Your domains. One clear view.
Look up any domain and see its registration, DNS, mail, hosting and certificate in one 5-section report. Each result shows its source and the time it was observed.
Public sources and registries the lookups query
Names identify data sources. They do not imply partnership or endorsement.
Lookup tools
Use the full report, or go straight to the one answer you need. All 27 tools are free and work without an account.
Domain lookup: the full report for any domain
Enter a domain and get registration data, DNS records, mail configuration, hosting network and the TLS certificate on one page, in 5 sections. Every section is fetched live and shows where the data came from and when.
WHOIS lookup
Check who a domain is registered through, when it was created, when it expires and what its status codes mean. Data is read live from the registry's RDAP service, the modern replacement for WHOIS, or from port-43 WHOIS where a registry has no RDAP.
DNS lookup
Query 8 DNS record types (A, AAAA, CNAME, NS, MX, TXT, CAA, SOA) of any domain or hostname and see values and TTLs as public resolvers return them right now.
MX lookup: find a domain's mail servers
See which mail servers accept email for a domain, with the first 5 resolved to their addresses, and whether its SPF and DMARC records are present and well formed.
Domain IP lookup: find where a website is hosted
Resolve a domain to its IP addresses (up to 4 IPv4 and 2 IPv6) and see the reverse DNS name, the autonomous system and the network owner for each one.
SSL certificate checker
Connect to a domain over HTTPS and inspect the certificate it presents: who issued it, when it expires (flagged from 21 days out), which names it covers and whether the chain is trusted.
DNS propagation checker
Changed an A record, moved nameservers or updated MX? Ask 10 independent public resolvers for the same record at once and see which ones already return the new value.
NS lookup: find the nameservers of a domain
See which nameservers answer for a domain, and whether the NS records in DNS agree with the delegation held at the registry.
SPF record checker
Look up the SPF record of a domain and see the problems that most often break it: more than one record, +all, no all mechanism, or more than 10 DNS lookups.
DMARC record checker
Look up the DMARC record of a domain, see which of the 3 policies (none, quarantine, reject) it publishes and whether the record is missing, duplicated or invalid.
Domain age checker
Find out when a domain was first registered, how old it is today, and when it was last updated and will expire.
Website status checker: is it up or down?
Request a website live and see whether it answers within 7 seconds, how fast, with which HTTP status, which server software, and what title and description the page declares.
HTTP header checker
See exactly which response headers a website sends: server and caching headers, cookie attributes, and up to 6 security headers browsers act on.
Redirect checker: trace the full redirect chain
Follow a domain from the first request to the final page (up to 4 redirects) and see every redirect on the way, with its status code and destination.
DKIM checker: look up a DKIM key
Look up the DKIM public key a domain publishes for a selector, or try 32 default selectors of common mail providers, and see whether the key parses, how long it is and whether it is revoked.
Subdomain finder
List up to 500 hostnames of a domain that appear in public Certificate Transparency logs: a quick inventory of what has been given a TLS certificate.
MTA-STS checker
Look up the _mta-sts TXT record, fetch the policy file over HTTPS, compare its mx patterns with the MX hosts the domain really publishes and check max_age against the 31,557,600-second limit.
TLS-RPT record checker
Check the SMTP TLS Reporting record (RFC 8460) at _smtp._tls.<domain>: the version tag and every rua address that reports are sent to.
BIMI record checker
Look up the BIMI record, test that the logo URL is served over HTTPS as an SVG (logos over 32 KB are flagged), and see whether the domain enforces DMARC, which BIMI depends on.
SPF record generator
Pick your mail providers, add your own servers and copy a valid SPF record. The 10-lookup limit and the 255-character string length are checked as you type. Nothing is sent to a server.
DMARC record generator
Choose one of 3 policies, add the address that should receive reports and copy the TXT record for _dmarc.<your domain>. Everything runs in your browser.
Email header analyzer
Paste the raw headers of a message (up to 200,000 characters) to see the route it took, where it waited, and what the receiving server concluded about SPF, DKIM and DMARC. The headers never leave your browser.
DNSSEC checker
See whether a domain is signed: the DS records at the parent zone, the DNSKEY records in the zone itself, and whether two validating resolvers marked the answer as authenticated.
Reverse DNS (PTR) lookup
Enter an IP address, or a domain to look up its addresses first (up to 8). You get the PTR name of each address and whether that name resolves back to the same address.
security.txt checker
Fetch /.well-known/security.txt from a site and check it against RFC 9116: required fields, the expiry date, HTTPS and whether the file is signed.
Bulk domain lookup
Paste up to 25 domains. Each one is checked live and lands in one table: registrar, expiry, nameservers, mail setup and certificate expiry, with CSV export.
Compare two domains
Put two domains next to each other: registration, DNS, mail, hosting and certificate. Every row is marked as same, different or could not be checked.
