DNS ANALYZER
Inspect DNS infrastructure across every record type — DNSSEC status, email security (SPF/DMARC/DKIM/BIMI), CAA policy, reverse DNS, and cross-resolver consistency.
What is DNS?
The Domain Name System (DNS) is the system responsible for translating domain names into IP addresses. When a user enters a website address, DNS servers determine the IP address where the website is hosted so the browser can connect to it.
What information can DNS records reveal?
DNS records reveal infrastructure details about a domain including web hosting servers, mail routing systems, certificate authority restrictions and verification records. Security researchers and network administrators analyze DNS records to understand how a domain is configured, where its services are hosted and whether its email and DNS responses are properly authenticated.
Types of DNS records
- A Record – Maps a domain to an IPv4 address
- AAAA Record – Maps a domain to an IPv6 address
- CNAME Record – Aliases one domain name to another
- MX Record – Defines mail servers for a domain
- TXT Record – Stores verification and security information (SPF, DMARC, domain ownership)
- NS Record – Identifies authoritative name servers
- SOA Record – Defines the authoritative source and refresh timing for a zone
- SRV / NAPTR Records – Locate services like SIP, XMPP and VoIP for a domain
- CAA Record – Restricts which certificate authorities can issue SSL/TLS certificates
- DNSKEY / DS / RRSIG – DNSSEC records that authenticate DNS responses
- TLSA / SSHFP / CERT – Bind certificates and public keys directly to DNS
DNSSEC, email security and CAA
Beyond basic records, this tool checks whether a domain has DNSSEC enabled, whether SPF, DKIM, DMARC and BIMI are configured for email authentication, and whether a CAA policy restricts certificate issuance. It also cross-checks answers across independent public resolvers to flag propagation delays or inconsistent responses, and performs reverse DNS lookups on any resolved IP addresses.