A WordPress admin plugin to Customize and secure your WordPress dashboard
Check the DNS records of a domain
One screen to query an IP address or a domain: reverse DNS, country, ISP, AS number, DNS records, certificate expiry and blacklist status.No second diagnostic plugin, and no third-party website to paste a client's IP into.
How network tools works
The Network Info page holds two independent lookups. Both run server-side, both are restricted to users who can manage options, and every request is nonce-checked. Input is validated as an IP address or a domain name before anything leaves your server.
Click the AS name and you get the operator, its country and website, the regional registry, the allocation date, the last update and how many IPv4 and IPv6 prefixes it announces. Data comes from BGPView, with RIPEstat as a fallback when the first source is unavailable.
External services: geolocation uses ip-api.com, AS data comes from BGPView or RIPEstat, and the shared-hosting count uses HackerTarget. Only the address or domain you type is sent — never visitor data, never site content.
Frequently asked
Five answers on WHOIS, DNS records, certificates and how fresh the data you see actually is.
Yes, and it is a genuine port-43 query — the WHOIS protocol described in RFC 3912 — not a third-party page scraped and reprinted. The lookup starts at IANA to find the authoritative server for the extension, falls back to a built-in map for the common ones (.com, .net, .org, .it, .eu, .de, .fr, .uk, .io and more), and follows the registrar referral when the registry returns one.
You get the registrar, registration and expiry dates, domain status, nameservers and the full raw record — the one you need when the parsed fields aren’t enough.
In the same panel, alongside the WHOIS. They are read from the resolver at query time: A, AAAA, MX with priority, TXT and NS. Those five cover ninety-five per cent of what you need, from working out where a domain points to confirming that an SPF record is actually there.
Results stay cached for three hours. That is the right compromise: short enough to notice a change that has just propagated, long enough not to hit the resolver on every page reload.
The plugin opens a direct TLS connection on port 443 and reads the certificate: issuer, expiry date and days remaining. It doesn’t trust what the hosting panel claims, it looks at what the server actually answers.
The same figure appears in the dashboard widget, coloured as a warning under thirty days and an alert under fifteen — so you find out about a missed renewal before your client does, rather than after their phone call.
Technically the data is the same, because the source is the same. Two practical things change. The first is that you don’t leave WordPress, copy an address and come back: when you are working through a suspicious login attempt, those steps add up.
The second concerns your clients’ privacy: pasting a client’s domain or IP into a free website hands it to a service whose practices you don’t know. Here the query leaves from your own server.
Each kind of data has its own cache lifetime, chosen according to how often it genuinely changes: DNS three hours, WHOIS twelve, the SSL certificate six, IP data and blacklists six. Looking up the same domain twice within a few minutes costs one request rather than two.
Every lifetime is adjustable through a filter, along with the endpoints used, so you can shorten them if you work on migrations and need to watch propagation almost in real time.