Every domain. In view.
A report starts as a blur of 5 separate systems: registry, DNS, mail, network, certificate. Move across the sample to bring it into focus.
One domain in, five sources, one report
Each lookup queries independent public sources in parallel. Every section of the report names its source and the time it was observed, and a source that fails is shown as unknown rather than guessed.
- RDAP · WHOISRegistrar, dates, status, nameserversregistry RDAP · port-43 WHOIS
- DNS recordsA, AAAA, NS, MX, TXT, CAA, SOApublic resolvers
- MX · SPF · DMARCMail hosts and sender policy findingsDNS TXT + MX
- IP · ASN · networkNetwork operator, prefix, reverse DNSTeam Cymru · RIR RDAP
- HTTPS · TLSStatus, redirects, certificate, headersdirect request
OrbitProbe reportEvery section: source + time observedLive lookups run from a single location today.
From information to a finished action
Most tools stop at a lookup. OrbitProbe connects what you found to what you do next, and follows it through in 4 steps.
Inspect → save → watch → confirm
- Inspect a domain and its infrastructure across 5 report sections
- Save it to your private portfolio, with reminders 30, 14, 7 and 1 day before expiry
- Watch an expected nameserver change, re-checked as often as every 15 minutes
- Get a notification scoped to the locations that were measured, such as how many of the 10 public resolvers match
Search → check → acquire → track
- Search for a name, or up to 25 at once
- Check prices and terms on the provider's own site; rules for 45 extensions are in our TLD directory
- Register it with the provider you choose; our directory lists 41 registrars, unranked
- Add it to your portfolio yourself and track renewal costs in 4 currencies
Every registrar, one table
Expiry dates with their source, renewal cost per currency, auto-renew that says “unknown” when it is unknown, and reminders 30, 14, 7 and 1 day out. Your portfolio is private: nothing is public or for sale unless you publish a listing.
A live example from public registration data. Your own portfolio is private and is never shown here. Observed: Oct 14, 2026, 5:02 PM UTC.
Know when a DNS change has actually landed
Set the exact nameserver set or record you expect. OrbitProbe re-checks it on the interval you pick, from every 15 minutes to every 24 hours, and reports how many monitored locations match, which still show the old value and which could not be checked. No vague “propagation” percentages.
Sell only what you choose to list
Listings are opt-in, with a control check, clear asking price or make-offer terms, and both seller and buyer fees shown before any agreement. Offers expire after 7 days. Payments and transfers need a partner integration and are not simulated.
Lookup activity, last 24 hours
Real, aggregate numbers. Nothing here is simulated.
Lookups in the last 24 h by visitor country (approximate, from the CDN header).
- United States1076
- United Kingdom26
- Germany3
- Poland3
- Nepal2
- Türkiye2
- Singapore9912
- United States5137
- France306
- Finland213
- Ukraine146
- Germany73
Only country counters are kept, and the rows behind them are deleted after 30 days. No IP addresses and no domain names are stored for this view.
Blog
All blog postsAfnic Approved as ICANN Registry Service Provider for New gTLDs
On 18 February 2026 Afnic, the .fr registry, announced its ICANN Registry Service Provider designation, needed to run TLDs from the 2026 round.
News · 2 min readDENIC: .de DNSSEC Signatures Failed Validation on 5 May 2026
A key rollover in DENIC's new signing system produced signatures validating resolvers rejected; .de names were unreachable for them for about 3 hours.
News · 2 min readICANN's 2026 New gTLD Round Closed With Over 1,600 Applications
The new gTLD application window closed on 12 August 2026 with more than 1,600 primary applications. What happens next and what it means for you.
FAQ
What is OrbitProbe?
OrbitProbe (sometimes written Orbit Probe) is a domain intelligence tool. It reads public registration data, DNS records and HTTPS responses for a domain and presents them in one report. The workspace adds a portfolio with renewal reminders and DNS change watches. The site is available in 6 languages.
Is it free to use?
The lookup tools on this site are free and need no account. Requests are rate limited (the public API, for example, allows 30 report lookups per minute from one address) so the service stays responsive and does not burden the registries and resolvers it queries.
Where does the data come from?
From public sources queried at the moment you search: RDAP servers for registration data, public DNS resolvers (1.1.1.1 and 8.8.8.8) for records, and a direct HTTPS request for web and certificate details. Each section names its source and observation time.
Can OrbitProbe show who owns a domain?
Only when that information is public. Most registrant contact data has been redacted since 2018, and OrbitProbe shows redacted fields as redacted. It does not buy, guess or reconstruct personal data.
Does OrbitProbe scan or attack the domains I look up?
No. It sends ordinary DNS queries, reads the public RDAP record and makes one standard HTTPS request (following at most 4 redirects), the same things a browser and a resolver do. It does not port scan, brute-force subdomains or try to find hidden origin servers.