DNS FinderFREE

DNS Finder.
Every record. One lookup.

A full DNS lookup and audit in one pass — every record a domain publishes, the authoritative provider answering for it, and the misconfigurations, TTL extremes and chained CNAMEs that quietly slow resolution down.

AT A GLANCE
Freepart of the first waveFreeno signup requiredAllrecord types in one passRegionalpropagation checksRulesetmisconfig detectionLiveand free to run

Part of the CDN World toolkit · FREE TO RUN

example.comNSAAAAAMXTXTCNAMESOACAA
Operator’s log
  1. 00:01Authoritative queries
  2. 00:02Encrypted DoH lookups
  3. 00:03Provider identification
  4. 00:04Best-practice ruleset
Example: 8 record types patched

Want this analyzed by a human, alongside your CDN and security posture? Get a free infrastructure assessment →
The report

What you’ll get.

THE OUTPUTInside the report
Record inventoryIncluded

Every published record, grouped and annotated.

Provider & DNSSEC stateIncluded

Who answers authoritatively, and whether DNSSEC is present and valid.

Resolution timingIncluded

Where the milliseconds go between the first query and a usable answer.

Prioritized fix listIncluded

Misconfigurations ordered by user-visible impact, not alphabetically.

Freeto use, forever

No signuprequired to run it

Shareableevidence-backed reports

Live nowand free to run

What it answers

DNS Finder in four questions.

Who really runs the DNS

NS patterns identify the authoritative provider, the answer behind “who do we call when resolution breaks?”

The complete record set

A, AAAA, CNAME, MX, TXT, NS, CAA and friends, everything the domain publishes, in one inventory.

Propagation state

Whether a recent change has actually reached resolvers across regions, or is still fighting an old TTL.

What’s slowing resolution

Chained CNAMEs, extreme TTLs, missing AAAA records and lame delegations, flagged with the fix.

Under the hood

How it works.

A transparent look at exactly what the tool checks, and how it reaches its answer.

DETECTIONHow it works
  1. 01Core

    Authoritative queries

    · straight to the source

    Queries the authoritative servers directly rather than trusting a cache, so the report shows what the domain actually publishes.

  2. 02Core

    Encrypted DoH lookups

    · two independent resolvers

    Records are fetched over DNS-over-HTTPS from Google and Cloudflare, cross-checked so a single resolver’s cache can’t skew the answer.

  3. 03Core

    Provider identification

    · NS fingerprints

    Nameserver patterns map to the managed-DNS provider, the operator behind the records.

  4. 04Supporting

    Best-practice ruleset

    · audit layer

    Records are graded against a ruleset built from the DNS issues we meet in real assessments.

Use cases

Who it’s for.

Migrations

Audit before and after a DNS or CDN move, and catch the record someone forgot.

Multi-CDN steering prep

Steering strategies live or die on DNS hygiene; this is the pre-flight check.

Slow-first-visit debugging

When TTFB is fine but first visits feel slow, resolution is the usual suspect.

Domain estate audits

Sweep a portfolio of domains for expired experiments and dangling records.

Status & access

Free to use. Live now, free to run.

STATUSWhere the build stands
FREE
Freeto use, no signup
Liveand free to run
200+assessments/yr behind the data
Liveand free to run
  • Built on assessment data

    The toolkit automates the detection and benchmark data behind the assessments we already run, the tools are how we prove the data is good.

  • Free, no signup, shareable

    Every tool ships free with shareable reports; the business model is the advisory behind it, not your email address.

  • Available now

    The tool is live and free to run, with detection we keep refining as we expand our signature coverage.

LIVE NOWRun a lookup →

Want a human read on the result? A free assessment runs the same analysis, human-graded, usually within 24 hours, and gives you a benchmark against pooled volume pricing.

Live now · free to run, no signup
Keep reading

DNS Finder in context.

The research this tool automates.

Managed DNS for multi-CDN, compared→Anycast DNS providers compared→DNS TTL strategy→DNS steering vs client switching→

More free CDN World tools

All part of the same toolkit — passive, non-intrusive, no signup.

CDN Finder FreeSee which CDN (or stack) serves any siteHTTP Header Analyzer FreeGrade security headers and inspect cachingTLS & Cache Checker FreeInspect TLS config and cache behaviorWAF Detector FreeDetect the web application firewall in useBot Detection FreeDetect the bot-management / anti-bot vendor
Want the full picture?

A free assessment reviews your whole delivery and security posture, human-graded.

Get a free infrastructure assessment ↗
FAQ

DNS Finder questions,
answered straight.

Is DNS Finder live?

It’s in the first wave of the toolkit, free and with no signup — as is everything on the tools page.

Will it be free?

Yes, free with no signup, like the rest of the toolkit.

How is it different from dig or an online lookup?

A raw lookup shows you records; DNS Finder shows you what they mean: the provider behind them, the propagation state, and a graded list of what to fix, built from the ruleset we apply in paid assessments.

Does it check DNSSEC?

Yes, presence and validity are part of the standard report.

Can it audit many domains at once?

Batch auditing is on the roadmap after launch; the first release is single-domain with shareable reports.

I need a DNS answer today.

Ask for a free assessment, DNS review is part of every one we run.