Added graceful handling for IPv6 tests when the DNSprobe server does not have outbound IPv6 connectivity
Fixed the Ports section to avoid endless loading when IPv6 tests cannot be performed from the server

Version 1.1.21 - beta (2026-03-11)

Modified the SSL section to take into account EC certificates, as EC encryption has a shorter key bit than RSA, some SSL certificates with EC encryption were considered weak when they are not necessarily, added a more accurate check of the encryption used and the key strength for EC certificates

Version 1.1.20 - beta (2026-03-02)

Added URIBL and SURBL services in the list of reputation services to check if the domain is listed as malicious or not, displaying the result in the Reputation section

Version 1.1.19 - beta (2026-02-04)

Slight modifications in the NS section, displaying SOA and WHOIS dates to facilitate the search for the latest changes, it is not accurate for NS but sometimes useful
Added the HTTPS (DNS) subsection in the SSL section under regular https redirections. HTTPS is a new DNS that can replace CNAMEs and other things, I will add elements as I understand this new DNS.
Modified the script that manages whois, some servers do not provide the domain status, added a fallback to the registrar to obtain this information if possible
Added RDAP under the WHOIS section of the extras, some whois servers limit the information given, RDAP can sometimes provide additional information, RDAP as a fallback alone as always if the whois server is unreachable or blocks the tested domain
Added a WHOIS RAW and RDAP JSON (RAW) at the bottom of each respective section for advanced users who want to see the raw data

Version 1.1.18 - beta (2026-01-20)

Missing SSL certificates were mostly in .crt format, added a conversion and download tool in .pem format
Modified domain input, some tlds with multiple dots (e.g., .co.uk) were not accepted correctly, added a more permissive regex

Version 1.1.17 - beta (2026-01-14)

Improved SSL Certificate management, correct chain order, extra unnecessary certificates, etc...

Version 1.1.16 - beta (2026-01-09)

Modified the code for the BIMI section, the script was parsing the logo version incorrectly in some cases and was not displaying the result correctly
Minor improvement of the BIMI section results display

Version 1.1.15 - beta (2025-12-16)

Finalized the wiki integration on the results page
Added a DNS found section, summary of DNS records detected during the analysis (plus common subdomains)
Slight visual improvement for the Reverse DNS block in the WWW section
Improved the Preview modal

Version 1.1.15 - beta (2025-12-12)

Finalized WIKI pages for launch
Added wiki button in the main menu
Modified code for language management, /en and /fr in URLs for SEO boost
Modified code for /wiki and /tools with the same language management system
Possibly introduced a ton of new bugs, to be tested and fixed as we go...
Added compatibility for accented domains (IDN) in the main input field, automatic conversion to punycode for tests results
Improved SSL certificate chain detection script, small bug in some cases, the script did not correctly indicate if an intermediate certificate was missing
Improved functions in WHOIS section, a short whois with referer, we now query the referer if available to get more complete data and we display the source and hops in a badge

Version 1.1.14 - beta (2025-12-10)

Modified TXT section, added Size column for each record
Modified SPF section, added number of entries per category (include, a, mx, ip4, ip6, etc.)
Modified SPF section, detected duplicate IPs within different mechanisms
Created a WIKI and started pages to provide more explanations on the sections and tests performed (Also SEO boost for the site)

Version 1.1.13 - beta (2025-12-09)

Improved PARENT section, small bug in some TLDs where NS records were not returned correctly, fallback + added an explanatory message in the section footer if a similar case is detected
Improved WHOIS section, displays the source of the data (classic WHOIS, RDAP, unknown) and fixes an occasional minor timeout bug
Improved tools to flush public DNS cache, added OpenDNS and modified buttons to automatically copy the domain to the clipboard

Version 1.1.12 - beta (2025-12-04)

Improved Optimal Configuration (.htaccess) section

Version 1.1.11 - beta (2025-11-28)

Added an IPHub API check in the GEOIP section to detect VPNs / Proxies

Version 1.1.10 - beta (2025-11-13)

Added 2 links to flush Google and Cloudflare DNS cache under the report title
Added an active event icon in the footer (e.g., national holiday, public holiday, etc.) just because

Version 1.1.9 - beta (2025-10-31)

Improved DKIM block, added service for the selector in the display
Improved SPF block
Improved WHOIS summary block, added reseller if available

Version 1.1.8 - beta (2025-10-20)

Modified TXT section, added duplicate detection
Modified SSL section, display of certificate type, clear display of the list of SANs, display of certificate policies OIDs

Version 1.1.7 - beta (2025-10-17)

Modified SSL section, possibility to view, copy and download the .pem of the certificate chain elements (certificate, intermediate, root)
Added a button to download the complete SSL chain

Version 1.1.6 - beta (2025-10-16)

Added AXFR section in the report
Modified the method to put icons in the titles in the left column
Modified WHOIS to make Registrar URLs clickable
Modified WHOIS summary to display and make Registrar URLs clickable

Version 1.1.5 - beta (2025-10-09)

Slight improvement in the detection of a valid/existing or invalid domain for displaying whois or a "domain not found" error
Modified the main input script to automatically sanitize pasted content (removal of spaces, http(s)://, www., @, etc.)

