DNS Tools

Full DNS query with answer, authority, and additional sections.

Simple forward and reverse DNS lookups.

Concise single-line DNS lookups.

DNS lookups with DNSSEC validation status.

Look up domain registration, IP allocation, or ASN ownership.

Validate a domain's DNSSEC chain via a validating resolver; show DS / DNSKEY / RRSIG at every zone cut.

Find other domains hosted on the same IP via a passive-DNS provider (Hackertarget free tier).

Look up DNS records for any hostname against a choice of public resolvers. Switch record type with the tabs.

IPv4 address (A record) lookup.

Mail exchanger (MX) record lookup.

Query A, AAAA, MX, NS, TXT, CAA, SOA in parallel.

Look up and parse a domain's DMARC TXT record at _dmarc.<domain>.

Look up a domain's DKIM TXT record(s) at <selector>._domainkey.<domain>.

Look up and parse a domain's SMTP TLS Reporting (TLS-RPT) record at _smtp._tls.<domain>.

Look up a domain's BIMI record at <selector>._bimi.<domain> and validate its logo (SVG) and VMC certificate.

Look up the _mta-sts TXT record and the HTTPS policy file, then cross-check the policy's mx patterns against the domain's real MX hosts.

Audit a domain's delegation: parent/child NS agreement, glue, per-nameserver reachability and authority, SOA serial convergence, and open recursion.

Query a hostname against 34 public resolvers across multiple countries in parallel; reveals geo-DNS, anycast, and split-horizon behavior.

Sustained-load DNS performance benchmarking tool.

Ramps DNS query rate until a resolver loses packets.