About DNSlurp
Check DNS records across multiple servers
What is DNSlurp?
DNSlurp is a DNS lookup tool that queries multiple DNS servers simultaneously, letting you compare results and spot propagation issues. It supports 24 record types including DNSSEC records (DS, DNSKEY, RRSIG, NSEC, NSEC3), and exposes DNS header flags like AA (Authoritative Answer) and AD (Authenticated Data).
Features include authoritative lookups that trace the delegation chain to query nameservers directly, automatic TCP fallback for large responses, and support for both traditional UDP DNS and DNS-over-HTTPS (DoH) resolvers.
DNSlurp is part of the esoup toolkit. Check out its sister project for SSL/TLS certificate validation:
HTTP 402 & the x402 Protocol
DNSlurp implements the x402 protocol
for API rate limit bypass. When you hit a rate limit, the API returns
402 Payment Required
with machine-readable payment instructions. x402-compatible clients can pay a small amount
of USDC for multi-day unlimited access. Clients that don't understand x402 simply treat it as
a rate limit and retry after the cooldown.
x402 brings the internet's original vision for HTTP 402 to life — a status code reserved since 1997 for "future use" that finally has a protocol behind it. See the API documentation for integration details.
Further reading from the teams behind the protocol:
Cloudflare's deep dive into why HTTP 402 finally matters. Covers the protocol design, the role of stablecoins, and how x402 enables pay-per-request APIs without API key management or subscription overhead.
Technical reference for implementing x402 on both server and client side. Payment requirements, header formats, facilitator integration, and supported networks.
The protocol specification from Coinbase. Open standard for HTTP-native micropayments using stablecoins on EVM-compatible networks. Built on Base L2 for fast, low-cost transactions.
Enterprise License
DNSlurp is available as a standalone binary for teams that want their own instance. A licensed binary runs with no rate limits, no external dependencies, and full configuration control — custom DNS servers, branding, and rate limit policies.
Purchase a license instantly with USDC via the x402 protocol. No accounts, no forms — pay with your crypto wallet and receive your license and binary downloads for all five platforms (macOS, Linux, Windows).
Classic DNSSEC Tools
For deeper DNSSEC analysis and visualization, these are the gold standard tools:
The definitive DNSSEC visualization tool. Creates detailed graphical maps of DNSSEC authentication chains, showing trust anchors, zone signatures, and any configuration errors. Essential for troubleshooting DNSSEC deployments.
A step-by-step DNSSEC debugger from Verisign Labs. Walks through the entire validation chain from root to your domain, clearly showing where any breaks occur. Great for pinpointing exactly which DS or DNSKEY record is misconfigured.
Shoutouts
Canadian DNS provider that's been doing it right since 1998. Rock-solid DNS hosting, excellent DNSSEC support, and an API that actually works. They care about DNS the way DNS should be cared about. Highly recommended.