Version 1.1.4 - beta (2025-09-29)

Created an additional password / passphrase generation tool
Added passphrase mode with word list in French and English
Added options to include/exclude uppercase, lowercase, numbers, symbols
Added options to include/exclude similar characters (i, l, 1, L, o, 0, O)
Added options to include/exclude ambiguous characters ({ } [ ] \ " ')
Added zxcvbn integration with asynchronous analysis via Web Workers to avoid blocking the interface
Added a button to copy the generated password
Added an explanatory section on how the module works and how to interpret the score

Version 1.1.3 - beta (2025-09-24)

Modified main input, prevents special characters other than those normally accepted in a domain or an IPv4 or IPv6
Added ASN block in the WWW section to display the network and organization associated with the site’s IPs

Version 1.1.2 - beta (2025-09-23)

Added a side menu to quickly access the different sections of the report
Migrated the preview system externally to facilitate management and scaling
Improved the grid, it was not very responsive, results could display under the menu when zoomed, thanks to my partner's colleague for pointing it out :)
Added icons in the side menu for better visibility

Version 1.1.1 - beta (2025-09-12)

Code modification to display stats, compatible with shared hosting with open_basedir and shell_exec limitations
Removed CPU temperature display if not available (VM under Hypervisor does not pass the temperature)
Modified Whois Summary + Whois with fallback to generic RDAP if whois not available (aging technology)
Modified input field to make spaces impossible (common problem when copy-pasting)
Modified Ads detection, removed modal on results page, replaced with permanent banner at the top of the page (less aggressive), modal still present on the homepage
Added HTTPS section to check if the site properly redirects from HTTP to HTTPS (important for SEO and security)
Added HSTS section with header check and recommendations to enable it
Modification / improvement of color coding for whois sections
Code modification to display an error and a message when a domain does not exist

Version 1.1.0 - beta (2025-09-09)

Code optimisation to limit whois
New deployment on a Litespeed server instead of Apache

Version 1.0.9 - beta (2025-09-05)

Injected Google AdSense on the site, we all need to pay our bills :)
Added security headers checkbox in options to disable the section if needed (oversight)
Added an annoying modal on page load if an ad blocker is detected, with tips to disable it, the modal displays 1x on load with a grace period of 30 minutes to avoid being too aggressive
Considering the possibility of having a paid version without ads, depending on the success of the project and the time I can devote to it

Version 1.0.8 - beta (2025-09-02)

Added Security Headers section (CSP, HSTS, CORS, etc.)
Added optimal configuration recommendations (.htaccess)
Added detection of additional headers returned by the server (not included in the score)
Added cookies hardening (Secure, HttpOnly, SameSite) in recommendations (.htaccess)
Modified whois summary, added name servers and comparison with those from DNS

Version 1.0.7 - beta (2025-08-28)

Added Open Graph and Twitter Cards meta tags for better sharing on social networks
Created an Open Graph image, I am open to improvement suggestions.
Added a preview of the tested website (screenshot) in the Extras section
Created a buymeacoffee account for those who wish to support the project (link at the bottom of the page)
Optimized memory in Apache and PHP configurations
Improved the SPF section

Version 1.0.6 - beta (2025-08-27)

Fixed DMARC display (order of tags)
Fixed actual DMARC display, removed duplicate display of rua, ruf, fo tags
Added user IP in footer, click to copy (Useful for my personal needs)
Display local + external IP in footer (available on local network only)
Fixed a minor bug with the overlay if you click the whois button with an invalid domain (thanks P-L S. for finding it)
Standardized Report and WHOIS buttons, disabled if domain / ip is invalid instead of showing an alert
Created a helper for whois to reuse instead of duplicating code
Added exclusions to whois and use RDAP if domain is blocked by standard whois (e.g., .dev, .app, .page, etc)
Purchased and configured the domain dnsprobe.app
Added minimalistic visit and usage logging (tested domain/ip)
Fixed a minor bug in the SSL section if the domain has no SSL but the server does, we display a warning instead of advising that everything is OK (SSL on the server was indeed OK)

Version 1.0.5 - beta (2025-08-07)

Added section generation times
Added server stats (CPU, RAM, UPTIME, TEMP) in header
Improved Ports section display
Improved ping section
Improved favicon display in report title
Added text selection on focus in input field for quick replacement (thanks P-L S. for the suggestion)

Version 1.0.4 - beta (2025-08-01)

Added changelog page modal
Improved tooltips on tests
Improved SSL section display
Added FR/EN translations
Added cookie policy notice on main page

Version 1.0.3 - beta (2025-07-20)

Dynamic Ports loading via AJAX
Dynamic Reputation loading via AJAX

Version 1.0.2 - beta (2025-07-15)

Added translation functions
Added IP search in addition to domain search
Added button for whois only
Added Ports section
Added Reputation section
Added options to disable report sections
Added favicon to the report title

Version 1.0.1 - beta (2025-07-10)

Added configuration menu
Added themes
Added WHOIS
Added WHOIS summary
Added DNSSEC section
Added TXT section
Added SPF section
Added DMARC section
Added DKIM section
Added BIMI section
Added SSL section

Version 1.0.0 - beta (2025-07-01)

Initial draft of the application
Recreation of intoDNS functions

⚙️ Configuration