DNS Zone File Validator — Live DNS Snapshot Verification
Validate what the internet resolves now — dns-history snapshot, not named-checkzone syntax parsing
How to Use This Tool
- Enter the domain whose published DNS you want to verify.
- The domain is validated and normalized.
- dns-history fetches multi-type records from the public resolver path.
- Compare byType values against your zone file or provider panel intent.
- Review summary flags for SPF, DMARC, and mail consistency.
- Re-run after TTL cycles if you recently changed NS or record values.
About This Tool
Zone file validators in the BIND world mean named-checkzone and named-checkconf parsing $ORIGIN blocks for syntax errors — but our backend is dns-history, a live public DNS snapshot. VSPIC DNS zone file validator runs lookupAllDnsRecords for your domain and returns records, byType, summary flags, queriedAt, and a note clarifying this validates what resolvers see on the internet, not whether your zone file text parses locally.
Use results after uploading a zone to authoritative servers: compare snapshot MX, A, and TXT against the records you intended to publish. Mismatches indicate propagation delay, wrong zone attachment, or edit errors — not line-number syntax feedback from named-checkzone. Run named-checkzone locally for syntax; use this page for authoritative publication verification.
Common use cases
- •View all DNS records of a domain after migration
- •Confirm DNS records after domain changes
- •Test for DNS leaks when using a VPN
- •Debug email delivery with MX and TXT records
Why use VSPIC for ?
- Live internet view of what your zone publishes publicly.
- byType grouping for MX, TXT, NS, and address record parity checks.
- queriedAt evidence for post-migration validation tickets.
- Honest scope — publication check, not BIND parser replacement.
- JSON diff friendly for automated verification scripts.
- Free instant validation snapshot.
Syntax validation versus publication validation
named-checkzone validates BIND syntax offline — missing dots, bad TTLs, malformed MX preferences. dns-history validates what the world resolves after your zone loads on authoritative servers. Both steps matter: syntax first locally, publication second via this snapshot.
A syntactically perfect zone file attached to wrong NS delegation still fails production — this page catches that class of error by showing live answers.
Reading validation results from byType
Compare byType.MX sorted by priority against your zone file MX rows. byType.TXT should contain expected SPF and DMARC strings. byType.A and byType.AAAA should match web and API targets after cutover.
summary flags provide quick pass-fail hints — investigate when hasSpf or mail indicators disagree with policy.
Post-migration verification workflow
After NS cutover to self-hosted BIND or new managed provider, wait one TTL cycle then snapshot. Diff against pre-migration export. Empty or unexpected byType buckets signal wrong zone attached or partial AXFR import.
Attach queriedAt-stamped JSON to change closure evidence.
Propagation and resolver cache caveats
Validation reflects one public lookup path at query instant — not a global resolver mesh. Recent changes may lag until TTL expires. Re-run hourly during cutover windows until stable.
Sibling nameserver propagation checker pages share dns-history with honest propagation language — same snapshot mechanics.
Relationship to dns-compare-tool
dns-compare-tool diffs two domains side by side. Zone file validator framing compares live snapshot against mental or exported intent from your zone file. Use compare when staging versus production parity is the goal.
All call dns-history or compare actions — pick page by workflow vocabulary.
Common publication failures this catches
Forgot to increment SOA serial on master — some masters still serve old data while panel shows new edits. Wrong $ORIGIN scope publishing records at unintended relative names. Missing apex A when www CNAME expected target exists only at apex.
TXT SPF too long without proper splitting may truncate or fail silently on some servers — snapshot reveals partial strings.
API action dns-history
GET /ip-tools/api/extended?action=dns-history&domain=example.com. Automate post-deploy validation in CI — fail pipeline when MX or TXT sets differ from approved baseline JSON.
Respect rate limits on scheduled validation jobs.
Authorized use
Validate domains you operate or are contracted to test. Snapshot exports may contain authentication TXT — handle securely.
We do not permanently store validation queries.
Important notes & limitations
- Does not parse or validate zone file syntax — use named-checkzone locally.
- One public resolver path — not worldwide propagation polling.
- Split-horizon internal answers may differ from internet snapshot.
- Cannot detect unpublished zone file drafts still sitting in editor.
- Glue record validation requires separate NS hostname lookups.
Frequently Asked Questions
Yes. VSPIC offers this DNS zone file validator at no cost with no account required. Results load in real time.
We do not permanently store your queries on our servers. Some tools run entirely in your browser; others fetch public data for the request only.
Yes. Open the page in any modern phone or tablet browser. Results work on Wi‑Fi and mobile data.
No. It returns live public DNS via dns-history. Upload zone files to named-checkzone locally for syntax validation.
dns-history with a domain parameter.
Enter forward domains whose records you publish. Dedicated PTR tools apply to in-addr.arpa validation workflows.
Same dns-history backend. Generator page frames authoring reference; validator page frames post-publish verification against live DNS.
Propagation delay, wrong NS delegation, unsaved provider drafts, or split-horizon publishing are common causes. Re-run after TTL cycles.
Not as a dedicated DNSSEC validator. Snapshot may include RRSIG when returned — use DNSSEC-specific tools for chain validation.
Next step for your check
Continue with dns zone file generator on VSPIC.
Related Tools
Explore more free VSPIC tools for IP, DNS, security, and network diagnostics.
DNS Zone File Generator
DNS Zone File Generator — free online tool
Use Free →DNS Compare Tool
Compare A, AAAA, MX, TXT, NS, CNAME between two domains
Use Free →DNS Record Lookup
DNS Record Lookup — free online tool
Use Free →Nameserver Lookup
Registration and DNS nameserver delegation for any domain
Use Free →DNS Lookup Tool — DNS Checker
Free DNS lookup tool and DNS checker — query A, AAAA, MX, TXT, NS, CNAME, and SOA records for any domain.
Use Free →Reverse DNS Lookup
Resolve IP addresses to hostnames via PTR records
Use Free →
Trusted by Users Who Value Privacy
Always Free
No premium plan ever
100% Private
Files processed in browser
Instant Results
Convert in seconds
Works Everywhere
Any device, any OS