See at a glance how
the world sees your domain
NetTrace queries your DNS records at 200+ public resolvers simultaneously and shows exactly where answers differ. Plus email, security and blacklist checks.
All tools
From a single record lookup to a full security scan of your mail domain.
DNS checker
Query 13 record types at 200+ resolvers and see each answer, response time and status.
Open →Mail checker
SPF, DMARC, DKIM, MX, PTR and BIMI at once, plus disposable domain detection.
Open →Security scan
A score for email, web and DNS security: TLS certificate, HSTS, DNSSEC, CAA, MTA-STS and TLS-RPT.
Open →Blacklist check
Check an IP address or domain against well-known DNS blacklists, including the listing reason.
Open →Mail server test
Test a domain's mail servers: port 25, STARTTLS, certificate, reverse DNS and MTA-STS.
Open →Subdomain finder
Find subdomains without brute force, from certificate logs and DNSSEC, verified live.
Open →Link preview
See how your link looks on Discord, X and WhatsApp, and check the Open Graph tags.
Open →IP info
Hostname, ASN, network owner and location of any IP address or domain.
Open →Website check
Speed, SEO and security of your site, with 0–100 scores and concrete improvements.
Open →Whois / domain info
Registrar, registration and expiry date, name servers and DNSSEC of a domain.
Open →SSL check
Certificate, chain, expiry and supported TLS versions of a server.
Open →HTTP headers
All response headers and the redirect chain of a URL, with a security check.
Open →SPF/DMARC generator
Build a correct SPF and DMARC record and copy it into your DNS.
Open →Built on measurable speed
Every resolver gets its own strict timeout, so one slow server never delays your answer. Answers are cached according to their own TTL, and identical concurrent questions share a single upstream lookup.
- All 200+ resolvers queried at once, each with its own timeout
- Results appear live as they arrive
- TTL-based cache per resolver, complete checks for at least 30 s
- Honest status per resolver: ok, timeout, refused or NXDOMAIN
See the reproducible benchmark →
Compare NetTrace with other DNS tools →
| Resolver | Status | Time |
|---|---|---|
| Cloudflare | OK | 1 ms |
| Quad9 | OK | 2 ms |
| Odido NL | OK | 18 ms |
| KT Corp (KR) | OK | 262 ms |
| Pacific Internet (AU) | OK | 301 ms |
Illustration of the results view, not a measurement.
Frequently asked questions
What is NetTrace?
NetTrace is a free online toolkit for DNS, email and security, hosted in the Netherlands (EU). The DNS checker queries a record at 200+ public DNS resolvers worldwide at once and shows each resolver's answer, status and response time. There are 13 tools in total and an open API without an account.
How do I check DNS propagation?
Enter your domain and the record type (for example A, MX or TXT) in the NetTrace DNS checker. You instantly see which of the 200+ resolvers already return the new answer and which still return the old one, so you know whether a DNS change has propagated everywhere.
Is NetTrace free?
Yes. All tools and the API are free and work without an account. A fair per-IP rate limit keeps the service fast for everyone.
How fast is NetTrace?
In the public benchmark a repeated DNS check in NetTrace is the fastest measured: a median of about 1 ms, versus 5 ms for Cloudflare 1.1.1.1 and 7 ms for Google Public DNS. For a completely new name the first answer from all resolvers together arrives in about 45 ms. The method and all figures are on the benchmark page.
Which tools does NetTrace have?
DNS checker, mail checker (SPF, DKIM, DMARC, MX), security scan, blacklist check, IP info, website check, whois, SSL check, HTTP headers, SPF/DMARC generator, mail server test and subdomain finder. There is also a check per DNS provider, such as Cloudflare, Google and Quad9.
Where is NetTrace hosted and what about privacy?
NetTrace runs on its own server in the Netherlands, in the European Union. Access logs are anonymised (IP addresses truncated) and deleted after 14 days.
Does NetTrace have an API or Discord bot?
Yes. There is an open REST API (current version v1.7) with documentation and an OpenAPI specification, and a free Discord bot with every tool as a slash command.
NetTrace in your Discord server
Add the free bot and check DNS, mail, blacklists, SSL and subdomains straight from Discord, as fast as on the site.
/dns /mail /security /blacklist /ip /subdomains /ssl /ping
An open API, no account needed
The same checks as on this site, through a simple REST API. Great for scripts, monitoring and your own tools. A fair rate limit keeps the service fast for everyone.
API documentation# DNS lookup at all resolvers curl -X POST https://api.nettrace.eu/v1.7/dns-check \ -d "domain=nettrace.eu" \ -d "recordType=A" # Live results as NDJSON curl -N -X POST "https://api.nettrace.eu/v1.7/dns-check?stream=1" \ -d "domain=nettrace.eu&recordType=MX"